Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.cer
File:                     6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.cer (raw, json)
Hash identifier:          Yg34Uc1NBiUWvQAn+ng1dL4+OWr8SqBayp1VPsmyXRE=
Subject key identifier:   6D:D4:F7:8F:E6:E9:1C:69:A2:82:EB:E3:CC:89:7C:F6:38:84:BD:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       027B67B6914B95138D1D3FB547537C7414FB821D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1/6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:29:33 +0000
Certificate not after:    Thu 03 Apr 2025 20:34:33 +0000
Subordinate resources:    AS: 264461
                          IP: 132.255.28.0/22
                          IP: 201.182.32.0/22
                          IP: 2804:2008::/32

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 13:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7b:67:b6:91:4b:95:13:8d:1d:3f:b5:47:53:7c:74:14:fb:82:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:29:33 2024 GMT
            Not After : Apr  3 20:34:33 2025 GMT
        Subject: CN=6DD4F78FE6E91C69A282EBE3CC897CF63884BD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:9c:b9:cf:a7:48:42:8f:4d:6a:a9:eb:ac:
                    7b:73:5d:45:61:56:c1:5d:99:96:3d:68:2f:de:c9:
                    80:35:31:54:10:5c:ea:6c:11:dd:f5:c4:be:82:a9:
                    2a:78:ee:7f:dd:74:b3:0a:cd:8b:ac:7d:b7:90:05:
                    b1:5a:7c:73:16:f0:17:2e:93:ec:23:35:66:15:b3:
                    5b:99:09:ef:56:ac:03:f4:2b:92:f8:d3:f8:35:b5:
                    61:a5:30:53:8f:78:45:b8:af:0e:f7:10:da:bd:b4:
                    5c:91:4e:1d:f4:75:9b:30:01:87:ed:35:af:09:11:
                    6e:ad:5c:52:25:41:2e:a4:a6:67:23:e8:60:59:73:
                    e0:91:f7:00:c0:24:ac:f3:f4:69:e6:71:31:d3:41:
                    bc:e7:fe:1a:50:af:d5:43:82:5c:28:dc:81:83:f8:
                    8e:ad:c6:52:37:33:a1:98:ba:cb:bd:61:51:99:33:
                    63:5e:13:d2:4b:5b:e6:b0:9a:ff:07:ab:19:03:29:
                    0f:77:ee:fd:02:fe:43:9d:36:49:ef:88:58:5a:13:
                    ca:e1:28:4e:68:61:18:5d:1f:9c:ce:80:c5:84:7e:
                    8d:aa:f8:51:82:13:c2:80:db:89:48:d2:10:ee:c9:
                    a7:ae:15:5b:ab:34:3e:d8:fe:58:65:35:2f:1e:b7:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:D4:F7:8F:E6:E9:1C:69:A2:82:EB:E3:CC:89:7C:F6:38:84:BD:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/1/6DD4F78FE6E91C69A282EBE3CC897CF63884BD56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.28.0/22
                  201.182.32.0/22
                IPv6:
                  2804:2008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264461

    Signature Algorithm: sha256WithRSAEncryption
         63:60:24:66:4e:76:1a:92:18:aa:6d:77:de:e5:eb:24:f1:a3:
         92:79:5f:64:c1:12:9a:5b:de:f0:16:85:2a:5a:fc:dc:86:9e:
         1d:1a:f3:9b:3e:98:c1:89:8f:36:f5:41:99:70:23:f6:d8:bf:
         c3:18:12:cf:10:40:1b:24:55:ed:3f:4b:84:ef:c0:df:3b:d2:
         64:d4:34:47:1e:95:70:7e:9a:1e:25:b2:67:8f:19:75:0a:bc:
         4f:d7:ea:74:52:3a:c6:96:e0:01:55:44:23:ff:2a:60:55:de:
         22:22:dd:4a:92:70:6f:24:ce:68:45:5b:fb:4b:80:07:57:0b:
         4e:2b:a9:cb:f7:93:3a:72:fa:31:eb:60:da:3b:83:b4:45:d6:
         22:6a:5d:95:9c:37:87:9f:7e:1c:17:83:72:c4:4e:64:b5:0b:
         b0:84:3e:ea:4c:5f:71:2f:d9:54:f0:b3:9e:58:78:e6:d7:97:
         be:cf:50:cb:b8:4e:9d:f4:d9:06:2a:76:a4:d4:a6:09:e2:fb:
         22:ea:ba:c3:60:4a:28:56:57:e5:50:0a:75:ff:91:1d:50:a4:
         8a:3e:90:f0:d0:41:9f:72:43:6e:37:cd:40:26:af:bc:92:46:
         30:e7:47:39:62:c2:27:6b:58:a4:1a:e5:7e:a3:e9:ae:51:23:
         f7:36:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org