Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.cer
File:                     6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.cer (raw, json)
Hash identifier:          npP1Lsb7VnDhjdSUuWVY0Tdsyhd024ECe+olz6VjHjk=
Subject key identifier:   66:77:A8:55:E1:29:5A:DD:8D:6E:69:EE:88:1A:99:F6:D5:DD:6D:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18AC2E661317F1B356BC2F9A9A5EEE85092CB60F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 Aug 2024 19:22:46 +0000
Certificate not after:    Sun 03 Aug 2025 19:27:46 +0000
Subordinate resources:    AS: 273564
                          IP: 2804:90a0::/32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 20:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ac:2e:66:13:17:f1:b3:56:bc:2f:9a:9a:5e:ee:85:09:2c:b6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  4 19:22:46 2024 GMT
            Not After : Aug  3 19:27:46 2025 GMT
        Subject: CN=6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:25:07:d5:de:cd:ad:be:fd:24:16:7c:36:
                    83:13:a4:5a:b0:99:ae:53:a3:bf:c6:fc:fd:9a:97:
                    5b:17:6e:9c:8e:48:70:30:92:c7:7e:8e:e3:24:9d:
                    0e:4c:a4:21:39:52:5c:ce:2c:fb:b5:61:f8:3d:a0:
                    5e:81:5e:7e:8d:50:67:ec:ad:e7:41:fe:fc:38:c3:
                    21:76:f1:be:3d:79:04:62:6e:41:51:19:55:af:6c:
                    bf:8e:af:15:ec:ff:dd:74:f4:82:a0:4b:04:67:5b:
                    29:0a:83:b9:2e:06:2a:b9:af:47:cb:db:1d:14:a0:
                    b5:e3:5b:c3:35:24:45:91:2b:8f:16:4d:3e:40:ad:
                    03:a3:34:10:da:a8:c8:3f:94:27:95:ea:20:3a:07:
                    34:23:36:26:3e:65:c2:e4:50:2c:a6:9e:22:41:3e:
                    f7:c4:d7:21:e1:94:8d:a9:c1:56:22:0d:13:b7:98:
                    6d:1f:fd:48:35:50:51:7d:bd:78:05:dd:4c:af:9c:
                    2d:c1:31:f7:26:43:28:80:67:01:55:0d:d8:ff:b9:
                    e8:50:74:b8:e3:83:d7:b5:33:85:09:59:06:2b:bd:
                    77:8d:4c:15:3f:aa:28:09:a6:49:11:c0:a5:26:6d:
                    4e:14:3f:f2:3b:90:b1:3f:db:88:25:b9:3e:cf:3d:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:77:A8:55:E1:29:5A:DD:8D:6E:69:EE:88:1A:99:F6:D5:DD:6D:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/6677A855E1295ADD8D6E69EE881A99F6D5DD6D8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273564

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:1d:15:47:ff:d5:70:22:9d:b8:c4:44:c6:ba:fd:14:29:
         64:de:c7:58:de:67:7e:4b:0d:a0:78:b4:07:fd:81:5e:4c:dd:
         15:a8:7d:b4:a8:54:68:bd:3f:26:71:92:40:1d:9f:6a:d8:71:
         f6:9b:9c:53:0d:ba:9b:3d:09:34:3e:59:44:8c:a8:c5:74:f3:
         df:6a:0f:3f:2a:41:27:16:2b:52:db:c2:54:7b:30:91:b5:28:
         6c:6e:04:3e:2f:2e:66:6d:7a:29:b9:84:c3:98:3b:1c:7d:ad:
         b0:90:4f:28:ad:6b:b0:29:8f:1b:25:4b:a4:68:6e:a5:29:52:
         c2:3a:cc:fc:b0:b2:e5:ba:a5:f5:c7:8f:63:bb:3f:1c:ae:04:
         ef:e6:1d:ae:45:26:07:c3:18:95:22:41:af:88:88:65:60:93:
         a1:f1:fe:45:85:a2:53:a3:52:b9:10:36:f4:51:91:22:6a:90:
         e4:f2:25:70:64:a8:5f:cf:d6:5f:82:99:f4:32:27:d7:77:d8:
         4d:45:75:dd:5f:3e:68:29:f7:d6:8d:4b:99:a3:8d:d8:8f:1d:
         6e:3a:f9:f8:2b:8d:c6:29:99:e7:d7:dc:03:c0:bd:94:30:61:
         b6:e3:e2:3f:f7:05:18:19:08:f7:98:77:86:8b:d3:a7:0a:73:
         81:ee:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 22:22:32 2024 by rpki-client on console-fra.rpki-client.org