Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
File:                     20635662A8A5867029EC359E96E65DF88B91AA83.cer (raw, json)
Hash identifier:          LMHhlT0FoXc0tpku9uzfcDwlujOfHQMIUbmBoSdx8KQ=
Subject key identifier:   20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A0D6A9C23AD2A60F11EA83873A50341D6528682
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 16:39:20 +0000
Certificate not after:    Thu 14 Aug 2025 16:44:20 +0000
Subordinate resources:    AS: 267963
                          IP: 45.166.148.0/22
                          IP: 2804:55e4::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:6a:9c:23:ad:2a:60:f1:1e:a8:38:73:a5:03:41:d6:52:86:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 16:39:20 2024 GMT
            Not After : Aug 14 16:44:20 2025 GMT
        Subject: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:93:33:09:88:a2:52:f3:52:36:a9:ac:44:
                    34:3e:81:2b:46:2b:34:1e:3c:1a:c4:c1:40:20:b1:
                    0f:fd:e6:f5:16:6c:f9:ae:02:4a:19:d8:0f:b4:4f:
                    3d:0e:73:aa:7c:ea:bd:f1:cd:13:89:9f:20:87:51:
                    07:34:f9:b2:c7:84:54:eb:94:64:1a:7a:e9:64:b2:
                    87:b7:ef:22:ea:cf:33:eb:3c:00:ed:ef:0d:4e:db:
                    d6:2d:3d:10:5b:3d:4f:f8:ce:bf:36:d4:58:81:d3:
                    45:5c:42:df:6c:fb:d3:07:d3:ae:c3:cf:fa:6b:59:
                    4d:7b:d8:72:de:ad:ac:c5:99:6c:54:2d:35:fc:47:
                    5c:af:19:9f:7c:4c:76:99:28:00:f0:65:5a:0f:8b:
                    e1:05:a5:3a:a7:fe:d0:e1:f0:0b:66:bf:c0:44:8c:
                    c8:21:2a:79:91:f5:8c:9c:6c:56:2f:37:e7:26:cf:
                    ec:50:61:3d:5c:8c:17:fd:d4:77:ff:a0:a1:07:52:
                    27:1a:ec:95:f1:38:5c:d5:83:63:fd:c1:0e:9a:de:
                    48:47:c5:cf:28:6e:4e:b9:fe:eb:74:6b:95:52:f9:
                    83:c4:34:c8:98:a6:94:bd:99:fe:5c:d0:ba:fa:78:
                    83:ea:8a:a6:b2:f1:80:62:f6:11:8a:16:a5:1e:7d:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.148.0/22
                IPv6:
                  2804:55e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267963

    Signature Algorithm: sha256WithRSAEncryption
         43:87:3a:f3:c9:da:97:d6:29:38:72:6f:6f:4d:76:b1:38:7c:
         b0:b7:3d:28:dd:ae:b1:cb:2d:ab:fa:44:c3:c9:f4:09:9f:f2:
         f5:b2:10:96:4c:db:97:35:1f:a8:26:a8:15:e9:df:4f:89:9c:
         81:47:76:b7:f6:5c:34:00:b9:e7:ab:fb:7b:4b:a5:da:2b:e3:
         71:71:04:cc:c6:c3:d9:77:67:e5:d1:96:5b:6b:51:85:56:9b:
         bb:18:79:c1:ab:ca:d9:4f:62:1f:2a:b7:f8:06:63:1f:2e:5e:
         ef:c7:13:10:30:bc:73:d8:68:05:8d:f9:6b:47:f8:bc:c4:1a:
         f1:f1:df:da:5b:63:19:6d:69:6f:80:6d:24:f6:38:ab:63:35:
         88:de:e8:12:95:1c:af:eb:6f:7e:fa:c3:ce:84:17:8c:8d:ba:
         39:26:6b:bf:e0:cc:70:53:d9:79:d7:f7:61:4d:ab:61:3e:1f:
         82:6b:97:61:e8:29:fe:69:84:54:23:58:8f:7e:6f:f1:fc:c4:
         15:fc:72:15:46:ef:d7:0a:4b:21:19:1d:89:cf:43:9a:b5:d8:
         00:5d:12:7e:91:25:27:a2:ef:31:bf:85:8f:22:31:3a:ae:57:
         a9:98:b1:b7:60:0f:6f:a9:cf:59:32:84:c9:07:ab:07:ea:11:
         a0:da:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----