Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.cer
File:                     6AF93D06DE8602708FC91E444243E5ACC4478F02.cer (raw, json)
Hash identifier:          MRA3Nf//K/QkYMbTBjM6HhWvr/gILszyDxX+FRlo4eA=
Subject key identifier:   6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6473A93633FB5F2E8037BEC3F3D02C73EBEB803F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:55:09 +0000
Certificate not after:    Thu 03 Apr 2025 11:00:09 +0000
Subordinate resources:    AS: 263611
                          IP: 179.124.16.0/20
                          IP: 2804:ff8::/32

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 13:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:73:a9:36:33:fb:5f:2e:80:37:be:c3:f3:d0:2c:73:eb:eb:80:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:55:09 2024 GMT
            Not After : Apr  3 11:00:09 2025 GMT
        Subject: CN=6AF93D06DE8602708FC91E444243E5ACC4478F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d1:aa:45:50:5d:03:62:bb:3e:da:03:2c:cc:
                    2b:1b:5c:6d:10:17:a1:cb:0e:43:5c:8c:e5:cd:87:
                    e9:af:ec:fa:62:6f:5f:20:b3:32:df:33:8e:57:e7:
                    be:5a:05:c6:e4:9a:f3:8a:bd:6a:3a:94:e7:52:c1:
                    07:ae:09:c7:a4:e5:c4:09:0f:86:78:b5:99:d8:d7:
                    31:2e:5d:7b:2c:8a:c6:30:f5:18:ea:99:9e:6f:d0:
                    82:18:90:32:81:8b:a1:0b:42:7b:64:a4:c9:c4:75:
                    32:37:36:32:da:47:24:93:31:02:5f:29:82:8f:43:
                    0a:ac:c5:54:1c:db:98:cf:d9:9d:5c:6c:4c:16:ef:
                    4a:3d:8b:43:da:ba:4c:d5:1c:e6:71:b6:31:9f:f1:
                    5b:96:e6:41:e1:17:54:28:03:68:22:55:50:78:f2:
                    e9:80:90:2e:88:97:2f:a6:62:8a:99:57:f1:2b:a5:
                    65:eb:73:e3:c8:f5:21:fd:02:69:64:ff:16:db:9b:
                    b5:03:ff:96:b6:3b:45:03:39:c9:24:cb:bb:c1:2c:
                    1f:e0:6b:8b:3b:63:04:31:8f:a9:dd:09:cd:2e:91:
                    c2:5c:43:17:51:54:ad:34:38:8f:d0:42:55:0f:ae:
                    b2:b7:3a:4b:7c:ba:23:c7:90:81:09:ef:ff:23:72:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:F9:3D:06:DE:86:02:70:8F:C9:1E:44:42:43:E5:AC:C4:47:8F:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/1/6AF93D06DE8602708FC91E444243E5ACC4478F02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.16.0/20
                IPv6:
                  2804:ff8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263611

    Signature Algorithm: sha256WithRSAEncryption
         54:54:11:a7:e2:34:68:cd:db:30:2b:3c:d3:89:01:59:71:b2:
         84:60:16:b8:e4:c7:24:0e:c1:b2:78:74:9d:ec:cb:c9:55:d0:
         e7:3d:e9:59:4a:7e:18:e9:58:d2:17:d6:95:44:8e:6f:51:ab:
         e8:c6:62:0c:69:fd:87:5b:73:98:1f:4f:e3:32:e6:14:d1:d6:
         85:a1:47:61:df:ef:fb:58:79:f9:f7:47:aa:9c:2a:53:75:ab:
         cb:7c:54:87:7a:75:17:5d:99:8c:28:6d:57:f0:3d:39:4e:ea:
         7c:5a:7a:5b:71:fc:68:17:ce:4b:43:2e:f7:05:fb:8b:48:68:
         ee:5d:76:f4:5a:40:70:6b:ec:2f:15:90:61:ac:72:ea:4b:54:
         0e:73:7b:6a:d3:e4:a0:80:17:d7:e4:d7:15:b1:6b:0d:4a:aa:
         16:61:81:a4:a5:47:53:f5:da:54:76:19:67:74:bb:03:3b:14:
         f1:53:74:c7:05:ae:85:9b:2e:04:dd:59:1f:c7:fa:28:28:4e:
         99:3f:90:ea:aa:20:67:2d:2c:19:3b:6e:f2:22:5d:91:ff:37:
         99:90:6a:cb:60:58:98:01:16:6d:f7:4a:4e:06:0d:25:d8:17:
         f6:ef:22:48:e8:04:4d:2d:a3:6f:95:3b:1d:05:01:c2:73:15:
         8f:e9:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 14:43:01 2024 by rpki-client on console-ams.rpki-client.org