Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer
File:                     0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer (raw, json)
Hash identifier:          efVAqVEgES5QwkeOtZ6g+W/4vUFo3W4SXCjWzVFp+Co=
Subject key identifier:   0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77E966DBF46C8C1926220EBAA3AED2319EBB6403
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:06:51 +0000
Certificate not after:    Wed 02 Apr 2025 23:11:51 +0000
Subordinate resources:    AS: 271410
                          IP: 131.196.28.0/22
                          IP: 2804:7b18::/32

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 16:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e9:66:db:f4:6c:8c:19:26:22:0e:ba:a3:ae:d2:31:9e:bb:64:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:06:51 2024 GMT
            Not After : Apr  2 23:11:51 2025 GMT
        Subject: CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:68:00:6e:64:95:07:8c:61:5d:ee:bd:a6:
                    53:63:79:85:60:69:3f:ea:e9:38:42:65:26:0e:d4:
                    8c:aa:76:7b:f2:7a:b8:63:1b:bf:4e:3b:22:2d:dd:
                    a1:9c:00:95:72:03:73:40:f4:8c:59:9b:6e:be:ee:
                    57:f1:a1:77:64:f5:bf:48:79:ff:d4:1f:11:3d:75:
                    66:9c:b4:f8:38:2f:b1:34:b8:36:f1:67:39:6e:80:
                    2d:9a:33:25:65:74:52:5e:58:fd:1d:c9:10:a2:20:
                    f6:29:ef:bc:21:49:3b:51:f3:64:fe:13:45:e4:ee:
                    51:3a:75:fa:01:d2:19:1e:be:2a:82:5e:e9:e6:cd:
                    7e:5d:e4:e1:02:7f:26:74:55:a2:98:d6:a6:cd:5e:
                    78:f7:c5:be:06:50:25:9f:66:b8:44:bc:f3:f3:33:
                    90:44:f1:35:dc:81:13:86:eb:95:99:16:f8:95:4c:
                    8a:67:48:0d:25:44:c6:de:19:6a:1b:bc:ac:44:a4:
                    66:56:03:93:cb:90:6c:fc:d5:52:ae:52:26:37:02:
                    3a:3d:85:cc:b4:3b:9a:09:1f:d1:16:96:7a:22:40:
                    fd:10:2f:f3:d8:c3:23:ce:14:80:67:88:3d:07:8e:
                    1b:26:d1:6d:be:fc:d8:12:2d:9d:14:5b:1d:3e:fb:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/22
                IPv6:
                  2804:7b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271410

    Signature Algorithm: sha256WithRSAEncryption
         c9:f7:cf:1e:5e:cb:95:50:76:55:de:25:48:79:3b:c5:99:7e:
         08:86:2a:07:58:a7:6e:db:80:ee:0c:21:8d:0c:ac:6c:b6:d9:
         21:0a:5f:a3:cc:12:2b:3e:00:f3:fc:17:1c:9f:4f:77:5a:fa:
         5c:a1:50:54:45:d1:8e:ca:0d:ad:a7:6f:cb:f8:93:06:91:0b:
         12:3a:1e:3b:38:9f:4c:38:bf:09:6f:e4:7d:fc:58:f7:f6:e6:
         30:bf:73:1c:cd:72:9a:c9:c5:a2:47:fb:0e:ac:78:e4:a2:f0:
         a6:14:b9:8b:2a:6a:34:82:92:37:f7:c2:5b:b0:2c:68:be:dd:
         f5:ad:e2:3d:ad:44:60:6e:41:1d:c0:3f:40:10:c3:93:a1:9b:
         04:02:f9:b3:24:e6:22:df:0b:53:a1:b6:69:c4:a1:7a:d3:12:
         30:ad:7d:a4:81:b6:2b:56:07:ea:5c:7a:4b:7d:42:f2:a4:1e:
         6b:1c:72:3f:ec:e3:3b:2e:35:66:cd:14:79:3d:ab:40:2f:f4:
         36:4a:cd:c8:6e:5b:5d:32:e3:b6:73:4d:c5:bb:54:41:d9:d1:
         71:b4:0d:a9:c6:5b:42:98:3e:81:c7:a3:9f:d6:9f:ae:8d:23:
         2c:5e:03:c3:08:ae:5b:a4:ae:b4:3a:b7:6b:49:ac:38:54:d6:
         5f:33:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:41:21 2024 by rpki-client on console-fra.rpki-client.org