Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F67C155F787FD2A19A29F540EAD641741577F60.cer
File:                     6F67C155F787FD2A19A29F540EAD641741577F60.cer (raw, json)
Hash identifier:          QwKtRqm5jRDa4uD7TniZ7nZxl/ILK5BiEZTmuj4f0Rk=
Subject key identifier:   6F:67:C1:55:F7:87:FD:2A:19:A2:9F:54:0E:AD:64:17:41:57:7F:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F4C0CEAA6C899E024F83C08AFE77CD5EC2BD836
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/6F67C155F787FD2A19A29F540EAD641741577F60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jul 2024 19:50:13 +0000
Certificate not after:    Fri 04 Jul 2025 19:55:13 +0000
Subordinate resources:    AS: 28191
                          IP: 186.193.176.0/20
                          IP: 189.90.32.0/20
                          IP: 2804:c2c::/32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 13:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4c:0c:ea:a6:c8:99:e0:24:f8:3c:08:af:e7:7c:d5:ec:2b:d8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  5 19:50:13 2024 GMT
            Not After : Jul  4 19:55:13 2025 GMT
        Subject: CN=6F67C155F787FD2A19A29F540EAD641741577F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:fc:1b:bd:f6:1d:4b:50:d9:3a:9b:73:59:
                    6f:5b:b7:fb:58:07:c7:a9:00:8f:d2:3c:b6:66:ec:
                    f7:94:06:a8:84:ec:a1:28:9c:20:bc:20:68:a3:3e:
                    47:f6:52:cd:06:18:a0:0b:be:10:1e:44:b1:e3:ff:
                    4e:5d:cd:eb:2f:5c:00:98:83:da:8f:55:91:58:a2:
                    c8:33:d0:ca:14:45:c9:7a:aa:85:13:f9:c1:9b:ca:
                    5c:f1:28:87:15:66:24:3b:02:e6:94:a1:a2:87:eb:
                    4e:ae:51:cd:a6:03:f2:27:0d:41:d0:e2:4b:59:84:
                    5e:9d:55:0a:b4:c9:31:c2:5e:cf:ae:f0:db:4a:a1:
                    c1:20:9a:07:61:ae:0b:3d:ee:5e:2c:2e:33:c7:c4:
                    b3:59:81:25:3e:d1:c2:86:cb:12:c4:3c:11:33:08:
                    5b:08:b2:d6:dc:e7:de:2a:37:fb:52:bf:0d:41:75:
                    2f:5f:03:ac:93:c7:be:05:73:bc:d1:37:37:dd:42:
                    f5:4e:99:51:76:b4:42:5f:8f:8a:18:df:85:dc:f1:
                    7f:b6:24:5f:2f:14:ee:1d:e9:17:e7:67:14:e2:1b:
                    85:b4:60:4b:db:6b:07:97:2f:d0:a4:5e:e1:e4:51:
                    69:c5:57:4f:b9:92:f6:91:8f:84:77:1c:65:a0:3a:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:67:C1:55:F7:87:FD:2A:19:A2:9F:54:0E:AD:64:17:41:57:7F:60
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/6F67C155F787FD2A19A29F540EAD641741577F60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20
                  189.90.32.0/20
                IPv6:
                  2804:c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28191

    Signature Algorithm: sha256WithRSAEncryption
         70:52:a6:e2:fc:fb:db:cb:f8:3a:4e:17:41:38:f4:d5:2e:31:
         59:50:d4:7a:1f:bb:43:88:35:e1:29:a1:2f:80:f8:16:37:e6:
         16:07:cc:b6:ea:6a:fd:56:35:7f:f3:89:44:54:14:de:96:3b:
         18:73:ce:03:ec:24:d4:1a:e0:0f:bd:62:21:21:bd:07:78:7f:
         32:54:e6:3e:49:dc:0e:a4:c3:93:76:c2:1b:95:f4:ea:68:6c:
         e1:2f:49:06:b2:c2:31:f8:55:54:85:9f:00:00:b6:d1:36:30:
         30:7a:5f:f7:2e:bf:0a:44:47:e2:7a:c4:01:31:7c:98:72:2a:
         6d:5f:bb:7d:7c:cd:77:58:68:2e:d7:73:ab:a7:d7:0f:52:30:
         13:7c:19:ef:12:29:d2:e8:b7:77:13:75:2c:31:e5:53:2e:48:
         ea:ec:7b:14:fa:5b:cf:38:4b:e1:6e:a9:b8:25:f0:e6:c8:93:
         33:ef:9e:cd:5a:4a:8b:16:f3:63:a3:e2:73:33:38:59:f1:4f:
         17:3a:56:3e:bf:d0:cb:18:8d:10:37:4f:7e:96:7a:99:c9:ad:
         ec:d6:3a:28:c0:49:da:41:47:1c:14:bb:5b:f3:23:88:b6:3b:
         67:ed:25:19:90:aa:4c:00:e9:bf:79:22:da:f8:ee:a9:d1:cc:
         94:74:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 14:54:57 2024 by rpki-client on console-fra.rpki-client.org