Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer
File:                     F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer (raw, json)
Hash identifier:          EwApBVwxygLS+pifDYvtOJn0sX+JWqX/QDLSHQMXLlk=
Subject key identifier:   F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31778B3AA45174FFF3813FDAA1E760729A76FA00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 14:05:48 +0000
Certificate not after:    Wed 07 May 2025 14:10:48 +0000
Subordinate resources:    AS: 264539
                          IP: 138.0.24.0/22
                          IP: 2804:2128::/32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 19:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:77:8b:3a:a4:51:74:ff:f3:81:3f:da:a1:e7:60:72:9a:76:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 14:05:48 2024 GMT
            Not After : May  7 14:10:48 2025 GMT
        Subject: CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:dc:63:b9:f6:da:03:77:fb:73:ae:22:45:
                    f6:54:6f:6b:d1:59:4a:36:02:06:76:db:5b:e3:1c:
                    96:50:1d:fa:1d:06:dd:0c:aa:58:d3:65:6f:95:a7:
                    ae:d5:35:c9:dc:05:b9:4e:2d:e9:36:bb:13:94:b0:
                    25:b8:19:03:d7:f3:3f:67:b8:31:a0:dc:1d:b1:56:
                    3b:a0:19:a8:28:2e:ff:11:f1:fc:7c:02:5f:0c:e1:
                    50:f1:4d:6a:21:e8:3a:9e:69:a8:cf:47:9e:6f:d1:
                    c4:31:00:f4:07:a9:09:01:58:5c:1e:35:7e:3b:38:
                    40:d4:c1:8d:46:e6:aa:31:b3:1d:64:d7:26:22:71:
                    3f:c1:31:50:6a:92:36:37:b9:3f:ed:cc:b0:c2:8a:
                    b9:c4:06:79:13:bc:70:36:6a:f8:48:df:a4:4c:30:
                    c8:19:c9:ba:04:d8:1f:12:cc:f7:96:51:1a:1b:2e:
                    b0:fd:83:58:1b:86:43:e8:a5:e8:14:d7:0a:fd:7a:
                    e6:c6:9b:51:2f:1e:83:2d:75:df:0c:29:3e:57:43:
                    21:8a:31:f0:8e:6e:4f:97:7e:fd:eb:f3:f7:9c:ad:
                    4f:11:7d:b4:d2:dd:d8:66:67:75:e9:0a:48:ad:33:
                    c2:b6:60:f2:6c:a4:58:ef:eb:88:5b:08:73:46:fa:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22
                IPv6:
                  2804:2128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264539

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:73:94:48:d0:06:af:84:71:87:2f:c5:59:f3:6b:3d:1d:
         78:56:bb:62:50:53:0d:dd:78:1f:36:bf:cc:c6:97:df:c9:86:
         e1:7e:87:2a:d0:41:30:64:0f:ce:98:e2:3f:90:00:2a:0d:8f:
         17:14:f8:81:fe:af:63:be:eb:78:cb:7d:bc:14:8d:46:8d:67:
         fb:6a:d6:e9:d4:c5:c4:9a:56:f2:91:0a:49:d6:af:43:76:9b:
         b4:9f:5c:70:4e:3a:1b:aa:14:3a:db:09:48:ae:cb:46:fb:d1:
         4c:ae:4f:b9:66:bf:aa:80:09:a8:f1:2b:95:75:f2:47:a5:69:
         53:32:22:8a:c8:67:4b:f9:ac:2d:49:13:21:1e:eb:a6:47:bf:
         2a:09:38:91:21:57:6f:76:5f:77:94:61:f8:02:ea:c4:6e:41:
         ce:c5:72:12:8e:20:b0:cb:91:51:aa:85:36:3d:eb:8d:ec:23:
         0c:0e:80:d2:3d:3c:72:e7:5c:46:bc:b5:c0:67:8d:2d:c5:1e:
         4f:50:3c:3b:9b:a7:0c:1a:ee:41:0a:39:5e:4c:05:18:10:ad:
         e0:50:4d:b8:93:90:6d:24:e5:18:61:97:6e:62:00:c4:91:e2:
         76:ec:93:57:71:81:1b:2d:c8:aa:2c:c7:ce:eb:93:fd:da:4e:
         ad:e9:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:57 2024 by rpki-client on console-fra.rpki-client.org