Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.cer
File:                     CC0E245A65A53FD4D3F92E761E1A49BF1200285C.cer (raw, json)
Hash identifier:          6V6a0IiT5pcjOcwKtt+kyJgCfUxSEupVjXGpphE9mf0=
Subject key identifier:   CC:0E:24:5A:65:A5:3F:D4:D3:F9:2E:76:1E:1A:49:BF:12:00:28:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2FF277DDB64535ED9349BA83E59F3409400B3CCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:33 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:33 +0000
Subordinate resources:    AS: 268437
                          IP: 45.160.20.0/22
                          IP: 2804:5134::/32

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 14:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f2:77:dd:b6:45:35:ed:93:49:ba:83:e5:9f:34:09:40:0b:3c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:33 2024 GMT
            Not After : Apr  2 18:32:33 2025 GMT
        Subject: CN=CC0E245A65A53FD4D3F92E761E1A49BF1200285C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:0c:fb:b4:29:e3:5f:40:6b:ef:5c:04:2f:
                    a0:60:74:30:12:d9:66:b6:d2:16:94:c7:4b:78:e2:
                    d6:eb:1c:80:54:68:c1:3c:db:51:b5:e0:a6:be:a0:
                    4d:74:63:67:9f:fc:06:95:78:4d:41:bf:ab:67:1f:
                    28:e8:aa:70:6c:7a:ab:02:62:01:0c:0b:bc:76:90:
                    3c:93:bc:dd:34:da:2c:d5:47:f0:e6:0b:e9:8b:1e:
                    78:21:eb:45:ab:ab:33:92:bb:c8:9e:84:b1:ff:e4:
                    37:ea:37:c6:89:8b:66:b2:fa:d5:96:1f:1e:6f:e8:
                    ac:c3:dc:0c:2a:85:9c:2a:61:7a:c1:9b:c2:e8:71:
                    79:68:7f:5e:d5:0a:43:1d:aa:ef:03:53:99:82:1c:
                    37:34:d8:d3:a0:7e:83:00:79:ef:61:1b:63:dd:7e:
                    c2:70:ca:09:13:41:40:2d:2e:32:90:ec:ea:02:66:
                    a2:bb:0d:e9:de:fb:59:6b:2f:a4:fe:1c:dd:5a:36:
                    c2:a1:bc:72:7c:ef:15:92:c2:4c:04:a5:0d:ef:a9:
                    05:20:94:0c:e3:a6:05:2b:52:f0:87:0a:af:1e:d5:
                    fb:b5:8d:13:ef:55:9e:8c:b0:e0:8f:39:81:50:49:
                    29:66:45:f6:8d:f1:9b:67:f9:6f:84:a1:50:cf:39:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:0E:24:5A:65:A5:3F:D4:D3:F9:2E:76:1E:1A:49:BF:12:00:28:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.20.0/22
                IPv6:
                  2804:5134::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268437

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:2a:fe:4e:96:9b:5a:41:17:fc:ec:9e:ec:2d:0d:b8:c7:
         2f:4c:5b:a5:bf:3c:03:9a:92:e9:02:c2:40:31:06:f4:c0:74:
         38:29:62:ab:27:ec:52:21:dc:01:2c:4f:44:85:2d:c3:f5:ee:
         fc:1f:b0:36:fc:11:fc:c1:0b:54:61:d1:78:83:22:ab:c0:4c:
         cb:9c:6d:3e:23:bc:11:58:88:c0:a3:31:44:6b:4e:6f:a7:1f:
         4a:11:10:92:76:3f:7a:0a:fa:19:79:26:8b:60:1a:ea:2d:e9:
         ac:eb:a8:3a:db:a2:94:f7:37:df:b4:3e:0a:f6:98:e1:34:dd:
         0d:0e:a5:2e:ba:d1:50:b2:51:28:2e:ef:32:e5:34:ff:1a:d1:
         b6:49:e9:6e:c9:2c:e9:80:2a:52:12:a0:63:1a:38:12:70:69:
         0e:c0:28:32:de:a1:8e:73:93:91:6f:2a:ac:54:0c:9d:ef:b2:
         86:bd:8a:b1:0c:43:01:08:f6:6e:91:eb:57:fd:17:a0:11:51:
         0f:f9:9c:58:51:fd:84:ab:5d:f1:57:28:46:89:94:28:0d:d7:
         35:92:c7:97:2e:fa:52:3c:0d:2f:34:96:7e:ad:bb:8a:e3:80:
         b1:74:a7:67:9a:42:bd:db:1f:05:bb:07:b1:d7:bc:e0:9e:14:
         7b:25:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:28:27 2024 by rpki-client on console-ams.rpki-client.org