Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69C84B4FE07224676271E7441672CC89CF6BCC57.cer
File:                     69C84B4FE07224676271E7441672CC89CF6BCC57.cer (raw, json)
Hash identifier:          ULpaw5PUFg4CISmFymrq1KTiO2okegSeJLR52SUrkqE=
Subject key identifier:   69:C8:4B:4F:E0:72:24:67:62:71:E7:44:16:72:CC:89:CF:6B:CC:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       39AB65FC1E312F7F293AF7A7C122E01FEFC110DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/1/69C84B4FE07224676271E7441672CC89CF6BCC57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:50 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:50 +0000
Subordinate resources:    AS: 263982
                          IP: 138.255.232.0/22
                          IP: 168.197.236.0/22
                          IP: 168.205.172.0/22
                          IP: 2804:28d0::/32

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 13:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ab:65:fc:1e:31:2f:7f:29:3a:f7:a7:c1:22:e0:1f:ef:c1:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=69C84B4FE07224676271E7441672CC89CF6BCC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:7f:a3:fd:4a:88:11:86:3f:a8:ea:eb:ab:
                    09:d5:69:7e:1c:21:02:12:38:c3:4e:be:4e:e3:4e:
                    3a:b9:d3:6f:48:f1:da:81:d4:7f:ef:f6:d5:36:f3:
                    2a:84:8c:5e:d7:3a:b5:c2:11:d8:37:7a:3f:de:01:
                    7e:d7:bf:20:32:cb:57:2c:4f:e2:6c:ba:f2:14:d8:
                    60:39:fa:aa:79:4f:c9:d5:2c:87:bb:40:97:35:2a:
                    90:b2:3e:5e:e1:14:c2:d9:7a:fc:d5:ec:fb:13:60:
                    f0:29:fc:18:ec:12:cc:7b:22:11:b8:4a:ee:6f:50:
                    82:7b:00:1e:2d:84:76:ee:f6:f3:84:6a:68:ba:69:
                    73:0a:d1:dc:39:14:36:0c:9b:4d:51:e8:34:c9:ff:
                    bb:21:b3:0a:df:a2:fa:de:1e:1b:0a:e1:01:cb:45:
                    c6:11:1c:7e:25:73:f9:4e:f9:6a:b8:85:43:e0:88:
                    56:ff:00:03:64:35:e6:bd:e4:67:56:2e:36:ae:74:
                    aa:10:b9:da:16:90:d5:50:97:42:7c:69:29:14:b6:
                    ab:f1:3b:a7:4d:0a:a0:10:fb:4e:27:84:a7:e0:ed:
                    23:6b:ad:c2:69:3d:a6:51:cc:90:51:6e:e2:7b:0a:
                    d0:aa:7d:30:a9:d5:14:ef:ca:7c:1c:49:a3:7e:a2:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:C8:4B:4F:E0:72:24:67:62:71:E7:44:16:72:CC:89:CF:6B:CC:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/1/69C84B4FE07224676271E7441672CC89CF6BCC57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.232.0/22
                  168.197.236.0/22
                  168.205.172.0/22
                IPv6:
                  2804:28d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263982

    Signature Algorithm: sha256WithRSAEncryption
         11:db:24:1e:80:10:d4:e7:9b:71:e9:a2:d9:b2:b6:c6:bb:cf:
         6d:59:a4:da:42:f6:52:54:d4:1d:c6:44:f5:42:93:e8:63:5a:
         0c:92:42:10:3f:d5:54:7b:04:f9:10:e8:c3:8e:1b:a2:bb:b2:
         48:d8:65:fc:fd:a5:79:60:1e:39:87:8d:9d:c1:2f:88:8d:50:
         c9:12:51:41:f7:78:90:98:fd:b3:97:65:5a:43:9a:89:f8:96:
         3e:9b:f0:2b:fd:56:c9:18:09:e9:df:02:e9:82:7f:6f:6f:c1:
         0a:b5:14:4f:5f:c8:86:55:8d:4c:8b:b1:d2:48:4b:76:23:64:
         33:45:35:e5:6f:b1:33:5a:0f:f6:c1:5a:65:e3:e0:95:78:f1:
         f1:fd:1a:bf:61:ef:36:b1:5a:77:af:48:ef:0a:ef:c0:25:8a:
         35:b6:27:7a:f1:32:9f:bd:61:82:a5:dd:46:07:ad:83:fc:e6:
         5e:7d:5f:e1:59:84:85:86:25:2c:97:b0:39:4e:bb:4e:6c:61:
         a1:df:af:9f:4c:96:c7:8a:12:72:e5:42:99:5e:67:b1:5a:75:
         5e:01:c4:51:bf:a6:ac:8a:cf:a2:ef:3c:95:6f:1d:1b:fc:10:
         a8:ad:d5:ce:98:2f:72:ba:ae:1c:3f:aa:26:e1:26:bf:40:6b:
         69:d1:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:45:53 2024 by rpki-client on console-ams.rpki-client.org