Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA609135EBE5C6CD385DCA8295C3FAECAEC3C282.cer
File:                     CA609135EBE5C6CD385DCA8295C3FAECAEC3C282.cer (raw, json)
Hash identifier:          5dqr6bedBlZ4c4CxrNkj3yXA5QGhlzywBX7njzacgLQ=
Subject key identifier:   CA:60:91:35:EB:E5:C6:CD:38:5D:CA:82:95:C3:FA:EC:AE:C3:C2:82
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BB62E68750071CE8FCA1405AF33491C8C7755F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/CA609135EBE5C6CD385DCA8295C3FAECAEC3C282.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Apr 2024 01:49:52 +0000
Certificate not after:    Sat 19 Apr 2025 01:54:52 +0000
Subordinate resources:    AS: 271197
                          IP: 179.49.180.0/22
                          IP: 2804:77c0::/32

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 03:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b6:2e:68:75:00:71:ce:8f:ca:14:05:af:33:49:1c:8c:77:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 20 01:49:52 2024 GMT
            Not After : Apr 19 01:54:52 2025 GMT
        Subject: CN=CA609135EBE5C6CD385DCA8295C3FAECAEC3C282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:38:e0:cf:56:47:d8:47:68:c4:53:74:51:
                    1b:06:12:c8:3b:7e:a4:4d:9d:a3:5a:a7:eb:48:43:
                    64:e3:38:c9:34:96:fb:60:83:84:d7:a2:28:07:76:
                    13:9e:47:4b:7f:fe:a0:28:8a:81:66:7e:4d:1a:5c:
                    42:5d:9b:a1:62:5d:9e:d4:12:fe:02:db:7b:dd:f1:
                    aa:3e:29:9e:39:7b:78:70:a3:0d:a9:9f:21:13:af:
                    31:0a:58:ea:cb:76:e8:a6:57:d4:99:35:c4:e6:ff:
                    6d:29:76:b7:0e:8d:b4:13:e6:9a:89:44:46:32:7e:
                    e5:b1:53:a8:76:06:12:0c:4c:95:2e:f9:3d:b9:fb:
                    8f:f2:44:05:ce:29:01:20:c1:54:f5:de:3b:74:99:
                    78:86:6f:62:5f:41:bd:4f:b8:84:67:8f:54:7b:90:
                    79:d2:9e:7a:29:fb:94:6b:10:06:a4:29:84:c0:7d:
                    cd:dd:86:20:2f:17:2e:42:31:1f:10:e2:42:6d:f6:
                    c2:e6:92:45:c2:5f:f0:dc:fd:3a:2e:b7:b3:27:b6:
                    12:86:ae:e6:b9:9d:0a:0f:95:58:ad:80:89:98:aa:
                    32:a4:b7:ba:81:e5:58:98:33:33:e4:43:08:d9:5a:
                    fe:4c:26:5f:b9:d6:b6:61:87:a9:98:66:7b:c3:6d:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:60:91:35:EB:E5:C6:CD:38:5D:CA:82:95:C3:FA:EC:AE:C3:C2:82
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/CA609135EBE5C6CD385DCA8295C3FAECAEC3C282.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.180.0/22
                IPv6:
                  2804:77c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271197

    Signature Algorithm: sha256WithRSAEncryption
         30:55:ac:88:fe:ea:10:05:9c:5d:ad:c4:56:ec:b6:57:7a:90:
         4a:0f:59:a9:79:5c:5e:95:78:86:23:7e:4f:5c:d8:ab:ec:e2:
         25:df:8b:56:b7:db:ae:f1:9f:aa:d5:76:71:de:e6:ba:e3:3a:
         3b:53:db:3f:66:79:16:a8:2c:09:9a:91:20:eb:ee:a4:01:48:
         4b:c4:ce:61:b4:81:0b:23:ff:1d:f5:88:de:92:e4:c9:cb:78:
         cf:6d:17:4a:ac:48:9b:ce:73:f9:ff:96:f9:d3:53:ca:28:6c:
         b0:14:91:30:d2:fb:68:80:c7:8d:3d:cb:06:5c:44:23:53:6b:
         70:ec:90:1e:3e:e7:43:c0:fb:0c:f4:2b:fc:f6:ed:9e:58:21:
         b0:5b:f1:cf:1d:ef:b3:7e:09:38:2e:f3:38:ef:92:90:21:f3:
         6e:3f:53:a1:f8:9a:22:47:d8:09:77:65:fa:ad:60:60:87:a6:
         88:e9:99:f3:70:f9:b2:fe:09:64:fe:16:ac:d4:1a:39:22:51:
         79:05:5e:47:8e:90:d7:51:e4:79:51:e8:af:38:56:68:5b:5b:
         24:29:e0:41:d8:fa:f5:e9:52:69:52:57:18:b0:a5:4f:ca:e4:
         6e:03:7d:bc:ae:90:27:07:c0:31:e8:0a:4c:f8:56:0d:00:17:
         b8:57:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org