Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6740F6E7090CE0112F1FB1779EC5F7800213872.cer
File:                     E6740F6E7090CE0112F1FB1779EC5F7800213872.cer (raw, json)
Hash identifier:          v7Bm2gjXGk5n3/LdRTrAEi9YSWJ277g/pOCDtRZ2plA=
Subject key identifier:   E6:74:0F:6E:70:90:CE:01:12:F1:FB:17:79:EC:5F:78:00:21:38:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       193C250A0718357CC125A73AEAC96B0C1B8BBA06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/1/E6740F6E7090CE0112F1FB1779EC5F7800213872.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:02 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:02 +0000
Subordinate resources:    AS: 262669
                          IP: 138.94.224.0/22
                          IP: 143.202.148.0/22
                          IP: 170.78.68.0/22
                          IP: 177.22.224.0/20
                          IP: 187.73.240.0/20
                          IP: 189.39.192.0/20
                          IP: 2804:13d8::/32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 11:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3c:25:0a:07:18:35:7c:c1:25:a7:3a:ea:c9:6b:0c:1b:8b:ba:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:02 2024 GMT
            Not After : Apr  2 18:31:02 2025 GMT
        Subject: CN=E6740F6E7090CE0112F1FB1779EC5F7800213872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:b1:0f:6a:29:68:64:fb:c7:2a:6b:14:27:
                    37:13:c2:4e:20:d3:03:5a:fe:9e:81:a3:3e:c8:89:
                    67:fc:ab:27:fb:f0:5a:5a:80:c9:a4:be:b9:b1:42:
                    71:a5:e8:bd:6c:a5:51:6a:6e:6f:5f:c6:22:ee:04:
                    3c:23:d6:f1:2e:4a:f0:cd:38:1f:52:b4:c1:d6:f0:
                    bf:4a:ac:50:1e:d9:a5:86:d7:6c:1b:e8:af:1d:24:
                    b6:30:00:8e:c1:70:58:a4:10:c5:30:53:33:ce:f0:
                    72:20:8a:39:72:37:60:2f:7c:01:15:cf:2b:7b:c1:
                    85:f2:0b:34:66:f2:ca:a6:a6:da:f5:4c:39:2d:06:
                    55:91:af:c2:81:42:9b:1b:a6:5c:4e:ba:33:ce:27:
                    09:dd:00:92:7f:ce:f8:e8:80:dd:84:38:7d:55:04:
                    56:93:c2:15:95:4f:4e:14:f8:e8:7e:68:e1:70:d6:
                    f5:b6:ba:ad:d2:af:2c:25:ff:70:c4:03:f6:00:68:
                    6b:a5:45:7f:32:21:24:75:f3:e6:b6:d8:2f:72:db:
                    b1:4b:82:7b:da:e2:e4:2d:65:52:c3:81:92:6f:ec:
                    2f:23:a7:09:4e:00:9f:51:50:73:3f:45:85:f9:b8:
                    31:02:da:a5:c8:bd:75:41:be:a8:d5:2f:9b:79:a9:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:74:0F:6E:70:90:CE:01:12:F1:FB:17:79:EC:5F:78:00:21:38:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/1/E6740F6E7090CE0112F1FB1779EC5F7800213872.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.224.0/22
                  143.202.148.0/22
                  170.78.68.0/22
                  177.22.224.0/20
                  187.73.240.0/20
                  189.39.192.0/20
                IPv6:
                  2804:13d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262669

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:69:ac:e2:50:74:1c:63:76:fc:4f:91:cd:8f:ff:07:76:
         5c:bd:af:3f:a6:98:9d:d0:07:2e:a4:7c:19:6b:53:1f:22:06:
         ea:fa:74:d8:41:9e:fb:8b:20:e7:01:9a:0f:df:6a:25:dc:cd:
         6c:2f:e3:68:39:33:3a:7c:24:c2:04:0d:72:30:c6:3b:d0:de:
         b0:c8:2a:db:9f:b5:f7:68:10:5f:35:fd:ad:40:63:b7:3f:c5:
         d1:1c:ad:8e:48:f0:30:f5:b2:53:d6:01:ff:e0:16:c2:0d:3b:
         ba:71:58:0d:0e:1e:56:01:d3:19:88:b1:cb:44:05:16:82:be:
         88:ad:e2:97:16:08:b5:6b:2c:c6:d1:2a:46:f7:58:3f:7f:6e:
         9d:50:48:fe:26:72:40:f5:44:ba:01:57:1a:f4:dc:47:24:a0:
         2b:0f:e5:dd:ee:e5:52:fe:55:92:fc:a8:a1:43:a3:f2:6f:a7:
         0d:a3:e9:44:f6:f1:38:45:9f:ca:04:42:67:da:69:5d:d6:d4:
         a3:0a:e7:23:ac:d9:d2:a9:0b:0e:23:11:83:7c:e3:72:a2:ad:
         0f:be:18:a1:01:0b:78:0b:5b:ba:ae:b0:ed:4a:f9:9a:22:c7:
         56:74:60:f8:49:2d:e8:ac:15:71:02:e9:11:f9:e3:46:e8:90:
         0e:c6:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org