Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6C68644D4C6CFFE8BDA422591C8B98A83B34929A.cer
File:                     6C68644D4C6CFFE8BDA422591C8B98A83B34929A.cer (raw, json)
Hash identifier:          ZOBqcdR9FRspZv9YjS+1DpGGYQ+u7zCGDgZlZAuKu/Q=
Subject key identifier:   6C:68:64:4D:4C:6C:FF:E8:BD:A4:22:59:1C:8B:98:A8:3B:34:92:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5070EE3EFC26586E76C20AAB97A91F847CCC03CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/6C68644D4C6CFFE8BDA422591C8B98A83B34929A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Apr 2024 18:16:45 +0000
Certificate not after:    Tue 29 Apr 2025 18:21:45 +0000
Subordinate resources:    AS: 273658
                          IP: 2804:8a44::/32
Validation:               Failed, certificate revoked on Tue 30 Apr 2024 18:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:70:ee:3e:fc:26:58:6e:76:c2:0a:ab:97:a9:1f:84:7c:cc:03:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 18:16:45 2024 GMT
            Not After : Apr 29 18:21:45 2025 GMT
        Subject: CN=6C68644D4C6CFFE8BDA422591C8B98A83B34929A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:6f:87:2c:a1:17:39:8b:75:22:00:0a:b3:
                    ca:a9:4d:5c:87:37:f4:69:36:b0:ab:08:fe:f3:07:
                    53:fc:1f:a1:79:34:9c:65:db:84:58:66:a7:5a:a4:
                    cb:ef:2b:94:8b:ee:f2:ef:a1:3c:0b:c9:8c:1a:2d:
                    85:01:46:aa:a7:4d:00:96:53:f0:90:90:af:05:e4:
                    48:74:c4:a0:7a:da:ad:1d:42:33:0e:e2:54:c7:41:
                    82:af:ba:80:dd:38:c8:ed:09:de:8c:af:1d:bd:5b:
                    da:62:84:f1:da:f8:59:15:5a:be:3a:87:fb:c5:58:
                    99:83:98:aa:31:c7:f1:51:83:3d:17:52:61:bb:73:
                    c3:7c:22:72:70:9f:75:79:fd:bb:ee:35:88:f5:df:
                    66:51:6a:ca:e8:8e:7d:b0:63:07:93:48:4d:9f:23:
                    1f:df:d8:8a:3e:ef:5d:f7:f6:d9:00:d3:3b:d2:61:
                    f2:08:73:b1:ac:c0:87:75:72:cd:9c:48:79:63:80:
                    06:55:a9:c5:0a:62:b4:1b:59:0d:ea:97:a2:b5:45:
                    2c:bd:d6:40:be:49:78:48:01:a5:54:c7:e8:77:30:
                    d3:18:77:56:a9:7c:40:a8:ea:b4:b5:3b:47:de:8e:
                    05:c6:d1:37:d1:e9:eb:db:c6:4c:99:3b:3b:f5:fd:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:68:64:4D:4C:6C:FF:E8:BD:A4:22:59:1C:8B:98:A8:3B:34:92:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/6C68644D4C6CFFE8BDA422591C8B98A83B34929A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273658

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:23:5b:10:c6:3a:f0:4e:d2:23:f0:c0:f6:62:2c:96:15:
         20:4e:fd:ea:b1:60:7c:12:44:96:59:c9:d2:b2:e1:dd:51:50:
         81:59:00:ec:9d:d1:22:3a:a2:36:42:10:80:05:2c:06:4a:c1:
         d3:ed:d7:4a:25:68:74:8d:fc:4a:e6:13:94:1f:5d:d7:61:ee:
         83:12:58:90:fb:80:c9:4a:f6:e9:a0:6f:df:34:2c:ff:f3:1b:
         7d:f4:64:da:29:13:d8:32:67:bf:16:5c:bc:06:1c:ff:65:df:
         59:57:53:75:34:25:cc:05:70:36:c5:0c:12:f1:e7:e6:1c:3e:
         08:cd:b0:e5:17:8d:14:ee:93:d7:41:c2:9f:e5:8b:18:56:06:
         49:ca:7a:c9:37:ac:c3:78:c2:27:7f:ee:c5:81:f0:52:c4:3d:
         f7:7d:cb:b1:37:55:98:94:b7:f9:ec:b8:e0:d5:70:1f:d4:41:
         36:55:aa:e7:dc:2e:db:d9:a8:54:2d:08:e4:1d:8a:fc:e9:e5:
         25:88:7c:1f:66:e3:9a:aa:9f:1e:3d:b4:8c:76:e1:54:48:2b:
         c6:3f:16:6a:05:a3:0e:42:40:85:9a:52:4f:1e:66:26:4f:cd:
         e3:04:41:22:97:e8:a3:05:e9:58:c3:18:ef:76:1b:92:2d:80:
         1f:98:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:47 2025 by rpki-client