Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
File:                     CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer (raw, json)
Hash identifier:          mmP4wkIsaonXWqhj4BhzYqu7ooiUyl4TjBwp2a4QgJ0=
Subject key identifier:   CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5460FB2940FC9C64B1223397F103A5886034DB24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:28:07 +0000
Certificate not after:    Thu 03 Apr 2025 09:33:07 +0000
Subordinate resources:    AS: 262550
                          IP: 143.0.40.0/22
                          IP: 168.197.4.0/22
                          IP: 177.72.168.0/21
                          IP: 2804:28e0::/32

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 12:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:60:fb:29:40:fc:9c:64:b1:22:33:97:f1:03:a5:88:60:34:db:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:28:07 2024 GMT
            Not After : Apr  3 09:33:07 2025 GMT
        Subject: CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:5a:3b:0d:75:5e:d3:98:f4:89:26:90:c5:
                    f5:97:ac:66:b4:13:1c:c8:1d:8c:87:1f:e5:1a:93:
                    ad:c6:2f:c2:3b:a0:dc:c4:d0:6f:9f:72:93:6a:60:
                    3f:cb:8f:ca:59:3b:b8:50:de:50:67:16:86:10:50:
                    36:2a:33:19:6b:0b:9f:7a:6f:23:96:5d:34:27:a4:
                    69:88:9f:c1:5e:00:80:96:c4:24:a3:92:0c:d9:13:
                    b6:5a:77:15:21:47:a8:97:38:74:6f:29:25:8d:51:
                    e1:0f:22:7e:32:ae:89:aa:af:9f:e2:1a:3d:ac:74:
                    20:27:80:5f:6e:f2:9d:43:2f:9d:ee:f4:36:b8:ec:
                    43:28:85:1b:fa:77:85:c8:53:41:24:25:c5:0c:00:
                    6a:dd:84:8c:9d:ed:11:15:30:bf:34:c3:37:91:d7:
                    12:6e:b7:ad:f1:1a:bb:82:16:39:46:fe:8b:83:e4:
                    a9:81:04:eb:04:66:95:97:72:2d:19:da:87:47:db:
                    62:5b:02:bf:61:c7:a1:b3:29:09:1c:1e:7b:87:22:
                    a9:71:2d:cc:5a:71:3a:14:bb:fa:da:fc:b4:0f:f9:
                    71:6a:5e:1f:28:66:25:40:fe:f3:3e:a3:03:b0:d7:
                    84:ad:93:37:e3:a9:a1:29:25:e9:f3:d2:07:02:36:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22
                  168.197.4.0/22
                  177.72.168.0/21
                IPv6:
                  2804:28e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262550

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:17:d2:7e:c5:c6:95:16:db:b6:c8:bc:33:e1:97:72:b8:
         7e:be:8a:9c:40:48:51:a5:b5:e6:da:58:57:e1:c5:ca:af:43:
         77:65:da:d7:b8:69:91:e0:f3:8c:af:22:b0:43:cf:ac:a2:b6:
         b7:ba:ba:6b:d7:bc:7a:66:92:3c:ac:9a:09:bc:b1:00:2e:06:
         c1:47:c4:67:ae:1c:a8:7c:89:bc:a5:a1:75:ad:37:50:61:7a:
         f7:b8:9d:ea:ca:38:3d:f7:58:2a:ad:e7:c2:e0:b7:62:30:cd:
         61:0a:4a:46:ca:2d:aa:37:81:02:83:2f:d3:d7:c7:8f:19:d7:
         af:3c:23:92:97:48:9b:1b:ca:23:fe:cc:5b:b3:f4:77:54:63:
         39:60:6b:ce:77:f2:e0:fe:1b:f1:d7:e0:91:b4:d2:bc:f6:95:
         d8:b5:3f:7b:9a:22:31:4d:20:bb:69:23:ab:fe:42:32:db:0d:
         e7:af:98:5a:67:b4:67:ed:b9:b5:e2:d0:90:a9:40:ec:77:8c:
         f4:e2:f3:11:50:64:e8:65:4e:90:6e:ad:81:31:ee:0d:11:c5:
         fa:7c:b3:88:20:cf:7a:ef:a2:6e:20:9a:b6:f1:40:cc:3e:5d:
         de:82:61:0d:34:fa:62:a5:80:99:13:7e:ef:ef:98:4e:c2:4c:
         a6:cb:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:48 2024 by rpki-client on console-fra.rpki-client.org