Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.cer
File:                     6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.cer (raw, json)
Hash identifier:          F/kU/HfxkwWEQfrRxu2pcEokPrxn1kSvMGV7rl4RVyo=
Subject key identifier:   6E:F1:AF:4B:18:D0:10:C5:17:F6:FB:22:F3:BD:A2:E6:ED:C3:C9:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       481B410127723EB52D44B94169DD2E523CD087D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 15:05:29 +0000
Certificate not after:    Wed 07 May 2025 15:10:29 +0000
Subordinate resources:    AS: 267086
                          IP: 45.224.185.0/24
                          IP: 2801:80:22e0::/48

Validation:               Failed, certificate revoked on Thu 09 May 2024 10:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:41:01:27:72:3e:b5:2d:44:b9:41:69:dd:2e:52:3c:d0:87:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 15:05:29 2024 GMT
            Not After : May  7 15:10:29 2025 GMT
        Subject: CN=6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:d9:42:24:19:3e:19:8f:fd:bf:21:32:41:
                    56:ba:9d:64:c3:32:39:f9:39:4a:37:5c:68:28:fb:
                    f5:45:15:ec:1d:8c:3f:c5:07:ba:30:8d:8b:f3:76:
                    fa:73:4b:62:b3:ec:cd:ff:82:49:c2:c9:24:21:c3:
                    45:57:71:6e:5e:3a:36:c9:c9:ca:58:f6:8e:b2:15:
                    60:b5:ce:34:aa:53:4c:7f:ff:e2:9b:92:f0:df:d6:
                    b2:90:16:6f:b7:f0:9d:f3:b7:4f:e9:31:88:86:5f:
                    bc:4d:d2:76:82:29:ea:45:3b:ea:40:5b:54:08:c0:
                    1c:b1:37:e2:d7:0f:9f:40:e1:cc:9b:ff:e6:70:9e:
                    11:40:66:51:bd:01:b1:ca:25:4d:f6:f0:ca:62:6b:
                    21:3f:df:e9:02:72:ec:92:91:79:1f:0e:da:57:22:
                    6b:4f:c5:c1:c6:0e:00:ea:8c:57:0a:70:9c:7e:65:
                    f9:83:35:8f:27:65:fa:dc:aa:7e:6d:39:66:63:f5:
                    52:b0:15:c2:13:dc:04:1a:f5:b3:61:20:96:8e:ed:
                    ae:5a:79:83:16:84:de:01:71:17:67:a6:0a:9b:a0:
                    0b:69:70:cc:20:a0:64:0f:5a:42:bb:bc:7b:72:8b:
                    63:9f:4d:1d:7d:3e:0e:e5:d5:cd:a0:c3:85:34:cd:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:F1:AF:4B:18:D0:10:C5:17:F6:FB:22:F3:BD:A2:E6:ED:C3:C9:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.185.0/24
                IPv6:
                  2801:80:22e0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267086

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:6f:b9:66:73:3a:93:5a:53:27:a3:19:a7:0b:79:f7:db:
         3b:65:db:aa:f1:01:23:30:21:54:fa:ca:44:cb:4d:6e:d3:01:
         d9:7c:c8:31:3f:63:72:e1:f1:dd:b2:71:c4:00:41:d0:3c:aa:
         72:c4:56:ad:6f:aa:23:f7:4e:ac:27:28:82:e9:23:02:d4:26:
         89:e9:01:4a:5b:de:ff:74:2e:dc:19:b6:f7:e2:96:4e:7b:1c:
         a4:8d:ea:2d:9a:a7:7b:49:84:e2:00:10:30:90:02:e5:67:af:
         73:54:5d:8f:62:bf:fd:4a:14:ff:9a:a2:36:cc:ef:1e:8e:16:
         12:d3:58:f1:8e:51:1d:52:78:60:14:fd:08:90:89:ad:64:d4:
         3b:44:56:37:f4:f8:34:33:2b:e0:59:89:91:9c:81:82:48:e5:
         f3:d4:44:f1:83:76:10:68:2b:b5:19:ba:68:a3:c8:1b:60:ba:
         78:4d:8d:74:ba:3d:ef:eb:92:2f:2d:4f:1c:ba:c3:24:d9:f0:
         5d:94:1b:33:fe:3d:d8:5b:29:5b:51:f3:42:5a:65:b9:b9:48:
         1b:8b:db:23:e4:f4:c2:09:9f:b5:fc:4c:be:60:46:a4:0c:70:
         75:88:59:2d:15:79:68:f8:2c:43:8d:87:e2:5f:d9:6b:fa:f4:
         fb:ae:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org