Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6E24E767ECDA9CCD9B1BAA2998F5938A3F858FF7.cer
File:                     6E24E767ECDA9CCD9B1BAA2998F5938A3F858FF7.cer (raw, json)
Hash identifier:          +9kLKQgNP1RnW2F2MvRHxcjfrbNotvhnh4PODe3hZho=
Subject key identifier:   6E:24:E7:67:EC:DA:9C:CD:9B:1B:AA:29:98:F5:93:8A:3F:85:8F:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69245C590D2495411CFF990C6F3064CBD988274E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/6E24E767ECDA9CCD9B1BAA2998F5938A3F858FF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Apr 2024 12:30:41 +0000
Certificate not after:    Mon 21 Apr 2025 12:35:41 +0000
Subordinate resources:    AS: 265306
                          IP: 168.121.28.0/22
                          IP: 2804:2dd4::/32

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 15:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:5c:59:0d:24:95:41:1c:ff:99:0c:6f:30:64:cb:d9:88:27:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 12:30:41 2024 GMT
            Not After : Apr 21 12:35:41 2025 GMT
        Subject: CN=6E24E767ECDA9CCD9B1BAA2998F5938A3F858FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:2f:88:52:b1:99:a9:c1:e9:42:47:28:dc:
                    a3:db:39:f0:61:e6:39:11:8b:da:51:5b:28:c8:c6:
                    ec:08:e5:da:19:de:7b:d1:9d:9a:4e:7b:8c:25:5c:
                    61:6f:a0:68:56:a0:f0:61:aa:7d:1b:0e:e8:dd:2d:
                    1c:ab:be:0b:73:6f:fe:f1:0d:03:52:c1:44:25:eb:
                    93:e0:23:57:49:29:b1:d3:13:0d:bd:bb:97:1e:8c:
                    d3:7b:01:a3:d5:fb:b0:3d:08:47:c9:a9:ae:da:7f:
                    b6:2f:b3:e1:94:fe:0c:5b:c0:14:5c:fa:b1:84:bd:
                    bd:99:6e:c0:cc:5c:c8:6f:61:23:a7:38:6f:29:ec:
                    96:fb:cb:b5:f6:4f:48:ef:07:13:39:27:ec:61:60:
                    98:4a:eb:83:41:d0:68:93:c9:42:2f:d3:2e:de:a6:
                    e7:f1:e0:a5:3e:f6:ab:06:8a:ff:6e:b1:28:f0:c5:
                    e8:bd:da:f0:30:0e:1f:de:a4:04:37:e6:67:30:9c:
                    8d:13:55:86:9d:f4:71:9b:5e:aa:98:89:e5:a1:bf:
                    1f:f7:b8:a3:68:d5:da:e5:ae:54:21:c0:53:85:6a:
                    14:47:b8:df:7b:b8:9f:a5:0a:67:ec:76:78:7c:d0:
                    fe:30:f2:22:d5:6a:16:ec:14:69:b1:72:7c:b9:df:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:24:E7:67:EC:DA:9C:CD:9B:1B:AA:29:98:F5:93:8A:3F:85:8F:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/6E24E767ECDA9CCD9B1BAA2998F5938A3F858FF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.28.0/22
                IPv6:
                  2804:2dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265306

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:78:d6:d1:f0:12:bc:cc:c5:1c:69:3f:c4:b8:fb:2b:ea:
         c1:68:9b:8f:8f:25:96:c6:65:a2:f4:c9:c4:a8:0a:d4:c0:8d:
         4f:c2:c8:48:8e:1b:c6:90:32:13:ed:6c:da:7e:ad:27:b6:df:
         9b:a9:0e:24:9c:94:68:fe:82:68:ec:40:39:f4:80:36:01:78:
         51:be:af:b0:63:41:3b:96:b6:f4:0d:e6:18:a7:dd:20:9e:d3:
         4c:f4:14:d5:d0:70:6b:57:00:f5:f7:a3:e3:66:8f:fc:72:a9:
         10:d6:3d:3e:0b:e9:45:1a:ef:16:01:96:2d:72:c5:a9:28:94:
         83:c1:35:93:d0:af:47:a2:cc:ad:8a:cb:a3:d2:50:f7:c8:45:
         65:07:fb:87:ce:e9:98:a5:7d:4c:a2:a2:43:bd:d8:61:66:f8:
         75:12:1a:be:8f:ad:07:d0:c7:82:58:45:fa:36:32:f8:ef:e3:
         44:fa:99:59:f6:e4:fb:07:9b:5d:ba:a4:82:fa:1a:85:e8:42:
         1b:40:5d:91:ae:46:8f:36:d5:f5:36:7f:2b:18:87:59:37:2c:
         50:7d:a1:95:7a:62:38:25:69:dc:d5:64:82:7f:d7:0a:8e:35:
         3a:af:d2:5d:24:0d:1b:2b:3a:42:8f:f3:26:00:30:37:c7:36:
         e6:aa:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:42:22 2024 by rpki-client on console-ams.rpki-client.org