Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer
File:                     6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer (raw, json)
Hash identifier:          MfgazlZUUHqepNhrtjLrpmK3FMBMjFIQl+UUnpeOzhQ=
Subject key identifier:   6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F39E2D8D9518A59657CAFE91C57641E96292ED2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Oct 2024 16:02:04 +0000
Certificate not after:    Fri 17 Oct 2025 16:07:04 +0000
Subordinate resources:    AS: 273704
                          IP: 2804:8af8::/32

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 17:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:39:e2:d8:d9:51:8a:59:65:7c:af:e9:1c:57:64:1e:96:29:2e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 18 16:02:04 2024 GMT
            Not After : Oct 17 16:07:04 2025 GMT
        Subject: CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:83:9a:dc:a5:8c:74:91:5a:d3:61:2b:af:
                    91:23:6e:f0:44:c7:9c:ec:92:16:0f:27:b8:67:d5:
                    ca:07:06:2b:22:6a:58:e1:06:6d:51:5c:94:73:86:
                    0c:de:cb:39:ca:d1:5d:95:11:28:e6:23:04:04:98:
                    4a:06:9a:0e:d2:38:85:57:4d:b2:58:3c:af:c8:fc:
                    d7:d7:3a:5c:13:b3:a4:48:54:3d:aa:c9:c1:dc:6b:
                    20:db:fb:78:71:b3:02:eb:a3:48:58:4c:c5:19:78:
                    cd:56:cb:02:50:c9:5e:67:6f:0f:c7:d1:c3:14:fb:
                    3e:06:35:bd:20:bf:8c:9a:52:15:7e:85:95:06:d9:
                    16:d9:00:5f:1f:be:7c:9d:fc:55:e9:56:06:b4:4f:
                    c4:1a:7b:8d:1c:32:7d:0c:89:06:9c:f2:df:5f:75:
                    d7:2b:4f:c7:2e:eb:00:75:e4:56:cb:c0:16:2d:d7:
                    7d:8d:0a:e1:9a:bb:01:23:38:37:b3:a5:5d:eb:0d:
                    cd:5f:ce:9c:c8:b5:52:73:2e:10:b2:49:1a:78:6e:
                    4f:e4:77:cb:15:9a:9d:c4:11:e2:03:7e:f7:f9:42:
                    62:b1:51:cb:fe:ab:70:8d:50:46:ed:4e:23:c7:b6:
                    11:7f:81:dd:cd:2c:4a:bc:09:b6:db:49:a7:91:19:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273704

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:01:56:8f:38:0a:35:40:a3:83:72:f7:fb:92:96:6a:fd:
         d5:10:c3:05:de:44:51:c4:36:bb:03:c4:10:bd:ac:96:46:25:
         d6:29:73:a0:bc:77:1a:45:53:a2:73:22:d6:64:d3:82:af:d7:
         8d:b9:d8:a6:17:3d:08:bf:9f:74:53:3d:79:b3:4c:73:1b:90:
         4b:bf:79:5b:23:9d:3a:12:41:fb:77:f3:99:d2:6e:ef:74:12:
         c8:07:60:91:6d:01:aa:f6:bf:63:66:d7:f9:33:5a:c8:44:a9:
         9f:70:55:49:a4:4f:2f:47:43:b7:b3:40:21:9c:13:69:6f:c2:
         cf:6a:90:29:e1:7f:e6:2a:ea:17:8e:96:02:49:69:40:5d:04:
         df:a5:e4:e0:18:df:c7:3b:2a:25:bc:b1:84:eb:6e:06:0c:ce:
         f7:6e:de:fc:4c:00:a9:66:fe:f7:5e:9a:b7:a6:64:44:51:a7:
         0e:96:d8:b5:b3:41:54:a1:f5:bb:b1:8a:a5:75:e4:ba:0b:18:
         b7:88:5b:ed:c1:6e:34:48:cb:f8:ab:89:51:0d:92:f0:e1:1c:
         a7:9c:d2:0e:57:62:60:b5:9c:58:a8:2a:a7:b9:cf:30:d6:03:
         08:e3:0e:3f:08:4c:f3:5b:f6:90:46:50:68:a2:e2:7c:f5:6d:
         53:e7:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 19:22:35 2024 by rpki-client on console-fra.rpki-client.org