Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer
File:                     693F6FE5908AC83D8E07CCD94B49D5502D3FE383.cer (raw, json)
Hash identifier:          MpYGX+Xqk3SErdoJ/NxX0gjclrvhoduT7t/VjpSDuQk=
Subject key identifier:   69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       649E6427CA3F015AE5933D72E252DC0E2B9555BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Aug 2024 01:53:01 +0000
Certificate not after:    Mon 04 Aug 2025 01:58:01 +0000
Subordinate resources:    AS: 270706
                          IP: 189.127.152.0/22
                          IP: 2804:701c::/32

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 07:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9e:64:27:ca:3f:01:5a:e5:93:3d:72:e2:52:dc:0e:2b:95:55:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  5 01:53:01 2024 GMT
            Not After : Aug  4 01:58:01 2025 GMT
        Subject: CN=693F6FE5908AC83D8E07CCD94B49D5502D3FE383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:50:0a:c1:5c:c6:4a:ec:b6:52:d8:4f:a9:
                    cb:62:79:38:e1:6b:a3:b1:90:8b:c0:a7:c4:77:5e:
                    44:02:3f:e4:4c:ad:81:5a:40:ee:33:b1:a5:f3:40:
                    15:cc:76:78:d3:76:88:eb:ae:c3:a0:ad:04:14:a2:
                    9d:de:08:af:e0:13:4f:74:02:dd:87:16:ed:e3:9e:
                    d0:41:dc:d9:24:78:02:e4:57:b2:0b:e8:80:25:26:
                    a2:ef:16:1d:2c:37:6c:eb:6a:82:8a:89:06:28:36:
                    4b:7e:9b:9a:b9:d0:91:bb:6e:b4:ab:79:95:72:04:
                    ad:0d:fe:b2:c8:d3:53:21:33:bb:ea:fb:bc:fe:b0:
                    ac:0c:5d:90:06:8d:ef:0c:60:6f:3a:66:bc:22:34:
                    bc:b4:ad:92:51:c6:57:9b:fb:f0:0f:95:a4:8a:0d:
                    11:6a:5b:ad:a8:7e:a2:f9:f3:19:da:f0:d6:26:1f:
                    03:85:fd:af:e2:7a:d8:3d:56:2e:d5:07:75:2c:0a:
                    2e:8d:9f:fe:8b:6c:9c:e5:82:cd:b1:76:12:70:8a:
                    c7:f7:da:27:3f:04:f5:ad:f4:d9:c1:a2:8f:87:79:
                    c8:2b:2e:a8:56:7b:2c:76:ed:bf:9d:63:cb:ba:6e:
                    8e:c8:b3:d1:53:3f:22:3b:39:02:15:6a:31:b6:4b:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:3F:6F:E5:90:8A:C8:3D:8E:07:CC:D9:4B:49:D5:50:2D:3F:E3:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/693F6FE5908AC83D8E07CCD94B49D5502D3FE383.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.152.0/22
                IPv6:
                  2804:701c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270706

    Signature Algorithm: sha256WithRSAEncryption
         aa:16:70:1f:6d:5a:fa:cc:bd:96:00:75:72:16:5f:ac:0f:79:
         c2:0f:bf:f6:06:31:a4:6c:92:df:e8:03:8f:16:43:e9:ce:08:
         d1:37:7c:ea:40:9d:36:77:c5:61:fd:a8:60:46:25:96:9f:b7:
         89:fd:a8:1f:84:7b:46:6b:e4:c6:2f:4d:d1:cb:4b:30:0a:9d:
         fd:7f:0c:03:3e:97:52:c8:aa:cf:d4:ce:fa:e8:10:7f:7c:a8:
         3e:40:6c:70:fa:d8:64:41:0f:44:ea:ca:24:a9:47:c2:37:b0:
         49:72:f5:8a:6e:a8:fb:e7:e4:67:f2:d9:f0:99:fb:26:0b:eb:
         3b:b2:1e:59:10:40:31:4f:ca:32:98:51:db:91:d9:53:42:37:
         af:09:10:8f:e2:11:47:52:95:57:7b:18:93:b8:e9:08:e1:16:
         f8:39:3a:74:69:42:a5:be:56:f9:65:54:1d:90:7e:d8:92:0b:
         a1:f0:d9:b4:5c:f7:9d:b5:69:dd:ce:31:70:c3:14:9c:35:8b:
         f8:19:55:bc:f2:13:ad:6a:7f:2f:e5:06:bb:a2:61:4f:ac:c8:
         e5:ca:81:fd:c8:19:c2:47:50:e6:a7:63:74:05:cd:06:71:88:
         4b:50:7e:a6:02:b5:fd:31:f5:af:99:61:db:cb:41:d2:33:86:
         15:9e:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 09:18:40 2024 by rpki-client on console-ams.rpki-client.org