Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6AEDFE016AEB1BCFA9A3452C872B54518931AF2A.cer
File:                     6AEDFE016AEB1BCFA9A3452C872B54518931AF2A.cer (raw, json)
Hash identifier:          jWV2JuVt4x5hjAir46nqJF5kAqVBCe7wlMMCJr8prd8=
Subject key identifier:   6A:ED:FE:01:6A:EB:1B:CF:A9:A3:45:2C:87:2B:54:51:89:31:AF:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       580DF0805F13DD2A464B9F80813689045629A587
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/1/6AEDFE016AEB1BCFA9A3452C872B54518931AF2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:42 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:42 +0000
Subordinate resources:    AS: 264316
                          IP: 138.122.40.0/22
                          IP: 168.121.216.0/22
                          IP: 2804:25fc::/32

Validation:               Failed, certificate revoked on Wed 15 May 2024 18:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0d:f0:80:5f:13:dd:2a:46:4b:9f:80:81:36:89:04:56:29:a5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:42 2024 GMT
            Not After : Apr  2 18:31:42 2025 GMT
        Subject: CN=6AEDFE016AEB1BCFA9A3452C872B54518931AF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:97:48:db:3e:04:92:cd:9d:fc:d5:00:04:
                    4f:2e:7e:35:82:c8:4d:60:1d:40:8e:ab:bb:b4:43:
                    56:bd:7d:01:31:59:05:ad:9d:57:36:45:dd:bd:9a:
                    c4:d8:61:54:e5:c8:7e:4c:75:f0:31:47:c9:b3:2b:
                    69:b8:f7:35:3d:a6:51:b5:34:96:27:96:8b:84:02:
                    fa:29:54:65:db:8e:07:d9:7b:c1:b5:75:19:56:de:
                    61:f6:db:80:a9:37:5f:77:60:b7:98:8b:96:de:de:
                    7c:73:99:f8:95:56:61:5c:24:d5:17:78:52:6c:b8:
                    4d:32:1e:76:4f:42:71:94:3c:05:22:3f:f8:54:50:
                    09:ee:02:42:74:8e:18:18:1c:0b:34:1e:13:11:68:
                    3f:97:cf:6b:21:8d:6d:3e:31:7d:b6:0f:2c:ea:17:
                    8b:c9:bb:5a:6b:28:56:3c:1d:40:37:20:bf:07:13:
                    71:be:34:0d:58:b3:25:3f:6a:48:be:45:54:67:4e:
                    1f:71:49:1d:02:31:35:cc:c3:be:0c:5f:51:95:41:
                    52:ba:f8:72:8b:c9:3e:36:bf:21:ca:05:68:1c:e8:
                    3a:ac:14:31:32:9e:de:78:22:6d:87:d2:41:12:cc:
                    d1:81:60:59:38:47:93:b5:e5:07:5e:d2:f8:b0:e0:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:ED:FE:01:6A:EB:1B:CF:A9:A3:45:2C:87:2B:54:51:89:31:AF:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/1/6AEDFE016AEB1BCFA9A3452C872B54518931AF2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.40.0/22
                  168.121.216.0/22
                IPv6:
                  2804:25fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264316

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:aa:3e:75:40:d0:7c:ad:ea:0f:05:16:fc:18:78:fd:5f:
         f7:50:10:57:22:38:7e:93:3e:4b:e5:36:c7:c6:3c:d7:9d:3b:
         ef:09:1d:33:72:f9:a8:f4:d9:84:c0:c0:72:da:d5:4d:7a:89:
         4c:d1:76:2c:11:c4:bd:1c:09:a7:8f:1c:a1:c0:84:98:1e:2b:
         39:0d:a5:dc:ae:a6:0f:b7:42:76:61:98:a2:0e:30:ef:32:43:
         4d:8c:45:fb:84:a4:b2:f5:ae:19:9c:02:47:9a:29:e8:40:33:
         ea:c0:47:48:2c:ed:04:ba:45:af:4f:f1:9a:3d:52:42:17:ac:
         0c:f8:02:1b:79:7b:00:3c:6a:e5:92:4a:28:85:d3:1c:36:0a:
         07:f6:d2:e7:1e:74:07:91:32:37:cc:e4:ca:ff:0c:1b:fc:17:
         c2:da:f0:b4:b5:61:d5:0e:ed:09:55:21:fa:00:31:9f:02:09:
         2b:2e:aa:78:28:1d:74:5c:46:ac:6c:81:91:6b:a5:df:a3:5c:
         67:ad:da:25:43:59:06:81:59:f4:33:99:58:c7:40:31:d4:60:
         8a:62:76:da:e9:f4:24:c1:c2:52:7a:28:d0:68:28:b5:3c:ca:
         bf:2e:cd:dc:d9:e8:47:e8:1b:e4:9d:a6:a2:58:95:4c:bd:95:
         93:b9:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org