Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D0CE17E5F15E0D59FAEC7216B3BEFF1E32B077E.cer
File:                     6D0CE17E5F15E0D59FAEC7216B3BEFF1E32B077E.cer (raw, json)
Hash identifier:          sM2ClgezBu6EnIdoQ84SpR/KgdfLWqw+1WpAahravTg=
Subject key identifier:   6D:0C:E1:7E:5F:15:E0:D5:9F:AE:C7:21:6B:3B:EF:F1:E3:2B:07:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       174E55A6BAEBE3364A6FA1A66EA98195FCA11C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/1/6D0CE17E5F15E0D59FAEC7216B3BEFF1E32B077E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:27:16 +0000
Certificate not after:    Thu 03 Apr 2025 20:32:16 +0000
Subordinate resources:    AS: 269263
                          IP: 45.183.56.0/22
                          IP: 2804:61e4::/32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 06:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4e:55:a6:ba:eb:e3:36:4a:6f:a1:a6:6e:a9:81:95:fc:a1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:27:16 2024 GMT
            Not After : Apr  3 20:32:16 2025 GMT
        Subject: CN=6D0CE17E5F15E0D59FAEC7216B3BEFF1E32B077E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:76:91:fc:d3:69:ee:de:2b:03:46:a4:ea:
                    0f:44:56:87:5f:c9:83:ff:96:ee:7e:50:db:2e:3d:
                    05:26:71:7c:62:7a:25:0c:0a:f0:63:89:aa:06:33:
                    e5:7d:f1:cc:83:4b:f9:0c:c0:4b:38:98:83:df:32:
                    bc:be:d7:48:b1:6f:46:58:73:ca:26:45:84:4e:fe:
                    83:d4:9b:c5:40:c9:1c:5e:e0:87:7f:8b:d1:2d:54:
                    1d:26:1a:8b:24:a1:86:33:18:11:cd:c8:85:09:a7:
                    ea:d2:48:0c:48:16:a9:57:97:54:bc:f3:33:3e:11:
                    a1:14:e3:72:2c:75:4a:28:28:77:ce:af:ca:4f:bf:
                    c2:cf:0c:91:a5:39:7d:9a:8b:89:63:cd:b8:f8:eb:
                    70:d0:c0:cb:f0:49:ac:26:6e:e8:f8:37:ff:2d:9f:
                    68:41:b1:dc:6f:7b:fa:aa:e4:a3:e0:22:76:04:a5:
                    c5:24:ea:87:56:db:b1:90:20:e7:82:a1:86:1a:77:
                    53:67:e1:1f:f5:18:65:48:c7:d0:f5:cd:6f:49:94:
                    8e:67:87:ee:2f:7e:ba:1c:72:65:c4:ce:c5:75:7a:
                    51:a8:2c:46:27:c1:d3:73:ef:77:e2:c3:51:72:37:
                    16:0f:e8:d4:1e:8e:41:e7:e5:e0:ba:fa:5f:4d:f2:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:0C:E1:7E:5F:15:E0:D5:9F:AE:C7:21:6B:3B:EF:F1:E3:2B:07:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/1/6D0CE17E5F15E0D59FAEC7216B3BEFF1E32B077E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.56.0/22
                IPv6:
                  2804:61e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269263

    Signature Algorithm: sha256WithRSAEncryption
         cc:b9:db:af:d7:ce:ed:52:81:76:e0:60:d4:1a:28:0f:96:02:
         a9:6e:d1:89:17:db:94:a3:68:2f:60:ed:ab:bd:3a:07:7f:ac:
         39:4d:b3:c7:80:a2:65:03:53:ee:fb:28:4d:05:15:a1:bd:f4:
         30:b6:3e:aa:88:7c:02:0a:86:3a:48:08:26:0a:fc:5d:f3:0b:
         41:66:fa:96:f8:fb:72:e3:fd:9d:ed:66:fb:ae:df:d1:09:d3:
         79:0b:a3:d6:e5:5e:2a:09:de:7d:df:86:d5:0e:e5:04:c0:12:
         ce:95:71:a0:c9:05:ec:9b:32:b1:af:45:48:a4:ae:79:64:56:
         b5:5c:b5:01:56:c0:c9:7c:48:b9:d7:1d:25:02:b6:c1:05:09:
         6d:3c:5d:33:0f:0a:0f:e5:2e:f1:ce:88:ce:0b:08:a5:19:24:
         15:1c:af:c3:24:a0:b4:f5:58:04:ed:54:8e:ec:ca:38:5d:df:
         d3:07:6c:03:e7:23:5c:a3:ab:94:62:29:e3:24:71:ee:70:c7:
         43:2f:00:1b:3a:7c:22:2f:ff:25:7d:aa:16:51:b0:61:74:ba:
         03:bb:59:1c:02:a7:b4:a5:bd:68:b5:e8:c8:74:dc:5d:b5:a2:
         82:af:b8:7f:57:be:c3:f0:a6:e0:9c:d1:92:a3:4e:08:b1:b6:
         b8:fa:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org