Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer
File:                     6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer (raw, json)
Hash identifier:          16CgHRFZMZbSLrRicpd7WWDBwxTa7JzqwQESfEF16dM=
Subject key identifier:   6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D9D61CA9B9575E4D8A662434CD32988EA0B2CCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 21:06:43 +0000
Certificate not after:    Wed 02 Apr 2025 21:11:43 +0000
Subordinate resources:    AS: 271554
                          IP: 179.63.96.0/22
                          IP: 2804:7d54::/32

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 15:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9d:61:ca:9b:95:75:e4:d8:a6:62:43:4c:d3:29:88:ea:0b:2c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 21:06:43 2024 GMT
            Not After : Apr  2 21:11:43 2025 GMT
        Subject: CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:03:4c:d7:16:71:77:af:3a:f2:5a:0c:f2:
                    27:19:d0:90:60:92:d7:21:ac:46:ca:1d:7f:45:6b:
                    94:d9:29:a4:bd:f7:67:96:cd:c6:4d:25:ab:18:20:
                    2e:7b:9d:c4:81:83:64:c1:36:84:c8:c7:34:2d:0b:
                    64:e5:c8:d7:d2:ce:fa:d2:32:bc:08:32:86:00:f4:
                    ea:3f:2d:7d:62:63:64:c5:cf:c3:b8:2f:52:bf:73:
                    16:eb:8b:18:ad:fd:04:b9:fd:cd:18:62:6a:e5:7a:
                    34:bf:20:38:8c:32:27:c9:b7:fa:b0:37:9f:8c:c7:
                    87:ba:2d:13:da:05:8f:95:0b:a0:f2:14:16:9b:82:
                    c5:01:69:45:d5:1e:e2:c9:d6:1f:cc:35:35:1d:54:
                    f0:1a:7a:da:2e:81:18:55:25:e4:f2:8e:a6:a5:fd:
                    b5:f8:81:7a:44:0a:83:19:e6:e3:c5:ff:0f:d6:44:
                    b2:4b:25:7a:fa:41:87:fb:15:e5:ed:81:20:ab:30:
                    70:c3:3a:64:9c:ee:a9:85:ab:a5:32:b0:dc:80:f4:
                    53:ed:70:0a:9e:ac:33:5b:0a:09:14:38:8d:60:57:
                    5f:b6:19:2e:74:b2:55:ca:f2:bd:3a:73:c5:b6:3f:
                    83:3d:5f:d6:e1:a3:fe:63:f4:85:a2:10:ba:f1:a7:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22
                IPv6:
                  2804:7d54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271554

    Signature Algorithm: sha256WithRSAEncryption
         d1:29:1b:62:49:fe:9f:87:4a:d3:44:31:3e:8b:a2:bd:5c:55:
         6e:71:f5:df:8e:24:c3:33:f9:aa:2d:32:99:65:9c:3a:e8:04:
         28:95:5e:23:3d:3f:35:73:25:34:3f:be:9e:b4:d0:80:96:72:
         88:df:b4:33:79:dc:b2:7f:44:25:29:d3:d4:c8:62:15:73:76:
         a5:65:19:8a:d4:bc:b5:32:9b:d2:41:99:77:02:52:c5:e7:49:
         e2:9b:3a:fe:50:d4:72:03:f3:7c:dc:6c:f4:17:10:c9:fa:44:
         de:1d:af:7f:94:d2:53:ce:82:0c:25:f4:bc:d7:89:ab:86:51:
         f2:d3:2e:39:05:73:3d:e2:5d:61:6c:aa:65:af:7f:0b:0a:5b:
         67:93:66:e0:26:0e:4a:cb:7d:8e:de:71:0c:c3:7b:2b:57:c8:
         ce:31:7d:b7:07:1d:17:3b:89:03:85:30:48:33:e1:89:0c:d1:
         da:95:b7:94:c9:8d:f5:b9:03:b1:f4:4b:4d:7c:61:f8:b2:0b:
         63:9f:00:b6:25:7a:85:96:22:3b:7d:4a:bc:46:c1:46:62:ca:
         dd:11:85:ef:ca:67:aa:e4:0c:b4:fe:20:19:c6:2c:c9:e8:c6:
         f5:4f:28:90:fe:7c:96:b1:fb:56:26:aa:f3:89:b3:0e:32:a0:
         2d:e2:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 21:58:38 2024 by rpki-client on console-fra.rpki-client.org