Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer
File:                     6EF2FC69E0EB1744BF74348AB043129CB1F6B435.cer (raw, json)
Hash identifier:          ZqPwA76LbF68aM37UoDaNx06gR5o8WK//ni/n6tqIUU=
Subject key identifier:   6E:F2:FC:69:E0:EB:17:44:BF:74:34:8A:B0:43:12:9C:B1:F6:B4:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       700D201A05DB7EE9313C3D83DB0E550AE284EA15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Apr 2024 13:07:18 +0000
Certificate not after:    Wed 16 Apr 2025 13:12:18 +0000
Subordinate resources:    AS: 267263
                          IP: 160.238.24.0/22
                          IP: 2804:4ac8::/32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 19:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0d:20:1a:05:db:7e:e9:31:3c:3d:83:db:0e:55:0a:e2:84:ea:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 13:07:18 2024 GMT
            Not After : Apr 16 13:12:18 2025 GMT
        Subject: CN=6EF2FC69E0EB1744BF74348AB043129CB1F6B435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:7b:46:b5:c2:be:59:53:2d:de:22:37:8e:
                    ca:90:6f:1d:b5:7f:14:21:65:5f:42:e5:35:8f:c0:
                    4a:d3:38:be:92:23:83:11:33:17:67:76:20:f6:47:
                    ca:04:b2:43:a8:ad:dc:34:61:fd:d4:6a:2d:4a:24:
                    90:0a:46:28:d7:4c:53:46:48:3f:6d:57:0d:d5:21:
                    55:f6:dd:cb:47:4c:d4:07:7f:0e:bc:2a:2f:ab:9a:
                    de:19:15:4c:fb:93:44:10:70:ff:bf:f0:08:28:6a:
                    66:b1:20:cd:31:aa:62:6b:df:eb:c2:f0:c3:4a:2c:
                    5e:44:9e:4d:73:44:39:78:3c:38:eb:bb:0a:51:ac:
                    19:c6:91:e1:1c:34:d9:6e:d6:07:cb:59:f6:01:cf:
                    66:f7:5c:59:c4:ba:15:26:34:68:fd:f3:b3:93:30:
                    8e:7e:f9:1f:2e:ec:11:0e:eb:5a:5a:89:4e:11:c4:
                    b1:03:8b:21:33:8b:5d:27:cf:3a:5a:c6:e5:60:bc:
                    a2:12:b4:be:8a:be:38:33:78:d9:e6:1b:20:f8:a5:
                    f0:a1:02:47:7d:35:49:47:d0:2a:e4:bf:50:d8:04:
                    4e:ec:51:94:9a:53:37:87:0a:71:c2:3f:e5:fd:46:
                    96:90:8d:ab:fa:44:a8:c6:f5:5f:f0:c1:47:33:4b:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:F2:FC:69:E0:EB:17:44:BF:74:34:8A:B0:43:12:9C:B1:F6:B4:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/6EF2FC69E0EB1744BF74348AB043129CB1F6B435.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22
                IPv6:
                  2804:4ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267263

    Signature Algorithm: sha256WithRSAEncryption
         91:28:6f:38:fb:21:6c:2a:44:7e:59:00:97:68:35:06:a9:cc:
         ce:10:8b:8c:11:32:b7:59:9e:11:e2:00:df:fe:c5:80:ab:13:
         20:1b:0a:3a:99:6d:d5:65:11:50:f5:91:47:79:46:62:39:6b:
         8e:0f:25:0c:28:dc:72:25:fd:57:73:8a:63:a3:23:37:d9:e6:
         39:08:e6:bb:5e:dd:98:2d:b5:51:fe:e2:d5:64:69:d5:20:32:
         5a:83:88:31:fb:b7:48:0c:c3:9c:b9:c4:22:f4:01:61:ba:96:
         45:cf:87:7b:39:4d:97:f4:9b:18:92:df:7c:b9:57:84:f3:c6:
         ad:4e:a6:20:0e:ab:b8:41:0a:6e:19:a0:ed:55:98:a2:1e:58:
         6d:2d:4c:d3:cf:82:7f:bd:3e:66:72:80:4a:cf:f5:68:5c:a4:
         36:3c:de:a0:89:43:65:42:72:cd:c2:58:aa:90:c7:5d:dd:a1:
         92:74:08:ab:4a:19:91:a6:7e:12:98:e3:bb:6e:31:e7:e8:5c:
         cf:50:f2:5e:56:c9:9e:ee:e8:6c:cc:82:9e:ef:41:3d:21:db:
         46:11:a0:4c:55:db:69:e7:c5:bf:61:ef:b3:ea:82:3f:f1:ab:
         52:fd:89:04:62:57:e8:c2:c7:18:8c:54:16:50:6a:1b:31:5e:
         b8:7a:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 22:50:51 2024 by rpki-client on console-ams.rpki-client.org