Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A8DD0D910DC10523A6AD7372DD40A15D0165369.cer
File:                     6A8DD0D910DC10523A6AD7372DD40A15D0165369.cer (raw, json)
Hash identifier:          DFogpCDrEPxiSmuFCIqPKurJcgM9LBNJtjL6PDm4UEc=
Subject key identifier:   6A:8D:D0:D9:10:DC:10:52:3A:6A:D7:37:2D:D4:0A:15:D0:16:53:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20C4C1EABED87F5828EC77FE59B5DAF3091AE11E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/6A8DD0D910DC10523A6AD7372DD40A15D0165369.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Oct 2024 09:54:06 +0000
Certificate not after:    Wed 29 Oct 2025 09:59:06 +0000
Subordinate resources:    AS: 269204
                          IP: 45.181.216.0/22
                          IP: 2804:60fc::/32

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 20:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c4:c1:ea:be:d8:7f:58:28:ec:77:fe:59:b5:da:f3:09:1a:e1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 09:54:06 2024 GMT
            Not After : Oct 29 09:59:06 2025 GMT
        Subject: CN=6A8DD0D910DC10523A6AD7372DD40A15D0165369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:cb:8d:6a:2f:8c:36:c6:53:90:b1:78:ec:
                    0c:ca:73:76:88:15:91:d9:e6:a5:93:bb:5a:f5:1a:
                    75:37:9c:af:6c:a7:b0:d6:01:ab:c6:e0:03:79:cc:
                    a8:1d:23:18:10:74:c8:79:cb:3d:4e:6b:ea:d5:14:
                    1f:4c:81:2d:27:c9:9c:b3:e8:90:a4:d0:4f:f8:26:
                    ee:f5:d5:2a:80:99:b8:4d:29:97:e1:cb:79:97:5a:
                    31:f7:ca:53:c4:7b:c3:0c:21:5a:37:d0:d6:d4:ef:
                    06:71:db:85:34:2d:ac:f7:70:13:69:ec:a4:ab:ef:
                    1b:17:36:0f:f0:45:8c:b3:9d:60:f6:74:44:89:a9:
                    0a:ad:57:28:c2:18:10:35:e2:c0:a3:38:e7:dc:c7:
                    c1:e6:da:6e:f8:f2:71:a1:00:06:86:69:be:5c:a9:
                    54:89:11:45:35:a0:fe:10:77:3c:54:fd:08:3b:93:
                    09:30:41:4c:3b:9f:46:7f:b7:c3:24:42:a7:89:f5:
                    db:16:d8:13:53:e6:cb:b1:f2:f3:7e:b7:77:a4:28:
                    83:af:b1:12:ee:43:c2:75:f7:97:a0:ec:4c:7a:1e:
                    be:57:6e:f0:e6:e9:23:4a:ae:75:35:44:b1:d2:2e:
                    b8:7d:2c:5a:45:ef:fa:61:91:a4:5b:73:3b:d7:b2:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:8D:D0:D9:10:DC:10:52:3A:6A:D7:37:2D:D4:0A:15:D0:16:53:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/6A8DD0D910DC10523A6AD7372DD40A15D0165369.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.216.0/22
                IPv6:
                  2804:60fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269204

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:f3:f4:f7:b2:31:ab:76:62:a1:b0:59:8a:60:4b:62:a6:
         ab:ac:5c:8c:9d:83:81:3f:8a:97:62:4c:e6:93:86:08:6d:ed:
         d3:57:d7:3d:a1:28:01:66:45:c5:8e:c7:c2:8f:15:af:1d:18:
         b8:41:dc:a6:2b:2e:c4:64:d8:f8:a6:56:af:e0:e0:df:c1:09:
         ca:8c:e1:df:23:7e:b3:05:8a:20:71:98:bc:cc:8e:8a:9a:63:
         4d:4f:d6:e9:d2:55:2b:0a:64:ad:9d:d2:82:7d:ac:31:01:36:
         21:51:dd:82:d9:cd:61:b6:53:c8:3e:61:28:4b:e3:f7:b6:93:
         9a:60:eb:d9:b5:ca:0e:25:9d:85:15:dd:8c:77:aa:fd:02:1c:
         bd:d1:cf:f6:40:ba:56:94:ad:4f:d8:fe:ab:84:77:fa:19:f9:
         16:b0:9c:18:cb:e8:71:dc:38:f6:dd:d0:24:c7:d3:b8:8d:a9:
         34:95:14:01:49:44:a6:9f:9b:22:e5:71:2a:d4:ad:79:08:20:
         6e:5a:ac:b6:cc:91:d8:76:fc:4c:53:10:cc:70:eb:ef:ce:9f:
         76:08:9a:c8:07:7e:3e:db:fe:97:40:31:15:3f:f9:67:26:39:
         cb:ac:a9:68:81:9e:cb:fe:e1:d0:bb:a2:4d:80:03:b3:6b:2b:
         c5:a2:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 00:23:44 2024 by rpki-client on console-ams.rpki-client.org