Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C6CE53C31A2071918D348E76D38756F369E94E73.cer
File:                     C6CE53C31A2071918D348E76D38756F369E94E73.cer (raw, json)
Hash identifier:          HD8zn2hjdxrabRNLrxV+Zedf1DISRo2OrFQevbugC40=
Subject key identifier:   C6:CE:53:C3:1A:20:71:91:8D:34:8E:76:D3:87:56:F3:69:E9:4E:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       709976F9E110DD3009E5448CC8FEC39CDC052D98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/C6CE53C31A2071918D348E76D38756F369E94E73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Sep 2024 15:42:13 +0000
Certificate not after:    Fri 12 Sep 2025 15:47:13 +0000
Subordinate resources:    AS: 268564
                          IP: 45.162.212.0/22
                          IP: 2804:531c::/32

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 14:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:99:76:f9:e1:10:dd:30:09:e5:44:8c:c8:fe:c3:9c:dc:05:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 13 15:42:13 2024 GMT
            Not After : Sep 12 15:47:13 2025 GMT
        Subject: CN=C6CE53C31A2071918D348E76D38756F369E94E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:68:54:86:ef:c5:de:7a:59:1c:a2:ad:49:
                    65:bc:d5:71:db:02:d9:ef:73:68:54:29:91:93:fb:
                    57:76:be:2d:b8:5a:a6:05:70:19:48:b6:e2:30:7f:
                    be:e5:5c:86:ca:d3:1b:4f:90:9c:5a:83:18:a8:61:
                    e7:33:c6:ca:4b:d1:4c:e8:84:30:b6:a9:a4:96:5e:
                    fa:13:4d:67:cd:fb:96:26:5a:1e:ba:36:d0:dd:1e:
                    fe:84:dc:99:1c:b5:a7:69:61:30:29:e9:52:1e:cd:
                    e0:8a:be:e1:78:c1:60:ff:b2:79:7d:6f:57:cc:3a:
                    23:86:36:72:27:16:48:b8:e1:03:db:72:23:15:1b:
                    3c:13:22:89:b6:e7:ff:dc:21:b8:66:10:ac:3e:e4:
                    f7:76:a2:77:0d:72:7c:e0:d1:a0:8d:eb:65:65:02:
                    9a:27:2d:1d:24:36:5c:bb:b0:2f:35:6c:10:d7:e5:
                    f1:6f:f7:36:c6:fd:59:e4:5a:08:c2:7e:b0:e7:6a:
                    6b:39:60:74:06:74:d4:06:e1:23:db:fa:f8:02:50:
                    15:5b:c4:31:aa:08:3b:de:8e:7c:64:38:1f:07:29:
                    d7:76:2f:28:0e:49:9c:5b:ea:f1:03:ba:a5:cc:78:
                    bc:a0:50:f9:a6:af:72:17:10:2a:05:06:57:08:57:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:CE:53:C3:1A:20:71:91:8D:34:8E:76:D3:87:56:F3:69:E9:4E:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/C6CE53C31A2071918D348E76D38756F369E94E73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.212.0/22
                IPv6:
                  2804:531c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268564

    Signature Algorithm: sha256WithRSAEncryption
         25:9b:0f:96:4e:67:fa:92:17:14:4a:fe:ca:fa:26:ef:79:e3:
         6d:93:f2:00:34:f0:46:bb:42:7d:01:06:3a:90:a9:c0:b4:ba:
         5e:b8:91:78:90:59:10:ca:93:43:26:1e:6b:ba:11:12:b9:63:
         c8:dc:06:44:f3:2e:e4:a3:e6:8c:3c:b2:3b:7e:85:85:17:78:
         e2:a6:3f:f9:de:d1:69:83:49:14:c8:aa:46:b1:18:fc:f4:ff:
         b6:92:a7:bc:ab:18:3a:0c:6e:38:06:ec:ff:11:b8:95:44:f7:
         74:2d:00:5f:ee:57:2b:0b:b3:f0:34:b3:d7:95:73:fa:f9:04:
         ba:36:5a:6d:96:1a:06:a8:15:e9:33:fb:24:3a:63:57:c7:fd:
         f4:79:2e:1d:51:5a:a0:21:98:c6:b3:5c:27:6c:3d:5e:49:97:
         f7:a2:f4:40:fe:08:6b:d7:45:b2:ed:be:e9:c5:c4:d2:bd:09:
         d3:e6:37:38:ea:71:e6:28:c1:16:2b:de:e8:c9:1b:64:67:ca:
         cc:fb:56:fd:d8:92:b3:a2:ff:23:21:2d:cc:c1:8d:dc:b6:ac:
         2c:af:48:26:b0:26:36:03:be:d6:fd:e8:e9:a2:fd:12:b0:22:
         1d:a4:91:f3:c3:bd:7a:e8:3c:13:74:5d:03:65:e3:43:3d:4c:
         97:45:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:07:54 2024 by rpki-client on console-fra.rpki-client.org