Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B6D80FE3D906262A28CF60595613CE6FB40B607C.cer
File:                     B6D80FE3D906262A28CF60595613CE6FB40B607C.cer (raw, json)
Hash identifier:          tSITzhJOS9Buw/KcbHHrels7SGhGJNKRG3AfCuvmq5s=
Subject key identifier:   B6:D8:0F:E3:D9:06:26:2A:28:CF:60:59:56:13:CE:6F:B4:0B:60:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3EBE9C70C4F0F520DB5103C05E295A6A4DF158F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Nov 2024 00:13:55 +0000
Certificate not after:    Fri 14 Nov 2025 00:18:55 +0000
Subordinate resources:    AS: 267661
                          IP: 45.224.160.0/22
                          IP: 2804:44ec::/32
Validation:               Failed, certificate revoked on Mon 16 Dec 2024 16:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:9c:70:c4:f0:f5:20:db:51:03:c0:5e:29:5a:6a:4d:f1:58:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 15 00:13:55 2024 GMT
            Not After : Nov 14 00:18:55 2025 GMT
        Subject: CN=B6D80FE3D906262A28CF60595613CE6FB40B607C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:2a:0d:51:94:53:18:bf:29:47:45:02:bb:
                    3e:6e:f4:00:7c:1e:1b:ef:36:09:6c:94:ec:e5:be:
                    41:4a:84:ca:cc:ad:c4:c4:e4:b3:f5:6f:fa:d8:fd:
                    03:0a:2e:06:d8:ec:52:62:22:af:a6:3d:fb:8b:f1:
                    6e:0d:ca:70:c1:e6:b0:0f:2c:de:1c:c5:ea:ca:b7:
                    84:59:6c:d7:4a:60:c5:25:e9:01:70:f9:6c:b2:64:
                    ee:18:1a:31:f9:86:23:3c:4d:90:9a:db:4f:6e:2e:
                    ca:f6:86:04:64:ce:3f:93:40:18:c4:aa:19:8e:08:
                    9a:a5:37:64:79:2b:0a:fa:0e:a0:9d:34:7f:9c:7a:
                    4a:2d:25:3a:2b:da:03:5b:4f:cc:55:fe:ff:37:af:
                    87:c6:f4:91:94:29:d4:c6:74:7b:09:80:0f:ef:de:
                    73:8f:da:3f:27:29:20:b3:fb:d6:9e:89:c4:83:25:
                    3d:c4:25:4f:13:5a:9b:26:a0:52:8a:55:b4:4a:3b:
                    af:94:78:33:4e:65:44:06:21:3e:77:7f:c3:d9:d1:
                    c0:55:8e:46:52:74:36:49:7b:cb:2d:d2:0d:41:ec:
                    db:f1:e8:26:24:c1:f1:4f:9b:2a:fc:c6:9a:40:5d:
                    9e:e3:0d:8e:c6:d5:5f:ce:fb:30:ba:cd:cf:ea:eb:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:D8:0F:E3:D9:06:26:2A:28:CF:60:59:56:13:CE:6F:B4:0B:60:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/B6D80FE3D906262A28CF60595613CE6FB40B607C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.160.0/22
                IPv6:
                  2804:44ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267661

    Signature Algorithm: sha256WithRSAEncryption
         c7:15:af:90:90:16:cb:d2:bb:49:75:c9:ba:19:44:ac:f4:fd:
         60:2e:d2:e4:c0:b2:2f:1f:f9:80:19:4f:ac:1d:ef:fd:87:e8:
         be:e8:9f:97:66:5b:79:41:6f:fd:01:ae:fe:ef:c0:0d:92:73:
         eb:d7:21:81:60:57:89:66:e3:22:29:5c:cf:c2:7f:c6:95:1d:
         d8:cc:dd:f0:12:25:40:d5:7f:0b:0a:3f:a3:b1:6a:84:2f:8b:
         ee:2a:3f:0f:0e:53:ca:ca:85:14:58:24:25:69:bd:ee:4b:3f:
         d6:6d:8b:c5:9f:e8:7c:70:55:c3:cd:83:0e:91:93:7f:1a:21:
         af:ea:7f:0a:8c:3a:7d:79:dd:86:9e:8e:35:7e:c8:01:65:7a:
         90:dc:53:f1:1e:87:87:e8:a2:48:a3:a4:f1:a3:7b:00:cd:08:
         da:67:fa:17:3b:2c:a7:ed:19:d8:34:61:23:8b:02:2e:cf:93:
         20:32:82:8a:aa:d0:5e:16:89:27:f0:57:0b:6f:79:a0:62:c2:
         be:9b:99:fc:1f:8d:e5:18:0f:ec:2b:f7:d5:37:5c:9d:31:cf:
         18:65:5a:5e:b8:ca:c1:eb:65:46:1c:bf:d7:09:af:bf:0f:25:
         8a:45:47:82:d0:d5:3a:ea:91:af:cc:d2:ed:02:24:5c:38:58:
         2e:e6:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:31 2025 by rpki-client