Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.cer
File:                     6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.cer (raw, json)
Hash identifier:          pXNUPZbIDmSDbGBO9oLtfERLJ8aDpZ7Y3PLFqOqb+tU=
Subject key identifier:   6D:C8:DA:62:77:F1:A9:7C:9C:46:76:0C:0E:3A:36:1D:CA:56:02:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22B9C025D7D26D3F5FC76CF10B9397CF9AE5523B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 May 2024 18:26:05 +0000
Certificate not after:    Thu 01 May 2025 18:31:05 +0000
Subordinate resources:    AS: 266446
                          IP: 170.82.192.0/22
                          IP: 2804:37f4::/32

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 11:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:c0:25:d7:d2:6d:3f:5f:c7:6c:f1:0b:93:97:cf:9a:e5:52:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  2 18:26:05 2024 GMT
            Not After : May  1 18:31:05 2025 GMT
        Subject: CN=6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:06:a5:24:4d:2d:74:0d:12:fd:41:77:e3:
                    05:c8:4c:db:46:09:0c:e2:f9:53:18:5a:54:d8:1e:
                    bf:85:52:83:b9:34:8d:e6:85:fd:3d:dc:24:f7:39:
                    a6:35:f1:a6:17:0f:28:92:d4:42:dd:32:15:fc:75:
                    6a:28:f2:32:61:8a:7a:0f:1c:d7:ff:b0:f1:46:8b:
                    f9:a5:57:d7:f9:31:b7:6f:80:ef:43:b1:15:d2:47:
                    c7:68:ff:af:b1:76:38:12:64:a8:77:99:a3:4a:84:
                    5c:0e:e9:06:2e:19:37:0f:7d:d0:19:2b:97:51:c0:
                    1c:f1:6a:d5:79:76:89:89:c1:7a:cc:f6:e5:53:c2:
                    b9:21:17:2a:5c:75:e2:3d:7e:b4:c3:6f:2f:85:69:
                    13:94:d6:3d:72:74:7c:0b:27:08:a7:fc:80:24:e2:
                    e2:d7:50:f8:73:6d:d4:77:1c:c7:86:00:be:44:b0:
                    60:ae:cb:65:e1:4f:e2:75:ae:7e:1c:ec:53:ed:08:
                    33:f5:dd:0b:42:a3:95:09:5b:52:30:76:21:14:ff:
                    23:ff:e9:55:3b:c7:9d:6c:e3:23:1c:86:6a:d5:0a:
                    ca:bb:91:4f:a7:4d:f8:7e:8e:d8:70:46:bf:fd:3c:
                    a8:92:69:9d:03:99:6f:cf:2b:15:2a:34:7b:2a:b6:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:C8:DA:62:77:F1:A9:7C:9C:46:76:0C:0E:3A:36:1D:CA:56:02:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/6DC8DA6277F1A97C9C46760C0E3A361DCA5602C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.192.0/22
                IPv6:
                  2804:37f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266446

    Signature Algorithm: sha256WithRSAEncryption
         ca:5f:ee:1a:be:b0:01:58:5e:4c:06:fc:ea:77:ae:2a:f8:a3:
         25:1c:3a:a9:b1:19:33:8a:18:4e:aa:e4:1d:5c:b6:33:c4:44:
         80:8e:7e:aa:b4:4a:44:59:18:5f:c7:76:8e:08:fc:3e:85:b9:
         ff:61:ea:c6:9a:ec:cf:d3:1c:a8:80:b5:ea:7c:b7:ca:c2:32:
         eb:4a:ff:e0:87:72:18:e1:01:39:6f:96:1a:41:f8:0c:bb:63:
         8a:29:31:4d:a4:df:0b:6e:e6:b8:e2:a5:24:81:22:20:4d:bd:
         01:11:58:7f:66:f0:8e:f5:8a:a9:48:99:38:84:1f:f3:5a:1e:
         91:7d:82:ba:e6:df:fc:ac:ad:bb:f2:a4:a0:da:c7:c4:f3:4b:
         2a:7e:46:01:1b:26:5a:ee:d9:d3:ef:46:0e:05:95:43:dd:87:
         42:c1:c1:ae:11:6d:2e:cd:83:a9:be:ae:66:88:28:8e:ae:f4:
         0b:7b:ac:89:af:a4:8f:f0:3c:82:2f:85:b7:07:6e:6d:1a:85:
         4d:22:f4:08:84:01:47:f2:d9:e8:7a:c8:13:ed:e5:f5:c6:9d:
         33:c7:dd:07:70:8d:35:c5:80:82:51:26:6d:e9:1c:bc:1b:83:
         de:86:3c:cb:21:9b:f9:2c:fb:97:22:61:04:0d:5d:7b:91:4c:
         ec:9f:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 14:55:52 2024 by rpki-client on console-fra.rpki-client.org