Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
File:                     D6A968B39492328F164F1853391297FB9752272A.cer (raw, json)
Hash identifier:          1jupZtP7UghOYv/da4tU2mVAuZ8Y4aMf+TuRrFizSgI=
Subject key identifier:   D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C06E84C3FEE0DD4ECB422C8AD0A96B924ED0DE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2024 15:47:20 +0000
Certificate not after:    Mon 28 Jul 2025 15:52:20 +0000
Subordinate resources:    AS: 269096
                          IP: 45.175.248.0/22
                          IP: 45.185.120.0/22
                          IP: 177.39.8.0/22
                          IP: 186.232.88.0/21
                          IP: 2804:5f64::/32

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 06:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:06:e8:4c:3f:ee:0d:d4:ec:b4:22:c8:ad:0a:96:b9:24:ed:0d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 15:47:20 2024 GMT
            Not After : Jul 28 15:52:20 2025 GMT
        Subject: CN=D6A968B39492328F164F1853391297FB9752272A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:00:4c:c4:ae:d1:6f:86:8c:83:c0:b3:6c:
                    17:dc:06:c2:0d:10:c9:c5:2f:7f:14:54:71:d3:61:
                    11:d8:be:af:d9:4d:17:83:a1:4d:41:a2:fb:e8:5b:
                    eb:e3:ae:e1:43:98:16:00:4e:50:c5:67:82:ca:68:
                    8b:82:bc:1d:31:ea:6d:68:b4:8d:f8:eb:21:fa:81:
                    28:88:73:85:49:5d:95:76:cc:27:d5:d8:b9:87:1a:
                    b6:68:e7:45:2c:fc:cf:6c:3d:37:09:44:2b:dc:5e:
                    89:b4:1c:4c:8c:38:9b:fd:c1:a5:53:30:c5:95:4d:
                    8e:ef:ce:9e:06:4c:41:31:fe:63:1b:70:5c:3d:b3:
                    88:23:5c:53:7a:dc:c7:f2:b3:c5:af:76:33:2b:0e:
                    48:e3:e5:d6:81:89:2d:94:b8:1c:52:56:f0:35:66:
                    b5:d9:15:31:b2:11:d3:32:d7:2e:a2:37:ce:d3:e3:
                    c9:69:d5:51:15:02:de:5a:4f:8e:b7:50:80:7a:f3:
                    30:30:14:77:73:a7:ed:e0:ff:85:a1:d8:e4:2b:b8:
                    0f:c9:81:6d:6a:aa:99:d8:3e:a7:47:39:83:2b:a7:
                    40:30:65:63:bb:c0:28:7e:27:cf:e4:26:0a:dc:24:
                    aa:7d:7c:86:54:e5:0b:0b:51:31:72:c1:bf:ed:fa:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.248.0/22
                  45.185.120.0/22
                  177.39.8.0/22
                  186.232.88.0/21
                IPv6:
                  2804:5f64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269096

    Signature Algorithm: sha256WithRSAEncryption
         a1:0a:7a:78:36:ac:29:e1:f2:92:5f:85:c2:18:04:f1:97:8a:
         a3:8b:e9:a9:76:2e:6d:24:bd:a5:88:63:44:36:41:e9:10:f8:
         ac:df:96:eb:50:54:08:6c:bc:bc:63:92:3a:dd:ca:35:8a:ee:
         4b:c5:50:94:08:9a:9c:23:a1:0a:e5:b4:5e:3a:74:e7:a4:f4:
         49:ec:42:c3:bb:20:fc:32:ea:12:06:de:d2:00:a8:5c:7c:85:
         a5:54:ab:69:fb:39:48:bb:52:f8:de:43:43:ed:83:68:29:77:
         de:4d:00:63:8f:49:76:e4:da:3f:e7:8a:01:9d:34:a8:35:3c:
         4a:1c:48:34:2f:ed:05:a6:26:be:d2:f2:08:4c:19:54:d5:26:
         ba:bb:07:1f:63:e5:a4:05:68:a3:36:8f:a6:ff:22:4e:70:1f:
         7d:d3:71:42:a9:05:1c:3e:25:56:1b:90:bd:fd:f6:b5:76:3c:
         f5:d4:16:cf:db:4d:3b:bf:5b:82:9c:30:87:47:61:cb:99:8f:
         24:ce:29:9e:76:45:94:3c:f5:60:cc:a3:8f:ca:49:b4:b8:1f:
         bd:72:77:de:4b:af:19:da:5b:75:9e:e2:74:17:9a:81:6d:47:
         97:d0:eb:35:24:c3:7f:6b:39:d5:69:92:b3:53:5f:0f:95:93:
         a0:ef:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 08:35:26 2024 by rpki-client on console-fra.rpki-client.org