Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
File:                     6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer (raw, json)
Hash identifier:          ij5IYhlv7WBRjOt9KhjpTpyQbd6TrQd/maKc8fj56L4=
Subject key identifier:   6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       365119C0AE58A5571160AFF8E9A9EC00EB9F20A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Nov 2024 15:17:57 +0000
Certificate not after:    Sat 01 Nov 2025 15:22:57 +0000
Subordinate resources:    AS: 272581
                          IP: 2804:8578::/32
Validation:               Failed, certificate revoked on Mon 25 Nov 2024 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:19:c0:ae:58:a5:57:11:60:af:f8:e9:a9:ec:00:eb:9f:20:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  2 15:17:57 2024 GMT
            Not After : Nov  1 15:22:57 2025 GMT
        Subject: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:6a:ef:02:29:1e:90:40:b9:50:99:e6:43:
                    67:16:cf:67:e9:f3:c5:63:cf:21:31:bc:79:cf:c0:
                    a3:95:54:36:c6:36:d7:67:6b:f3:4a:3c:9f:f3:50:
                    85:00:e5:b5:cc:3e:38:96:ab:16:32:c7:c8:a7:65:
                    62:5a:f7:d2:f2:0f:d6:ac:d9:e8:7c:8c:23:2b:e3:
                    b6:e0:53:db:be:fc:c8:62:dd:f4:45:ca:dc:6f:48:
                    f9:9a:3f:4e:af:4a:5c:80:43:46:2f:7a:68:12:e0:
                    fa:8f:21:a3:0b:9a:31:03:1a:bb:ca:59:11:59:27:
                    7b:a5:3e:40:d1:bf:dd:b0:40:1b:6a:f1:62:56:c4:
                    38:b7:50:91:13:59:80:5f:a6:e9:63:cd:be:48:e1:
                    d2:9e:25:f6:7e:0d:2d:37:e4:bc:84:24:42:73:43:
                    75:f6:70:08:c7:16:5e:48:cd:e2:61:39:87:d2:06:
                    7e:2d:6b:46:43:90:22:52:0d:cd:f8:89:e2:5f:54:
                    7c:c3:ca:de:8a:7b:c8:88:61:6a:6e:16:36:fc:f3:
                    a4:06:25:ec:5c:3d:80:13:1b:1c:8a:68:b4:42:3d:
                    0b:79:3b:0b:81:1e:70:00:f5:11:36:6a:3c:e9:9c:
                    ab:40:bf:19:39:fe:98:19:84:eb:1f:77:34:89:9b:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272581

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:e3:26:5a:2e:af:f0:8b:52:dd:f6:14:f4:ea:32:7c:39:
         30:4e:9a:3a:82:5e:a8:04:97:1d:18:1d:01:c6:19:1b:84:9a:
         32:83:27:33:10:78:4a:75:90:78:07:d2:a2:62:b9:16:a9:b9:
         d4:a7:24:cb:dd:2d:a3:45:7d:7b:9b:88:0f:d7:b4:9e:34:89:
         4e:42:ce:c1:86:95:6b:df:df:e3:42:c7:4c:5b:5d:cf:75:f4:
         2b:cc:c5:1d:19:e7:a1:08:b8:30:ed:7f:df:8a:a9:92:2b:86:
         63:0c:d0:6b:38:a7:1b:c7:05:99:bd:46:43:b8:36:d5:ad:2f:
         b1:d9:b0:83:19:28:3a:5a:98:5e:c3:56:e6:33:6f:bc:15:43:
         48:01:ed:17:c5:74:9d:b2:84:13:c3:d8:d0:d1:ea:ea:72:ab:
         52:27:97:97:ab:be:95:af:c5:c6:bc:42:bb:44:9f:3d:11:25:
         dd:75:20:6a:56:a8:32:79:8b:b0:c0:96:f0:bb:1c:ea:9f:91:
         6e:28:8c:81:b8:f2:b5:8e:93:63:93:d9:19:63:3f:d9:6c:f4:
         4b:a5:d9:43:53:43:8a:14:68:b3:4e:6f:53:ff:46:18:d2:3b:
         95:7b:53:b1:d4:50:7e:9d:f1:86:88:99:a8:42:03:5e:47:04:
         d3:bb:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:36 2025 by rpki-client