Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5720D64C7BCE9B0501EFD0117034B93126A3170D.cer
File:                     5720D64C7BCE9B0501EFD0117034B93126A3170D.cer (raw, json)
Hash identifier:          Wxnz9JQh3P8qDIeMCaAQRqGTgvB8Ki/D2Y1DIZmzR2s=
Subject key identifier:   57:20:D6:4C:7B:CE:9B:05:01:EF:D0:11:70:34:B9:31:26:A3:17:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C52F090262ADFA019C0C28453DC05B34B108166
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/5720D64C7BCE9B0501EFD0117034B93126A3170D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jun 2024 12:47:15 +0000
Certificate not after:    Mon 23 Jun 2025 12:52:15 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 12:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:f0:90:26:2a:df:a0:19:c0:c2:84:53:dc:05:b3:4b:10:81:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 24 12:47:15 2024 GMT
            Not After : Jun 23 12:52:15 2025 GMT
        Subject: CN=5720D64C7BCE9B0501EFD0117034B93126A3170D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:4b:23:a8:41:4d:f5:b4:8a:0b:27:69:37:
                    fc:3a:47:4d:c7:37:7a:80:e5:30:47:3a:f0:c8:19:
                    d1:ac:a1:ec:5d:cf:a5:45:ee:c3:3a:e6:d7:82:83:
                    7c:11:4c:09:91:22:5c:14:68:c7:eb:f6:e5:cc:11:
                    4d:de:11:4f:b4:1e:a0:88:5b:28:dd:4f:83:90:40:
                    d0:93:67:f7:09:86:52:55:cf:18:e7:91:a5:05:af:
                    a8:ad:10:e9:2f:32:49:21:ef:dd:44:ed:b0:2f:d2:
                    8c:d2:df:18:d3:90:c1:a8:58:cc:04:bd:e8:19:cd:
                    5d:2d:42:05:d5:70:e5:e8:f4:47:e7:82:82:e4:ff:
                    07:a9:24:e1:4a:1c:b8:15:35:de:d2:d9:60:82:e5:
                    9f:4a:af:f1:40:5c:0c:11:32:61:16:d8:99:fe:41:
                    11:02:e2:ca:3a:6a:af:6e:62:4e:ea:9d:db:48:8a:
                    1d:96:18:3d:91:b8:66:86:64:a8:c6:09:d6:c3:50:
                    26:04:8d:7c:c1:63:64:06:03:12:b4:0f:46:dc:02:
                    50:21:98:6d:3b:1a:23:e5:25:f0:a2:08:dd:13:3b:
                    52:73:75:6b:75:fe:dd:d5:41:8e:49:05:e6:24:de:
                    3e:8c:38:e9:7c:dc:b6:b6:45:4d:64:af:39:b5:5b:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:20:D6:4C:7B:CE:9B:05:01:EF:D0:11:70:34:B9:31:26:A3:17:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/5720D64C7BCE9B0501EFD0117034B93126A3170D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         97:74:0f:be:66:12:02:36:c5:04:9a:13:d8:dc:95:b7:61:db:
         cd:05:d5:d8:b6:0a:e0:e2:22:96:b9:90:a3:53:39:53:b6:08:
         fc:b6:cc:eb:3b:66:63:b4:06:45:68:ea:e9:9f:14:d5:26:e3:
         fa:6e:d3:d0:b4:ea:d8:4e:3e:3b:2d:6c:0c:6d:01:ba:52:63:
         ea:3b:99:ff:89:3f:b4:0c:0d:bc:f6:5c:f8:8d:8a:be:b6:04:
         e5:82:01:71:43:4a:23:59:22:03:80:45:e0:fe:dc:0f:41:b0:
         c1:9f:a8:af:fd:da:61:72:4e:c3:60:47:57:85:f6:8d:6b:d8:
         60:0b:1a:0e:bd:03:de:4f:15:f7:98:73:22:10:5c:4d:e9:1f:
         ec:ad:a1:b0:4b:51:76:12:12:3d:8b:10:e0:46:4b:21:f0:10:
         ec:c1:54:3d:4c:83:fa:ef:91:46:8e:41:bf:3e:a1:c9:7f:83:
         56:52:7f:62:0b:68:31:f1:71:bf:38:df:24:63:be:e8:30:42:
         3c:c0:83:dd:41:84:0f:23:ad:14:b2:ae:7d:e9:c3:25:d7:4c:
         4c:6a:02:98:f8:46:87:d0:83:fa:17:5b:d8:c9:47:49:e6:dd:
         df:e1:8d:7a:fd:f0:4c:d4:c7:42:af:ee:8d:21:a1:7f:2f:b0:
         8f:53:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----