Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/696FC8A2C502940E2825B88248E05882327C131C.cer
File:                     696FC8A2C502940E2825B88248E05882327C131C.cer (raw, json)
Hash identifier:          L8ZzManztzMp4SIntRa0lmYEAflv5TdYKw263eLlXNU=
Subject key identifier:   69:6F:C8:A2:C5:02:94:0E:28:25:B8:82:48:E0:58:82:32:7C:13:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F89602129FA601CDC46F568C78C1F6B19F1ACAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:40:26 +0000
Certificate not after:    Thu 03 Apr 2025 01:45:26 +0000
Subordinate resources:    AS: 273658
                          IP: 2804:8a44::/32

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 15:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:60:21:29:fa:60:1c:dc:46:f5:68:c7:8c:1f:6b:19:f1:ac:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:40:26 2024 GMT
            Not After : Apr  3 01:45:26 2025 GMT
        Subject: CN=696FC8A2C502940E2825B88248E05882327C131C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:41:50:d6:76:0d:47:98:0d:04:32:ea:60:
                    ab:35:38:eb:66:3b:8e:14:55:31:dd:a7:e2:5a:4a:
                    cf:0f:ca:c1:f0:78:6f:18:5f:1b:00:9d:9c:b9:f1:
                    63:98:84:c1:3f:57:72:ff:2f:7b:36:03:2e:9a:e7:
                    43:35:69:32:7c:7e:d7:96:4e:37:f1:32:46:b3:49:
                    25:0b:35:8c:0c:a8:dc:f8:01:ac:3d:ea:c3:08:96:
                    75:f7:ec:ba:95:c4:d6:cf:1b:df:b0:b2:eb:53:81:
                    8d:cd:7d:63:f3:3b:89:af:2b:78:d2:f5:2d:11:0e:
                    be:ed:8e:16:a5:c7:ff:9a:4a:cf:25:af:50:73:c6:
                    a0:52:e0:ef:06:ad:bd:75:ba:b5:c3:ca:53:ca:b4:
                    79:99:c0:dd:ac:1e:47:de:23:38:4f:b1:c1:64:40:
                    47:b1:6e:08:d5:80:4f:e2:e5:41:7c:40:b8:8f:18:
                    6c:4d:b3:dc:73:ac:6d:28:74:cb:35:50:a7:b3:13:
                    55:c9:b8:55:e8:29:42:de:6f:49:5e:1a:e1:76:3e:
                    b1:ac:4d:9d:c9:42:90:6d:e8:e9:e5:ad:3b:2a:99:
                    36:7d:2a:89:4b:67:c4:6c:7b:4c:4a:40:9e:5e:a4:
                    b8:09:18:55:60:54:e9:86:e6:6b:66:cb:f6:00:49:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:6F:C8:A2:C5:02:94:0E:28:25:B8:82:48:E0:58:82:32:7C:13:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273658

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:bf:6a:ee:a1:1f:ec:1b:7c:96:61:60:36:28:b8:f9:87:
         09:97:de:cd:8c:ab:4e:b2:ac:86:ac:b6:17:6e:b2:70:4b:bd:
         01:f5:20:11:2a:49:20:b3:e9:31:6b:49:ed:f7:f4:dc:a9:76:
         0f:94:44:c9:c4:75:a9:73:e2:70:dd:2a:cf:4e:fc:e6:12:1d:
         26:15:39:17:7e:49:ac:49:83:6a:27:cf:d1:6e:ee:8a:81:2e:
         89:73:1e:a0:3f:43:b3:49:7b:e5:e4:b4:ca:64:4d:93:38:9a:
         41:d3:39:b7:d2:27:2e:63:51:e8:94:e9:39:3f:c9:07:b9:29:
         79:db:11:bc:dd:53:63:e5:57:08:f8:5a:91:94:aa:4c:4a:64:
         bf:d5:1d:a3:5b:05:8a:03:99:7a:dc:f8:5d:b4:48:56:1c:46:
         89:cc:60:c4:6d:24:5a:0e:d1:7a:39:49:be:f6:0b:64:f2:3c:
         84:d2:21:5e:e4:28:4b:e7:2d:bb:88:c6:33:2b:0e:16:1e:a5:
         e3:cf:b1:fe:4c:74:9b:f5:e9:60:e7:7b:80:09:42:82:ef:f8:
         e5:19:f2:2f:87:05:6b:93:1c:60:b7:e5:9c:73:ed:4c:1a:09:
         c1:a6:ae:15:e4:fd:dc:3a:73:bf:cb:2d:9f:86:73:7d:29:69:
         fc:a9:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org