Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6F48A809EDE782D5F47319B8FD312366B2AF4F2.cer
File:                     E6F48A809EDE782D5F47319B8FD312366B2AF4F2.cer (raw, json)
Hash identifier:          YNLCf/s4NUZX+GMu/ryecSAzsrUzhZUszn170Exrnzg=
Subject key identifier:   E6:F4:8A:80:9E:DE:78:2D:5F:47:31:9B:8F:D3:12:36:6B:2A:F4:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0127E207EBF8BBB47A00E19955D581D12EBD763C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/E6F48A809EDE782D5F47319B8FD312366B2AF4F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Sep 2024 18:08:08 +0000
Certificate not after:    Sat 06 Sep 2025 18:13:08 +0000
Subordinate resources:    AS: 268033
                          IP: 45.166.200.0/22
                          IP: 2804:56f0::/32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 09:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:27:e2:07:eb:f8:bb:b4:7a:00:e1:99:55:d5:81:d1:2e:bd:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  7 18:08:08 2024 GMT
            Not After : Sep  6 18:13:08 2025 GMT
        Subject: CN=E6F48A809EDE782D5F47319B8FD312366B2AF4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:83:ed:ae:a8:8f:5e:bb:29:e9:4f:06:04:
                    23:05:4d:e3:c9:4a:93:93:a9:2b:79:a1:e1:e7:ea:
                    06:24:70:a3:65:f6:94:12:a5:43:88:bf:a8:c6:d6:
                    01:8c:2d:ba:5f:da:0b:7e:be:a7:70:e7:12:97:c5:
                    31:48:f3:66:60:97:52:a2:2d:38:4d:a9:8f:7e:20:
                    aa:61:01:7a:37:91:d4:08:0e:0c:19:45:80:15:fc:
                    a4:7c:2c:3e:cc:60:ef:eb:00:9d:3a:9c:79:05:85:
                    d6:d1:55:b3:ee:0f:ad:a5:a8:07:93:20:bb:f5:9e:
                    2d:12:c9:d0:10:e3:7f:55:2c:4e:e3:ce:f9:45:d4:
                    01:1c:44:4d:dc:55:f4:ae:41:58:90:0d:3c:c3:64:
                    9d:3e:93:22:18:56:1b:22:8b:1c:f6:f5:b0:93:30:
                    35:ab:e9:18:0e:b0:7c:5c:d3:78:13:77:c6:50:e7:
                    4c:a1:b9:7d:73:34:b9:fd:a5:75:1a:3d:5b:0d:b4:
                    53:70:9f:92:53:d5:db:fd:3a:0f:0c:7c:60:bc:e5:
                    b3:b8:ed:d3:f5:38:93:18:f8:af:15:35:de:0e:6b:
                    a0:ae:06:b5:ab:97:c4:98:ec:45:91:d7:7d:7d:9b:
                    fc:78:62:95:e3:64:a0:40:ce:44:70:09:8e:56:ac:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:F4:8A:80:9E:DE:78:2D:5F:47:31:9B:8F:D3:12:36:6B:2A:F4:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/E6F48A809EDE782D5F47319B8FD312366B2AF4F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.200.0/22
                IPv6:
                  2804:56f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268033

    Signature Algorithm: sha256WithRSAEncryption
         b4:4f:27:aa:6b:2c:c0:e4:a5:e2:91:c3:6e:7a:9a:fe:22:f3:
         15:df:e6:54:63:a4:23:d6:a7:8c:da:04:b2:62:6d:35:21:a6:
         ec:6c:e9:a9:78:02:b0:b3:83:34:d9:6c:5e:3f:98:c2:89:b8:
         4a:ac:27:84:fb:77:7b:a3:ed:5a:1f:34:d1:c2:6c:9f:6d:56:
         e2:b0:2c:a5:20:78:c1:7b:5f:94:57:44:fa:2c:83:e7:48:f3:
         94:77:f4:7f:74:43:31:09:92:9d:71:c5:4c:1d:07:b6:9e:4e:
         54:c9:a1:b5:dd:91:87:0c:4a:a2:7c:29:bc:87:14:c1:7e:48:
         b4:ee:71:f6:8d:dc:c9:8a:ad:c6:1e:8e:0d:e2:71:8d:59:ff:
         ae:e4:8b:b7:38:f5:fe:03:d8:d5:43:eb:c9:29:0d:8a:cf:93:
         dd:b1:be:ea:a1:df:f8:d7:60:eb:fe:ab:8d:6d:06:86:00:bb:
         a8:fb:c2:2c:59:2f:ae:2c:20:9a:9a:84:fc:42:7a:fd:f3:11:
         fd:27:75:75:69:c8:ef:2c:25:fd:af:2e:8c:19:fb:05:53:1c:
         d8:69:ba:82:f9:7f:71:29:5d:b6:68:62:bc:30:35:8a:84:b8:
         fa:0f:f4:39:71:f4:ed:28:1b:a6:f3:01:f5:e6:ef:09:05:7f:
         09:04:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 13:39:01 2024 by rpki-client on console-ams.rpki-client.org