Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/654FCC0BEBEF312A51F2E3DD40964530988C5D12.cer
File:                     654FCC0BEBEF312A51F2E3DD40964530988C5D12.cer (raw, json)
Hash identifier:          EEk9bEYynlxgMuPRDX8URaFu64UNSi4wcgljCAtN74c=
Subject key identifier:   65:4F:CC:0B:EB:EF:31:2A:51:F2:E3:DD:40:96:45:30:98:8C:5D:12
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E936855BF0ECB0373CE3CF0D6591651B4AEDA70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/654FCC0BEBEF312A51F2E3DD40964530988C5D12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jun 2024 21:05:16 +0000
Certificate not after:    Thu 12 Jun 2025 21:10:16 +0000
Subordinate resources:    AS: 269724
                          IP: 45.189.160.0/22
                          IP: 2804:68e8::/32

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:68:55:bf:0e:cb:03:73:ce:3c:f0:d6:59:16:51:b4:ae:da:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 13 21:05:16 2024 GMT
            Not After : Jun 12 21:10:16 2025 GMT
        Subject: CN=654FCC0BEBEF312A51F2E3DD40964530988C5D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:ea:4f:0e:39:4b:04:59:81:39:84:85:21:
                    55:ae:6e:3c:11:cd:c6:ac:b5:d8:c7:3a:be:a8:39:
                    16:13:9b:65:e5:e4:d3:12:8f:2e:6d:7a:1c:6c:7d:
                    12:ff:4e:cc:6f:5b:79:81:a9:d8:fa:de:09:a3:d5:
                    bb:01:70:5e:30:c0:fe:48:0c:ad:3b:3b:80:6b:f3:
                    2a:18:17:6b:dd:88:f8:9e:23:97:57:7f:d2:01:35:
                    ed:b9:0c:17:16:ea:02:f7:3f:94:99:a2:2c:b7:55:
                    75:9a:bd:97:a5:82:fe:24:86:82:3c:40:c3:f8:42:
                    c7:6e:d5:7a:49:cd:f4:90:c6:47:97:1e:67:d1:94:
                    cb:79:12:7f:ae:1b:83:ae:6b:87:50:86:40:12:f8:
                    7e:45:0e:54:80:b5:56:d3:9c:d2:04:fd:be:c1:10:
                    ba:16:18:28:63:1b:a1:f3:86:c7:71:18:c2:58:5b:
                    a0:a1:7f:a2:85:96:db:5f:ed:d3:06:0d:64:ab:9b:
                    60:71:d9:8c:f7:00:e6:ec:5d:b4:f5:c2:10:e3:ad:
                    60:ad:20:43:06:80:10:85:e7:43:f3:75:77:0a:60:
                    0d:72:2f:69:2d:24:8d:2b:55:78:de:12:8c:c7:7b:
                    52:ac:2f:36:0c:10:7f:f5:70:67:c4:66:e3:7a:9e:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:4F:CC:0B:EB:EF:31:2A:51:F2:E3:DD:40:96:45:30:98:8C:5D:12
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/654FCC0BEBEF312A51F2E3DD40964530988C5D12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.160.0/22
                IPv6:
                  2804:68e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269724

    Signature Algorithm: sha256WithRSAEncryption
         09:95:65:30:c2:4c:56:ff:dc:94:2a:12:aa:df:3d:a4:10:2f:
         0d:ff:1f:a7:78:b1:d8:d8:49:ed:a5:fb:bc:a4:22:12:af:00:
         47:a1:e2:9a:1c:e2:fb:51:18:71:61:a9:05:c6:c0:ea:b8:b4:
         1a:77:b9:83:c1:7d:98:8f:ad:30:63:39:c8:9a:f8:c8:c6:ab:
         e9:be:45:ce:b5:a1:1f:0f:46:ad:8c:86:a8:05:f7:c7:4c:92:
         64:19:be:04:ea:e2:7f:08:a5:8f:8e:5a:6c:ee:b0:ac:db:98:
         5c:a4:e5:b1:44:d5:86:9d:af:f1:d3:d5:11:8f:64:ca:a2:80:
         e3:88:30:d5:8f:bd:ea:76:ce:ea:7e:d0:97:88:b0:87:4f:b7:
         a2:29:26:cc:71:2a:e3:50:ac:2c:1a:a8:1d:10:c1:95:91:1c:
         a1:05:e8:e7:ab:03:9a:43:11:34:60:8b:3e:c4:2e:9e:b2:68:
         68:c0:ad:c3:39:b1:2a:27:66:a3:6e:06:f5:5d:6a:d0:1e:62:
         a3:78:7c:38:14:2a:57:70:09:58:79:62:6a:ad:2d:ae:20:c5:
         7b:52:6f:66:22:0a:03:fb:7d:07:74:f2:c4:a4:a1:39:85:db:
         4b:fe:5b:9f:34:f0:ff:b3:4c:ce:ce:22:7a:c5:b2:44:3d:9e:
         d0:8b:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 16:45:04 2024 by rpki-client on console-ams.rpki-client.org