Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer
File:                     0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer (raw, json)
Hash identifier:          EVi1EQm/Tfoi8XFNxEAAART2esARn3LSjO+I9H96soQ=
Subject key identifier:   0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BB802D5FDECF30E7A89E1A78B891980618BF077
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 18:58:03 +0000
Certificate not after:    Tue 22 Apr 2025 19:03:03 +0000
Subordinate resources:    AS: 265949
                          IP: 164.163.96.0/22
                          IP: 2804:4048::/32

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b8:02:d5:fd:ec:f3:0e:7a:89:e1:a7:8b:89:19:80:61:8b:f0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 18:58:03 2024 GMT
            Not After : Apr 22 19:03:03 2025 GMT
        Subject: CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:10:50:4f:39:6e:61:bb:04:79:00:39:23:
                    c3:3e:32:2e:f6:74:3a:60:88:5f:55:23:89:1d:9c:
                    02:6a:9f:88:c7:65:47:c1:8b:30:23:4e:e9:ef:b0:
                    52:a3:d8:0d:b7:21:5f:21:cc:fe:34:19:00:e9:cd:
                    c5:ea:4d:9a:72:33:2e:f1:fd:00:14:f4:8d:5d:4b:
                    c4:19:52:19:2c:38:d6:e2:0b:65:b9:97:b2:c8:f0:
                    e3:29:75:74:c1:37:dc:8e:24:8d:aa:b2:4f:8c:79:
                    29:70:d8:31:a1:08:6e:a4:11:72:2f:8d:70:ef:9c:
                    a3:6c:31:f1:d2:b5:d1:78:0f:61:86:21:a8:15:f6:
                    99:bf:72:5b:c0:f4:b5:38:cb:0c:04:36:97:72:d2:
                    10:de:cf:b7:b3:e7:6b:6b:1f:1a:c1:86:46:9d:9f:
                    d3:1f:bb:e5:41:be:e5:45:f2:27:74:84:0f:69:ca:
                    19:81:23:b1:42:98:f5:32:0f:0f:4a:3f:c0:b7:12:
                    c6:a5:a0:b6:06:aa:be:71:87:b2:a5:c7:f9:30:b7:
                    19:54:37:8d:e5:5d:2b:97:62:55:6e:50:24:dd:d2:
                    96:46:90:7b:87:a8:e1:84:4b:e9:25:d6:c6:4c:5a:
                    93:b3:bd:d2:61:55:63:8e:2d:b5:87:73:63:c8:14:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.96.0/22
                IPv6:
                  2804:4048::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265949

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:c5:c5:2c:e0:a0:91:4f:94:e2:fc:37:d9:03:18:30:50:
         f1:0f:0e:bc:1f:ea:99:bc:6a:e0:04:0f:c5:e8:79:89:fc:88:
         5c:98:8d:13:d4:2b:5d:91:a8:c1:15:66:79:22:72:ee:48:dd:
         01:3c:96:cc:0a:56:07:7d:38:ee:cb:84:27:63:eb:3d:5d:96:
         ee:24:fd:65:34:48:27:0f:33:af:14:9f:e2:ec:96:10:8b:34:
         5e:e4:cf:0d:fd:f7:52:0e:4c:73:1e:09:35:46:35:26:2c:d6:
         99:73:83:3e:5a:48:35:21:9b:85:bc:8a:2e:51:3a:8f:5f:8c:
         c2:05:98:dc:46:81:da:47:20:d1:d5:c3:f5:fe:6f:b3:7c:ac:
         f8:9e:f4:e9:d1:57:a3:1b:c5:2d:a8:46:7b:b2:22:9f:aa:0a:
         2f:77:5a:96:66:ad:9a:9a:a7:07:c0:25:7b:0e:1a:78:03:2f:
         be:9a:6d:96:97:93:9a:e3:0f:6b:3d:e3:16:41:d2:fb:a0:cc:
         5f:6f:15:e1:82:91:d9:ab:91:51:53:ed:1c:e1:e4:7a:70:71:
         7c:7e:7b:7c:bd:1b:b4:9a:6e:0c:5f:e9:9f:50:37:52:fa:a0:
         4b:e1:8f:ba:a8:8c:b4:c6:ed:4b:4e:6c:3c:4d:26:7a:ac:7c:
         db:28:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:59:58 2024 by rpki-client on console-ams.rpki-client.org