Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D2524355A309BCAF58B5F7B7F8183D2FDB012D0.cer
File:                     6D2524355A309BCAF58B5F7B7F8183D2FDB012D0.cer (raw, json)
Hash identifier:          3UOFDIHCfluy7XxmgZ25SgVqHpIwyRUxFjUmjYL3bXU=
Subject key identifier:   6D:25:24:35:5A:30:9B:CA:F5:8B:5F:7B:7F:81:83:D2:FD:B0:12:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E54C86828DC6C19903D635A9764B5665C04CC82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/6D2524355A309BCAF58B5F7B7F8183D2FDB012D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Nov 2024 16:58:28 +0000
Certificate not after:    Tue 04 Nov 2025 17:03:28 +0000
Subordinate resources:    AS: 270431
                          IP: 190.115.84.0/22
                          IP: 2804:6be0::/32
Validation:               Failed, certificate revoked on Wed 29 Jan 2025 22:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:54:c8:68:28:dc:6c:19:90:3d:63:5a:97:64:b5:66:5c:04:cc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  5 16:58:28 2024 GMT
            Not After : Nov  4 17:03:28 2025 GMT
        Subject: CN=6D2524355A309BCAF58B5F7B7F8183D2FDB012D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:c0:15:14:2b:b8:c4:d8:df:7d:dd:be:fe:
                    88:37:c1:1a:32:fa:ba:4f:11:61:60:b1:90:a1:13:
                    26:24:6f:3b:da:bd:fb:3c:fd:50:67:72:f9:dc:3b:
                    0e:cc:5d:25:8a:16:9d:ae:a1:20:0d:52:82:24:50:
                    53:89:81:26:87:f6:b5:7d:7e:67:5b:0a:18:0c:e3:
                    15:29:fb:5b:98:2e:d5:05:86:ff:b5:68:dc:ac:21:
                    78:e5:77:6c:a5:eb:3d:c8:13:1b:bd:7c:d6:ca:2d:
                    6c:76:87:e6:7e:ca:25:c9:bd:79:09:43:02:7f:43:
                    54:8e:2c:76:fb:52:ee:5f:16:eb:12:79:2c:be:0e:
                    f3:cc:a8:68:4d:b7:16:03:6b:7e:e1:03:d4:5e:7a:
                    e6:96:c7:e5:d1:55:c1:4d:80:d8:16:8a:1b:0d:71:
                    a4:40:5b:86:ab:d5:0c:72:9a:45:d4:da:33:ab:52:
                    9e:88:66:84:b1:ff:94:8c:c6:4e:e1:38:fc:45:a1:
                    d3:42:57:3b:a2:c7:05:c7:17:d8:e5:73:55:4e:89:
                    ed:8f:aa:0b:dd:fb:0b:52:69:d7:e3:67:e0:eb:e1:
                    47:cf:32:69:6c:e8:35:41:a7:69:16:51:aa:9b:75:
                    dc:49:b5:a0:b2:07:69:8e:31:ca:c3:fb:dd:c5:7d:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:25:24:35:5A:30:9B:CA:F5:8B:5F:7B:7F:81:83:D2:FD:B0:12:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/6D2524355A309BCAF58B5F7B7F8183D2FDB012D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.84.0/22
                IPv6:
                  2804:6be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270431

    Signature Algorithm: sha256WithRSAEncryption
         39:e7:db:01:9a:34:c7:f5:12:bc:3a:72:20:aa:48:63:b6:2b:
         40:07:cb:d0:b0:74:ab:3a:75:9c:da:d2:5d:74:ea:a2:4e:ac:
         c4:7c:cd:bf:94:17:60:42:c1:07:5b:21:da:13:e7:88:51:14:
         61:ab:1c:5c:8d:ad:a9:0e:25:10:35:66:07:37:c1:47:73:62:
         06:ea:aa:95:74:4f:72:0f:f5:38:04:d4:ea:df:6c:ff:22:9f:
         59:c9:f1:93:12:11:09:65:22:76:7b:0f:0f:71:a3:65:2e:24:
         c4:a8:0d:21:4e:f2:59:ec:73:73:27:e4:27:35:86:ea:32:c3:
         fb:e6:54:29:b2:eb:51:15:5c:51:18:5a:ff:c0:9b:7b:d4:1d:
         c9:2f:69:33:b0:f9:3f:4f:a0:68:98:12:c8:4b:26:6d:2b:bd:
         19:04:f2:57:f0:0f:1c:de:5d:c6:fe:e4:bb:0b:8e:42:7b:3a:
         8c:8e:7d:03:5d:19:12:58:90:73:48:0d:36:97:7f:9d:ee:0f:
         32:9c:5b:05:47:f4:20:93:57:48:b0:d6:4f:83:51:18:69:04:
         bf:ab:43:d0:7b:2a:fc:93:66:48:e0:2c:45:73:05:ba:9c:78:
         e3:c4:b4:9e:3e:85:0f:6a:4f:10:bf:35:fc:96:40:71:06:cd:
         a4:67:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:54 2025 by rpki-client