Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.cer
File:                     6B1752AA3446916E5297A6E09C7C08107A973A4C.cer (raw, json)
Hash identifier:          6DXKkoACRmg0n+2UlxmlfgGR7xPoSKbTbi62VtKj8oE=
Subject key identifier:   6B:17:52:AA:34:46:91:6E:52:97:A6:E0:9C:7C:08:10:7A:97:3A:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59B77F52A0F4C00DCAEE53E09EC8FDC5942F7412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:56:39 +0000
Certificate not after:    Thu 03 Apr 2025 16:01:39 +0000
Subordinate resources:    AS: 264889
                          IP: 168.227.220.0/22
                          IP: 2804:2f68::/32

Validation:               Failed, certificate revoked on Wed 01 May 2024 20:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b7:7f:52:a0:f4:c0:0d:ca:ee:53:e0:9e:c8:fd:c5:94:2f:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:56:39 2024 GMT
            Not After : Apr  3 16:01:39 2025 GMT
        Subject: CN=6B1752AA3446916E5297A6E09C7C08107A973A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:8a:91:ea:98:85:ab:e5:e0:7c:26:3a:1b:
                    f9:14:33:2c:b5:c1:5a:12:a9:28:7c:4c:ec:fc:68:
                    7a:d8:ea:7c:58:a0:20:08:52:90:17:b3:90:33:1a:
                    8a:9c:b6:28:7c:2c:0d:86:05:76:8c:9e:66:58:48:
                    8c:86:a0:66:71:26:cc:ba:66:96:27:c0:33:45:93:
                    0a:fb:4b:80:80:08:79:23:87:87:b0:5c:e5:16:0f:
                    9c:78:32:bf:02:e0:40:38:d3:e1:72:7d:59:e7:60:
                    81:17:7b:3b:d6:0f:12:77:21:72:4b:b3:86:65:4f:
                    1f:3a:e2:28:34:10:1a:a2:c8:c1:43:ee:96:43:71:
                    a3:f9:8b:9c:e7:03:de:a1:50:04:ae:b9:b8:76:31:
                    50:3e:b2:8a:d5:61:04:04:f9:c6:42:ba:ff:16:c3:
                    8d:0e:8d:5e:02:62:da:4e:5b:67:a5:9d:ec:be:03:
                    31:02:0c:04:a4:c1:00:87:25:09:8a:5e:2a:09:9e:
                    7e:81:b1:2f:b4:20:28:66:4a:21:6e:12:87:4a:88:
                    e7:ee:40:0f:ac:f8:a6:b9:d3:91:bd:ba:2d:06:d3:
                    31:c9:2f:9f:79:e0:26:df:6a:ab:51:79:21:c3:e0:
                    22:f3:3d:ab:bb:08:88:3d:f5:d1:00:8c:6a:ed:86:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:17:52:AA:34:46:91:6E:52:97:A6:E0:9C:7C:08:10:7A:97:3A:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.220.0/22
                IPv6:
                  2804:2f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264889

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:df:55:cd:a2:85:00:2e:bc:6a:e4:d9:f8:53:08:f1:cd:
         5e:e8:d6:99:01:37:66:88:e5:0b:80:23:cc:24:a3:b9:fc:38:
         b3:d9:c9:30:d2:17:66:d0:e6:ae:08:24:b2:b7:5d:bc:ca:11:
         cc:42:08:14:c6:fd:5b:56:80:93:b8:23:06:6f:3a:b9:4f:96:
         92:83:9b:4f:02:46:62:0f:62:4e:ec:8a:03:e3:9f:b0:aa:df:
         ed:15:83:ee:df:c2:a8:1d:55:9a:28:a9:a9:9e:0a:1b:1b:a5:
         1b:ba:0c:35:42:9b:6f:5e:6a:6f:23:0e:e3:1b:f3:33:e5:e8:
         01:1f:39:36:cd:3e:85:de:bc:f2:e1:ec:41:13:33:4a:7c:98:
         f0:5d:0f:d7:93:d4:b6:ed:50:a9:e4:4d:a7:27:52:1a:09:c5:
         7b:f3:b6:58:a3:b6:19:aa:0f:20:2a:a9:f0:3f:10:85:a7:93:
         d2:c5:08:e3:57:46:4a:e7:a2:b0:a5:ab:cb:3a:1e:68:74:fc:
         bc:21:fb:38:32:dc:56:19:b4:56:9b:58:97:ae:0a:ce:6d:14:
         2f:3e:29:2f:31:cd:83:f9:e7:28:5a:b2:06:49:a4:37:a2:60:
         ac:c2:5c:12:96:15:55:b3:aa:f7:a8:6c:de:23:85:09:65:dc:
         6f:f5:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org