Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B6A1A46F45C6D3A9008FCA678A016022056AF375.cer
File:                     B6A1A46F45C6D3A9008FCA678A016022056AF375.cer (raw, json)
Hash identifier:          9drXEhEiP2NKLqW8pDJ2mcnVsOJI+I0oZFV5h/dhhbE=
Subject key identifier:   B6:A1:A4:6F:45:C6:D3:A9:00:8F:CA:67:8A:01:60:22:05:6A:F3:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51AF336C39097E958276197DA2079399FF2CCE9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/1/B6A1A46F45C6D3A9008FCA678A016022056AF375.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:58:35 +0000
Certificate not after:    Thu 03 Apr 2025 06:03:35 +0000
Subordinate resources:    AS: 273796
                          IP: 2804:8c54::/32

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:af:33:6c:39:09:7e:95:82:76:19:7d:a2:07:93:99:ff:2c:ce:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:58:35 2024 GMT
            Not After : Apr  3 06:03:35 2025 GMT
        Subject: CN=B6A1A46F45C6D3A9008FCA678A016022056AF375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:cd:ca:c3:9f:da:ca:93:98:a1:b2:eb:33:
                    53:51:b0:5c:e7:e3:a3:53:b2:33:70:a3:c3:50:2c:
                    77:be:88:d1:71:f3:3c:30:05:cd:ec:01:9d:6a:79:
                    09:8f:e4:2c:20:d2:da:7e:6e:a6:04:6d:21:03:8f:
                    7c:83:d3:68:e7:b7:7d:6f:dd:61:16:7b:32:29:cb:
                    56:14:89:46:03:6f:06:e9:63:0b:d7:05:2d:ab:50:
                    72:8a:f7:98:6a:d7:c3:2a:f1:20:5f:d8:8b:75:69:
                    bd:fb:60:c9:38:db:8d:6e:ac:35:26:31:03:70:37:
                    ee:e4:13:77:4c:c2:38:90:eb:ec:dc:49:7b:4b:30:
                    79:bc:32:ba:f6:da:cb:b1:60:e3:22:e8:fe:34:06:
                    0c:92:03:84:66:77:52:b6:07:e1:1b:e1:da:e8:6a:
                    f5:6c:88:0a:0e:f6:ca:44:98:27:2f:f6:ba:f5:a0:
                    d4:21:f2:62:46:58:05:be:47:50:2c:1c:53:c6:4f:
                    19:47:f2:d0:a7:15:b5:2a:52:e4:cd:28:6d:60:e5:
                    fc:8a:61:41:04:5e:b2:bd:a4:28:8c:f6:c6:8e:82:
                    b2:3d:4a:13:e4:0e:61:b8:34:c9:91:f5:f6:3f:c3:
                    4e:22:57:18:ab:58:38:96:df:10:d8:0d:eb:9d:d0:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:A1:A4:6F:45:C6:D3:A9:00:8F:CA:67:8A:01:60:22:05:6A:F3:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/1/B6A1A46F45C6D3A9008FCA678A016022056AF375.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273796

    Signature Algorithm: sha256WithRSAEncryption
         32:4c:7f:6d:da:9a:e3:1b:2a:6e:66:c0:2c:b8:68:0a:0a:89:
         6b:48:24:f3:62:d0:0c:0c:67:e4:3d:fd:d3:f2:3a:c7:d8:6d:
         5d:09:98:58:c7:35:81:48:5e:3b:e7:b2:56:05:01:0e:ec:59:
         97:75:76:8e:81:ac:90:22:bb:f6:7f:b4:dd:16:7f:07:c4:f4:
         7a:88:a0:e8:6e:19:3f:01:53:11:5b:aa:65:36:41:75:8e:1b:
         1d:5e:2c:7f:cd:41:aa:73:d2:91:98:42:db:23:c7:15:31:ab:
         4e:e6:4d:f3:a9:08:f2:da:ce:02:ca:60:a4:1d:ec:c9:94:7b:
         9d:ea:0f:c9:e3:1b:d5:5a:46:a3:18:26:30:f7:16:57:fc:78:
         4e:f9:3b:92:80:04:52:cb:fc:03:b0:00:4b:91:2e:54:b6:80:
         46:f5:86:a5:48:4a:b3:b3:dc:43:14:63:72:93:e5:3a:de:3f:
         c4:ad:f7:01:26:fa:58:71:c5:63:ca:e9:8a:9c:1a:5a:3e:a1:
         96:d5:88:aa:38:1f:94:27:d3:ec:93:1b:47:2b:0a:4c:8a:b0:
         9c:24:80:6d:80:a2:17:07:d2:4b:54:59:c5:08:b9:a6:bd:37:
         d3:d2:e8:5a:10:2c:a1:76:ce:30:4e:d2:30:92:89:f7:bf:a6:
         4c:8c:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org