Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.cer
File:                     6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.cer (raw, json)
Hash identifier:          F9iMdBEU2WD21xDATm0dP92P/DZEI7Lx05OwaeDqboc=
Subject key identifier:   6B:5F:9A:6F:36:6F:99:E7:01:F3:9E:2E:BA:71:CA:D7:4C:DB:6D:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51B3543E027BFBFC8BF5BE0B04755525AE2277AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:33:01 +0000
Certificate not after:    Thu 03 Apr 2025 13:38:01 +0000
Subordinate resources:    AS: 266471
                          IP: 170.83.48.0/22
                          IP: 2804:3858::/32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 21:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:54:3e:02:7b:fb:fc:8b:f5:be:0b:04:75:55:25:ae:22:77:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:33:01 2024 GMT
            Not After : Apr  3 13:38:01 2025 GMT
        Subject: CN=6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:d0:f0:03:d7:dc:1b:3a:0a:aa:76:dc:07:
                    5b:6b:69:9d:95:2e:38:61:a5:0e:19:bd:e1:e1:94:
                    fe:a8:a9:e9:b8:44:47:47:dd:07:97:c5:95:5b:05:
                    f2:62:80:82:9b:7f:3f:32:d2:85:07:25:f3:91:bc:
                    f6:de:71:5d:04:fd:32:9c:44:b7:af:60:83:52:6f:
                    ad:4e:77:77:e0:f6:93:17:bc:cd:37:ee:3c:a7:6d:
                    91:b2:d4:3c:55:98:9c:64:2d:55:f0:88:df:36:04:
                    d6:35:bf:d7:c3:7f:0f:59:cf:d2:be:e7:3e:38:6f:
                    f1:72:90:4a:be:24:1a:b8:fc:14:ec:e6:17:a4:b1:
                    62:fe:9c:86:71:22:8c:77:02:fd:49:43:c5:ec:9c:
                    f2:cd:ed:1c:2c:0d:f0:55:9c:51:8d:f2:5d:88:90:
                    2c:97:ae:7e:76:1b:fb:bc:9c:af:70:69:8f:81:a0:
                    57:6e:68:ed:1b:fd:1a:ca:52:9a:00:bf:96:f1:62:
                    20:c7:ae:59:2d:14:94:b2:40:09:5b:9f:ef:b1:14:
                    d1:95:c4:b7:9a:99:79:ea:51:2c:c8:17:f4:8e:a8:
                    d5:a9:ad:d3:12:84:72:c5:a4:b2:46:a5:0a:17:ad:
                    c4:33:63:bb:09:d4:ed:cb:79:ea:51:02:c9:53:57:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:5F:9A:6F:36:6F:99:E7:01:F3:9E:2E:BA:71:CA:D7:4C:DB:6D:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/1/6B5F9A6F366F99E701F39E2EBA71CAD74CDB6D8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22
                IPv6:
                  2804:3858::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266471

    Signature Algorithm: sha256WithRSAEncryption
         35:69:10:10:99:87:a3:bd:eb:ca:f3:71:9b:ae:32:fc:f0:da:
         3e:0b:f0:62:ba:38:02:0a:b9:f2:ab:2f:8b:fb:67:04:cf:23:
         ff:21:a3:fd:e8:53:07:3d:65:b5:31:04:a7:d8:39:c8:71:aa:
         7c:9f:31:66:be:f3:a8:b2:16:3a:df:b2:81:93:f0:92:a8:65:
         6c:08:b6:29:50:05:25:60:db:26:d4:a6:6f:fd:77:e5:3b:08:
         bb:6c:d2:b6:7c:b8:98:84:62:51:91:b7:bc:49:bf:a9:e7:08:
         08:92:94:5a:e5:40:d7:cd:d5:ce:cb:cd:77:78:05:d8:d0:82:
         cb:0d:38:b6:ba:69:d0:d6:63:47:a6:be:52:7e:6b:92:da:69:
         b2:7c:52:f5:f9:6d:6f:02:d5:d4:ab:d3:e1:ef:1c:a6:fd:08:
         a9:53:4a:5f:5a:e6:cd:68:fc:f8:b5:f9:2b:17:3e:35:48:ca:
         23:68:a6:e6:42:86:0c:94:d7:4f:05:0e:99:88:6e:2c:ec:8a:
         71:f9:a6:78:03:8d:29:22:ec:99:9a:56:07:f3:3a:04:2d:08:
         8e:c6:11:93:ce:67:a3:62:e7:f0:78:ae:ea:fd:dc:8f:a7:9f:
         9d:77:ad:f2:de:3b:6f:5c:86:1b:1b:a7:03:2b:4a:0a:fa:03:
         c7:62:c7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 03:17:49 2024 by rpki-client on console-fra.rpki-client.org