Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.cer
File:                     6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.cer (raw, json)
Hash identifier:          4Sl7lMRRs0F4M7N34qOT+g8MroypP27cYNCeAwfX+sE=
Subject key identifier:   6B:2D:AC:24:BD:C3:5F:37:44:6B:BA:0C:A7:F3:EC:2A:B4:E2:3B:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BA14F24FCBDD2E1020C8FEB9917263E20D57792
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Aug 2024 12:42:42 +0000
Certificate not after:    Thu 07 Aug 2025 12:47:42 +0000
Subordinate resources:    AS: 264065
                          IP: 143.202.0.0/22
                          IP: 2804:2a38::/32

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 20:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a1:4f:24:fc:bd:d2:e1:02:0c:8f:eb:99:17:26:3e:20:d5:77:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  8 12:42:42 2024 GMT
            Not After : Aug  7 12:47:42 2025 GMT
        Subject: CN=6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:3f:1c:2a:5c:ec:11:2a:d9:7d:a0:5f:1b:
                    64:e1:53:25:c5:bb:80:86:64:83:7c:df:3f:1e:bd:
                    ca:10:64:c2:8c:d8:4a:f7:2d:02:2e:bb:be:5a:3d:
                    ea:db:0b:4d:e1:b5:81:ba:4e:ad:9f:f3:5e:bd:cd:
                    b4:6a:70:6e:d8:99:c6:e1:77:bf:ac:19:40:7d:38:
                    8a:12:89:45:7f:77:eb:70:ab:f9:cc:e0:82:1a:68:
                    18:34:73:6a:39:eb:5c:13:ab:1a:e3:fa:c0:3d:2b:
                    e8:39:8a:f5:15:34:b9:2b:fe:37:7f:c6:22:30:c7:
                    b7:25:df:57:2e:d4:d7:99:8e:c6:5f:91:14:c7:84:
                    5d:a1:b5:02:99:c9:d8:ae:b3:f6:a0:b8:f8:8b:8f:
                    e7:8e:cd:c3:bf:8d:b8:da:9b:bb:77:cd:ce:e6:3a:
                    af:3b:35:5b:18:b6:f3:29:45:d1:9a:bc:a9:7a:7f:
                    8d:ed:a3:41:5b:0c:1e:a6:18:0c:ac:08:85:34:de:
                    ab:51:fc:7e:90:63:9a:34:a0:62:60:b8:1c:49:42:
                    bd:c1:3d:e1:ff:1d:ca:21:6e:d4:b2:f1:0a:8c:be:
                    63:2b:54:b8:4f:c4:88:83:28:7f:f9:af:4b:1e:53:
                    c2:b5:26:e6:87:09:a9:c0:c5:17:15:e2:57:c5:05:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:2D:AC:24:BD:C3:5F:37:44:6B:BA:0C:A7:F3:EC:2A:B4:E2:3B:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.0.0/22
                IPv6:
                  2804:2a38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264065

    Signature Algorithm: sha256WithRSAEncryption
         02:60:c2:ce:13:1c:37:1e:1b:4a:6a:24:93:6f:e1:ec:c7:66:
         8a:f9:b1:fe:6f:2e:33:fc:28:f8:7e:4f:79:7e:a5:dc:04:5c:
         41:c7:0b:67:03:73:d6:c0:cf:eb:8b:59:45:25:df:46:a2:e5:
         bc:db:ff:59:de:38:b8:49:17:35:be:18:d8:08:6f:a7:f3:6b:
         0a:a2:25:35:55:ee:74:36:61:7a:de:5d:62:73:03:41:02:b6:
         cf:3d:13:2f:9f:eb:f2:0e:05:03:ab:78:a4:2c:08:a4:06:f8:
         0d:b0:85:9d:89:49:0b:24:e5:48:09:72:79:bf:b2:56:4e:41:
         72:2c:4a:de:0c:e2:fe:66:e8:36:fb:53:65:04:dd:35:b6:6c:
         7f:f0:cb:6b:05:11:38:32:e4:91:14:f0:ef:4f:3f:b5:1a:c8:
         38:2a:1d:ff:83:06:d3:ff:05:b3:0c:71:94:13:ea:fd:9b:28:
         5c:82:45:f8:b0:e5:69:34:65:27:ae:46:b2:5f:6a:01:6c:f2:
         44:44:3e:b9:62:0a:bb:d7:fb:27:37:0b:dc:52:0f:b3:79:43:
         4e:e4:35:b9:a1:49:ef:c5:25:5a:e7:5d:a3:ca:8b:2e:a9:32:
         94:24:f6:66:1b:b5:89:c3:34:24:23:71:ce:e3:e0:0e:e4:76:
         ff:f7:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 00:43:15 2024 by rpki-client on console-fra.rpki-client.org