Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E0C59576320EC199E9F749B49AAA8CC30A5FFD5.cer
File:                     5E0C59576320EC199E9F749B49AAA8CC30A5FFD5.cer (raw, json)
Hash identifier:          KAbidLo3e936FX+FKrSmQ6zjGk7WihhoXzh5sTnrCJk=
Subject key identifier:   5E:0C:59:57:63:20:EC:19:9E:9F:74:9B:49:AA:A8:CC:30:A5:FF:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1ADDBCC16BB2894A4F2888B9473E8B22B9ED039F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/5E0C59576320EC199E9F749B49AAA8CC30A5FFD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jul 2024 13:56:00 +0000
Certificate not after:    Fri 11 Jul 2025 14:01:00 +0000
Subordinate resources:    AS: 262690
                          IP: 187.87.240.0/20
                          IP: 2804:7348::/32

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 16:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dd:bc:c1:6b:b2:89:4a:4f:28:88:b9:47:3e:8b:22:b9:ed:03:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 12 13:56:00 2024 GMT
            Not After : Jul 11 14:01:00 2025 GMT
        Subject: CN=5E0C59576320EC199E9F749B49AAA8CC30A5FFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:f1:6c:be:2c:e1:bb:7b:1f:dc:d3:82:46:
                    89:ee:b6:02:02:ff:a7:e6:d9:b6:72:3d:2a:0c:c1:
                    d2:80:39:bd:db:dc:49:bc:8e:ad:93:09:60:3d:86:
                    d4:40:af:79:65:2b:c5:92:53:6a:52:7f:ba:e4:e7:
                    1e:71:f1:37:26:e7:13:e4:55:29:fc:d6:af:b2:cb:
                    d6:47:65:9b:87:52:de:f8:8e:6e:61:98:e8:87:a5:
                    c4:8e:c6:2a:c1:9b:a3:0f:d4:84:4b:8b:dc:bb:3c:
                    c0:32:60:5e:82:7e:65:6d:12:97:37:d2:a9:0c:61:
                    02:23:80:ad:8e:62:5c:c4:fe:cb:14:db:6d:ce:81:
                    76:48:50:c1:ef:ca:19:55:d0:78:ec:18:dc:56:64:
                    a4:b3:e7:bf:50:42:1c:c0:fb:ec:b8:d0:d4:20:a6:
                    da:6e:d7:c9:c0:3c:35:79:ba:8c:62:c2:53:55:00:
                    9d:91:c1:16:29:23:54:b6:66:c1:80:fc:cc:7e:3b:
                    8d:47:99:37:84:c0:a5:ef:cc:bd:3a:07:f1:9c:d4:
                    34:91:a2:8f:e4:78:f8:3b:13:01:16:06:19:18:11:
                    92:6d:d4:d6:8c:a1:e0:32:e7:34:46:a6:b4:89:81:
                    8e:42:33:7b:37:5f:12:90:aa:ce:7f:2e:ec:94:e1:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:0C:59:57:63:20:EC:19:9E:9F:74:9B:49:AA:A8:CC:30:A5:FF:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/5E0C59576320EC199E9F749B49AAA8CC30A5FFD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20
                IPv6:
                  2804:7348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262690

    Signature Algorithm: sha256WithRSAEncryption
         c5:91:cf:e2:43:88:25:8a:b2:aa:5a:43:c8:a5:82:b4:0e:03:
         e9:73:eb:1d:4d:c1:16:fb:06:82:09:c9:14:48:64:34:09:1a:
         94:f5:77:a4:66:8a:b6:b1:2d:40:c4:ba:f4:59:91:8b:e7:1e:
         04:2d:f4:0e:af:eb:9d:fb:6b:15:d9:f0:18:e6:ac:b3:6f:27:
         2e:db:a4:ae:45:a5:c5:fe:5b:7b:b8:05:f9:6f:c2:19:36:0d:
         d8:50:74:c5:c0:c1:c0:9e:70:65:07:11:87:cd:e3:0f:16:5e:
         95:12:98:d9:63:1a:75:39:ae:43:b9:f8:ed:ef:03:b7:b5:bb:
         fe:07:d3:8f:a6:29:d8:dd:c3:11:15:42:de:b7:7a:56:9c:77:
         04:af:40:f5:60:e2:cb:b3:1d:3a:72:35:5a:6a:96:13:34:c8:
         59:ab:25:91:66:f7:df:6b:4b:aa:3e:95:46:fe:55:70:22:41:
         42:37:2c:04:39:dd:8c:f8:ba:a4:30:ca:f8:95:87:36:2b:27:
         d0:e3:70:7a:be:d4:bf:ab:6f:98:0d:aa:37:e7:54:e3:d0:3b:
         1e:27:e1:1d:c0:43:93:81:64:77:73:54:9a:c4:86:92:38:21:
         d3:28:a9:f9:6c:b8:df:40:63:86:ce:5b:d8:61:40:20:3e:43:
         ba:25:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----