Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EFCA001487167C1DEB4618A143333F6D08C3710.cer
File:                     6EFCA001487167C1DEB4618A143333F6D08C3710.cer (raw, json)
Hash identifier:          s04d15Nkxzu5t2f/19sFveRdGH3pl0E4EG8icBs9lEY=
Subject key identifier:   6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F2D431439A7B07FDE5659BB400372A82F1192E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Nov 2024 15:40:53 +0000
Certificate not after:    Thu 13 Nov 2025 15:45:53 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 18:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2d:43:14:39:a7:b0:7f:de:56:59:bb:40:03:72:a8:2f:11:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 14 15:40:53 2024 GMT
            Not After : Nov 13 15:45:53 2025 GMT
        Subject: CN=6EFCA001487167C1DEB4618A143333F6D08C3710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:bc:f1:2b:89:a5:b6:c6:1b:4c:f1:ce:da:
                    0d:2b:bc:27:e2:da:63:e0:a1:69:48:c2:23:0e:a9:
                    29:4e:43:91:e7:55:52:04:e1:5c:50:16:6c:ca:a1:
                    36:92:3a:e4:81:51:31:bf:dc:88:8c:7a:01:1f:f4:
                    63:0b:29:f7:7a:06:57:6d:0b:99:09:8b:d2:3d:83:
                    ed:7e:55:39:e7:69:61:31:52:22:1f:21:af:05:31:
                    6e:6f:d7:28:10:65:81:87:ca:f3:84:02:32:64:6e:
                    63:11:c6:32:28:a0:6f:47:d4:dd:c4:8e:a8:db:68:
                    6c:55:10:b7:38:b5:93:c7:22:d9:cd:10:f2:9d:d5:
                    36:7c:68:c6:fe:09:3f:e8:84:d0:1e:ea:31:02:73:
                    35:92:96:65:ed:cb:e8:3f:1a:c2:54:ad:a4:fd:cc:
                    fa:7a:95:99:d9:15:e8:02:b4:36:76:57:5f:c2:34:
                    fe:e3:ac:d4:30:83:33:b0:bf:5e:45:47:45:5f:bf:
                    fd:4f:31:08:92:2d:c3:96:1e:93:ac:02:24:69:db:
                    84:70:28:62:a1:46:85:6e:37:32:49:75:d5:75:78:
                    26:c7:80:bb:21:67:00:03:1b:f5:13:3d:dc:b7:79:
                    8c:e3:16:f9:95:fb:9e:ca:a7:e3:7f:60:59:18:01:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:FC:A0:01:48:71:67:C1:DE:B4:61:8A:14:33:33:F6:D0:8C:37:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/6EFCA001487167C1DEB4618A143333F6D08C3710.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         30:58:03:a8:12:4a:68:b7:85:a1:a5:12:17:08:08:89:b0:96:
         67:bf:3f:c7:04:03:38:78:66:78:62:99:11:bc:9d:c4:fb:79:
         51:02:03:ab:9c:eb:c0:97:92:ae:fd:66:d3:35:43:d0:42:ff:
         40:bd:ca:72:3a:dc:27:50:91:a6:f2:e8:59:d4:39:8d:b4:35:
         5a:4a:a8:26:fa:f7:d3:d1:f6:dc:e0:19:b9:b2:5e:d6:1b:32:
         09:b7:65:14:35:c2:0c:ce:72:52:cb:6c:69:59:81:95:ed:87:
         0a:40:88:6c:ab:1a:8e:10:92:34:6d:26:da:29:25:7c:61:38:
         fd:b0:c9:84:a0:05:21:1c:e2:e2:8c:d0:0f:15:6d:63:18:67:
         e6:b6:54:3d:e7:3f:93:7f:31:27:ab:50:fe:cd:06:5b:e8:4c:
         b8:56:e9:28:30:c6:eb:ad:61:a8:ae:d1:d0:57:22:ba:ca:7b:
         20:df:05:d1:bf:65:2c:75:11:ca:5a:56:c9:3b:28:73:9e:76:
         9f:b3:15:8f:bf:66:23:d2:57:18:14:c1:1c:a2:5d:c0:5a:6b:
         8f:b2:3a:5f:49:56:e4:0b:09:b8:67:da:a7:09:8d:41:e8:91:
         b9:0e:22:12:66:80:ef:c5:96:82:d0:4c:5a:16:ad:0d:c5:01:
         14:e9:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:45:15 2024 by rpki-client on console-ams.rpki-client.org