Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer
File:                     36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer (raw, json)
Hash identifier:          OqnLKTju1etLrZpUpzGXUVcNIxVS6MrY8mC/vvZCY4g=
Subject key identifier:   36:72:19:84:BB:C3:2E:9C:AB:34:A7:B2:1C:92:F1:CD:36:1B:81:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B4AEB94A997F9CC63AF7FB489D93C528B0FE3CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 19:55:39 +0000
Certificate not after:    Mon 21 Jul 2025 20:00:39 +0000
Subordinate resources:    AS: 268398
                          IP: 45.160.24.0/22
                          IP: 2804:5098::/32

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 17:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:eb:94:a9:97:f9:cc:63:af:7f:b4:89:d9:3c:52:8b:0f:e3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 19:55:39 2024 GMT
            Not After : Jul 21 20:00:39 2025 GMT
        Subject: CN=36721984BBC32E9CAB34A7B21C92F1CD361B813B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:0e:dc:1f:19:ef:b8:6f:95:f4:49:46:30:
                    67:18:67:31:59:d7:bb:1b:1b:51:d8:da:12:3d:72:
                    b4:44:c4:96:0e:ff:e6:8f:01:32:e3:c7:5f:2e:58:
                    19:0f:f0:7c:ee:d4:cc:3b:18:db:d0:c1:20:ad:c6:
                    69:e8:be:a8:6e:c5:0e:15:63:d3:dc:32:a4:61:10:
                    77:62:91:a4:79:1e:9d:1c:69:24:56:69:e6:1b:5d:
                    db:60:7b:5b:b5:a4:d0:a0:82:03:34:8a:ae:02:b0:
                    88:20:d0:03:9b:a5:fd:2c:50:fa:89:c5:3f:7c:5a:
                    ba:2a:10:88:16:04:b8:c7:4a:8f:40:c7:71:31:3e:
                    6e:d9:ca:77:ea:e2:03:15:78:af:81:23:fa:ba:15:
                    78:16:ac:4d:83:55:f3:7e:a4:23:f5:61:26:db:9d:
                    cc:fd:e5:3f:ad:df:86:23:d0:20:2c:c8:ad:2a:da:
                    82:c8:c6:68:cc:8b:99:e7:f5:08:b0:fb:77:47:e0:
                    7d:1d:15:17:0e:34:b8:e1:63:ee:c2:a1:ce:28:1f:
                    80:b0:48:05:6c:88:99:b4:38:cf:50:b5:02:82:7e:
                    9b:ca:88:9e:bc:9a:5a:d8:cc:66:fa:db:52:19:0c:
                    21:ff:a0:70:f4:3e:db:9e:db:e2:fd:4b:22:4f:56:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:72:19:84:BB:C3:2E:9C:AB:34:A7:B2:1C:92:F1:CD:36:1B:81:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.24.0/22
                IPv6:
                  2804:5098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268398

    Signature Algorithm: sha256WithRSAEncryption
         24:21:7b:ab:b3:da:6d:c1:d0:a5:53:55:2b:d4:50:c1:d4:2d:
         11:a5:72:77:7b:11:eb:03:ea:0e:5f:0e:5f:8d:e5:a1:18:19:
         54:2b:b3:cf:be:40:53:01:ee:92:fc:48:29:88:bc:3d:4e:37:
         9d:5b:52:0d:d7:a5:d7:be:72:b1:60:f6:4d:fc:01:18:7d:ce:
         0f:c0:98:af:7b:75:f4:07:78:a5:71:ec:dc:02:ed:8e:2c:ba:
         6e:38:2b:0b:fa:79:3c:37:41:ae:8f:43:b6:f6:c2:fb:e7:b4:
         65:0d:95:43:c2:ce:eb:95:2a:f4:c9:d1:a5:33:e1:d3:07:4f:
         3f:e9:8d:20:d9:71:08:2c:ea:dd:55:f5:79:39:ad:cf:ae:3d:
         89:dd:ce:ed:3d:19:de:6b:27:b7:e9:85:95:d8:b5:d0:13:a2:
         32:21:09:b4:10:7c:a0:53:d5:6e:e8:fa:99:d6:97:e6:c3:6c:
         0c:66:92:98:af:53:47:4d:ce:44:81:d1:dd:c2:65:ea:5e:4e:
         20:ca:b0:76:2d:01:44:7a:42:bc:5b:a5:fc:71:57:e9:58:4b:
         cd:78:f6:c5:99:40:23:31:19:75:d3:1f:8f:7a:2e:29:1f:9a:
         cf:ec:fc:85:b0:b1:1c:e9:f0:2b:35:57:50:fb:28:bd:1a:d1:
         b6:1d:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----