Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B000F8A633C0B39C38D951C0A953771C088CEC7.cer
File:                     6B000F8A633C0B39C38D951C0A953771C088CEC7.cer (raw, json)
Hash identifier:          Fel5In/cj4d3GlPmIkPYMRyjvUzzzHQqoEg1I8TW6uM=
Subject key identifier:   6B:00:0F:8A:63:3C:0B:39:C3:8D:95:1C:0A:95:37:71:C0:88:CE:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37ED0D3A05A57F2134147D887CDAFF9682A6CA86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/6B000F8A633C0B39C38D951C0A953771C088CEC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 17:26:38 +0000
Certificate not after:    Mon 07 Apr 2025 17:31:38 +0000
Subordinate resources:    AS: 265102
                          IP: 170.254.96.0/22
                          IP: 2804:32e0::/32

Validation:               Failed, certificate revoked on Thu 09 May 2024 18:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ed:0d:3a:05:a5:7f:21:34:14:7d:88:7c:da:ff:96:82:a6:ca:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  8 17:26:38 2024 GMT
            Not After : Apr  7 17:31:38 2025 GMT
        Subject: CN=6B000F8A633C0B39C38D951C0A953771C088CEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:8a:b0:d4:73:e8:97:dc:02:36:4c:78:5d:
                    d3:12:f5:8d:3d:3d:69:0d:bc:00:b3:7c:3e:26:d5:
                    5e:36:8d:3f:5e:4c:98:0e:07:e8:19:c5:49:5e:36:
                    c4:8c:1a:a0:99:84:41:c0:8c:e4:97:1c:20:3a:84:
                    7c:c5:b1:e0:e7:79:81:04:ce:54:4c:29:c8:ed:49:
                    60:90:bd:c6:bb:3f:9c:ad:3e:52:93:62:55:c0:89:
                    ee:21:7c:7c:b0:f3:3f:76:1f:0a:c4:cd:05:26:c0:
                    cb:e8:89:70:cd:f1:a7:29:ff:53:ae:59:cf:34:65:
                    8a:8d:99:02:6a:0c:c4:47:bb:8c:e9:fb:a6:ec:3b:
                    f0:87:46:cf:52:0a:d1:97:02:ee:e3:d8:94:3d:6a:
                    2f:de:ca:b0:fb:de:a9:59:93:48:f5:cf:52:21:ce:
                    bf:b8:9d:8d:bb:2f:bc:f3:49:5e:04:47:98:e7:86:
                    92:4d:11:58:bf:04:b9:c5:45:8b:92:3b:4e:05:a1:
                    a6:ba:bd:f3:40:26:00:0c:aa:33:91:7d:22:e1:40:
                    65:c7:d5:97:33:62:c8:df:dc:e3:b1:8d:03:35:fc:
                    14:55:87:92:a5:db:1b:25:02:7d:7b:3d:c0:41:97:
                    e5:7e:ca:f2:0a:98:4c:d4:3c:67:6f:0e:6a:8f:26:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:00:0F:8A:63:3C:0B:39:C3:8D:95:1C:0A:95:37:71:C0:88:CE:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/6B000F8A633C0B39C38D951C0A953771C088CEC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
                IPv6:
                  2804:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265102

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:1a:d1:de:76:ec:7e:e2:93:49:0e:1c:c6:45:40:3f:9a:
         3b:11:bd:c1:93:b6:6f:e3:6c:84:ec:73:98:40:ce:1c:da:d3:
         ea:ee:c3:7c:df:64:b5:3e:a7:9a:fd:25:61:ee:bf:28:f5:da:
         30:b5:ac:08:c8:69:67:dc:20:b4:a2:aa:82:32:12:21:3c:72:
         65:41:3a:b3:e5:5f:47:9f:2d:04:13:78:60:4b:9d:cd:f4:40:
         b9:83:ec:6a:f3:13:56:24:e8:5f:51:7d:46:87:d4:27:9c:fb:
         45:dd:8b:46:b6:5c:df:ab:58:7b:cf:86:fd:94:30:d6:f6:9b:
         c5:46:79:57:20:a7:af:c9:7a:9d:2f:46:76:43:fa:93:47:9f:
         b9:dc:6d:6c:c6:2a:1b:39:5e:73:30:b4:d8:21:02:97:69:76:
         47:c4:a0:a8:ec:5f:d2:5f:d4:e2:a2:92:5a:93:db:1f:57:74:
         2a:d6:14:a3:a6:9b:bc:ea:8b:46:05:1b:07:4b:53:d5:be:7a:
         55:74:63:fe:e2:36:78:60:23:5a:84:42:77:9f:5d:a4:71:4a:
         7d:82:11:76:81:90:b4:7b:2c:c3:e1:67:77:4e:5b:62:06:7b:
         56:da:ec:6b:65:7e:26:19:a3:e8:99:6c:8a:48:91:a7:71:3a:
         a8:79:ae:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org