Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer
File:                     E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.cer (raw, json)
Hash identifier:          GGDg4cNPNpsMExIYw9wWaQxhXVsf9hmLuHIsykSuq/I=
Subject key identifier:   E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E8694AE64E6228602746FA2791F96BAE09EE510
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:44:55 +0000
Certificate not after:    Thu 03 Apr 2025 08:49:55 +0000
Subordinate resources:    AS: 270519
                          IP: 24.152.104.0/22
                          IP: 2804:6d3c::/32

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 19:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:94:ae:64:e6:22:86:02:74:6f:a2:79:1f:96:ba:e0:9e:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:44:55 2024 GMT
            Not After : Apr  3 08:49:55 2025 GMT
        Subject: CN=E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:36:fd:fb:34:78:3c:cc:2b:cc:18:f2:30:
                    82:89:aa:50:d7:16:a8:fc:a5:64:ae:34:e6:1c:31:
                    49:43:6a:3c:35:3a:5d:64:9b:52:46:e0:33:9f:c7:
                    ab:18:c0:45:a0:eb:de:17:2e:d7:d0:2c:8e:82:ea:
                    cb:ac:5a:a2:b3:d5:d1:f1:6a:67:7d:98:22:f8:22:
                    ce:bf:c7:52:94:ec:c2:85:03:ce:15:30:f9:40:a9:
                    23:07:06:dd:f2:20:32:99:32:5e:a3:5a:e6:f3:d3:
                    cd:fc:0c:12:72:dd:8b:ab:d1:cb:8d:78:88:23:bc:
                    33:98:67:45:84:2f:46:71:8f:ce:06:5c:b1:0d:3e:
                    aa:82:0e:c4:83:f3:fb:17:10:0a:6f:12:d4:1a:47:
                    f8:3a:6f:6a:b1:ad:e8:34:74:5c:8f:0b:b8:ff:52:
                    67:fd:f1:98:1a:23:e0:82:80:9a:c4:54:14:b4:44:
                    bf:bc:5d:3a:84:6d:42:c2:52:fb:98:f5:59:31:b5:
                    cb:96:99:17:f6:e4:fd:e7:9a:45:de:79:87:c3:e0:
                    99:ba:bf:c3:e3:7d:fd:c6:26:82:d9:d0:f5:44:5e:
                    73:f0:58:ed:af:5e:f4:41:5b:48:34:4c:1d:75:fb:
                    75:d4:67:e7:73:b2:1c:5b:51:0a:ff:8a:52:37:f6:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:40:4F:7A:E3:91:6B:15:B9:04:3E:8D:7F:AE:57:A8:EB:DE:71:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/1/E6404F7AE3916B15B9043E8D7FAE57A8EBDE71A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.104.0/22
                IPv6:
                  2804:6d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270519

    Signature Algorithm: sha256WithRSAEncryption
         8f:c1:06:fc:ee:8b:e4:3f:bb:a8:0b:20:03:28:c5:89:cc:2b:
         f0:ab:e7:8f:ac:3d:46:94:0b:94:3f:40:b8:44:13:41:4e:5c:
         b1:f8:c6:b8:68:75:25:c2:61:a4:97:39:b8:a9:e1:b5:bd:ec:
         24:13:7e:0b:33:b5:07:6e:6c:b7:90:82:95:90:7e:92:e0:8a:
         7c:a6:99:91:2d:91:51:45:2b:4b:6b:de:d7:72:62:37:15:ec:
         a2:bb:f3:4e:e4:a4:13:95:7e:27:5c:30:25:37:11:1f:a7:7e:
         be:75:0a:97:60:20:40:c8:12:3a:ba:36:53:86:28:b9:1a:f9:
         43:91:d3:a2:93:4a:70:10:9c:c3:53:27:70:66:b6:29:2d:fc:
         8c:02:bf:f9:31:8c:7f:ce:2e:22:23:c9:63:de:c6:7b:5d:08:
         63:f6:7a:87:22:3f:b3:45:d0:27:ce:9c:1b:c9:f1:eb:5e:0c:
         d8:10:15:d8:4f:64:74:6a:63:ec:24:6f:2c:75:4a:c0:e8:8f:
         b1:f1:19:36:a4:c2:77:08:b8:d5:d1:b8:52:83:95:56:b7:64:
         f4:84:99:00:51:2c:79:c7:96:a4:27:db:21:70:ce:ac:d4:95:
         ae:a9:20:2d:7f:4f:1c:ad:91:1f:e9:e3:b9:e8:32:33:27:ba:
         f3:51:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:15:24 2024 by rpki-client on console-fra.rpki-client.org