Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/65FC82C71B7C7CE0B584B1D8A6920A3FF2D468F6.cer
File:                     65FC82C71B7C7CE0B584B1D8A6920A3FF2D468F6.cer (raw, json)
Hash identifier:          TCBxd6yvABxSgksAIEic6yAerwCxeRsZCuVnwrOra34=
Subject key identifier:   65:FC:82:C7:1B:7C:7C:E0:B5:84:B1:D8:A6:92:0A:3F:F2:D4:68:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F1CA5C8E4A25178D99BA13E04466627B656DB60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/65FC82C71B7C7CE0B584B1D8A6920A3FF2D468F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Sep 2024 23:46:54 +0000
Certificate not after:    Tue 09 Sep 2025 23:51:54 +0000
Subordinate resources:    AS: 263887
                          IP: 138.204.128.0/22
                          IP: 2804:2740::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:a5:c8:e4:a2:51:78:d9:9b:a1:3e:04:46:66:27:b6:56:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 10 23:46:54 2024 GMT
            Not After : Sep  9 23:51:54 2025 GMT
        Subject: CN=65FC82C71B7C7CE0B584B1D8A6920A3FF2D468F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:d0:41:b6:29:39:aa:c8:b6:49:15:ad:41:
                    54:00:05:24:9e:e4:4f:00:ba:19:51:d2:88:f2:05:
                    af:90:6f:1f:51:2f:61:3a:d7:77:1b:64:e0:73:1a:
                    ec:5d:fc:73:10:f3:5a:a9:f8:5e:c6:49:07:db:84:
                    74:03:90:26:2f:ef:a9:04:32:ef:a5:81:ed:f2:e9:
                    a6:87:4b:78:3e:ec:b0:21:06:67:56:27:c7:49:72:
                    79:1d:9d:6f:6f:64:52:5f:b4:21:cb:b0:7a:57:50:
                    3d:c6:94:ab:c3:7e:13:5a:9c:6e:a7:f9:02:88:0b:
                    a0:1f:d7:f3:4e:14:3b:5b:82:a4:65:eb:6f:8d:64:
                    d4:ec:52:91:56:a6:e6:ea:8e:29:2d:4f:e5:ed:55:
                    16:fc:bc:38:04:f3:1f:9f:8c:82:f2:fe:91:cf:55:
                    76:76:c6:80:2e:c2:1a:73:49:b9:4c:af:c1:63:f2:
                    a4:c7:4b:78:cd:c4:af:0c:65:4f:5b:6d:17:d4:8a:
                    9b:44:d9:f1:52:fe:f9:6e:76:db:99:a5:22:ed:a3:
                    2a:75:80:fe:6d:3f:24:56:86:ec:f6:7e:72:0b:78:
                    cb:44:92:26:c1:58:d6:c1:c3:19:2f:29:11:82:74:
                    67:5c:bc:1b:36:21:e7:56:cb:f7:c6:53:4d:f5:de:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:FC:82:C7:1B:7C:7C:E0:B5:84:B1:D8:A6:92:0A:3F:F2:D4:68:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/65FC82C71B7C7CE0B584B1D8A6920A3FF2D468F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.128.0/22
                IPv6:
                  2804:2740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263887

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:69:8e:13:b5:8a:56:a7:62:60:45:2d:de:27:53:e6:1b:
         fd:4e:98:65:6d:e1:0b:ee:81:63:3d:ab:c5:cc:ac:f3:d5:9a:
         8c:e5:88:1a:0b:a6:9d:8c:88:ec:91:ac:dd:58:23:1c:13:9b:
         aa:8c:de:68:2b:e1:20:60:5f:8b:2f:da:12:4c:61:8a:1a:f7:
         85:87:b9:58:20:59:18:c9:ef:ea:75:87:f9:bb:7a:46:0b:15:
         1f:80:c5:20:8e:74:e0:62:5e:60:ed:1c:79:e5:01:96:e8:d3:
         bb:96:16:e8:d4:3d:7b:35:b7:d8:07:a3:df:25:d2:ea:9c:5f:
         6e:76:e7:5d:a8:df:4a:1c:6c:f5:db:f7:eb:49:c5:8c:ba:79:
         36:f3:c2:83:5c:6e:6c:23:2a:da:9c:c5:4f:44:96:33:a5:26:
         f8:7f:68:7a:83:7a:3a:c1:73:4c:0e:13:23:a4:02:7a:9b:6e:
         9e:fa:0e:31:84:95:d2:ac:ea:54:21:34:80:b3:e9:dd:01:c0:
         1c:96:c1:d2:34:5c:ac:24:f5:74:05:d1:e6:61:8b:4d:34:44:
         b1:68:7f:fb:f9:0f:af:a3:b9:ac:11:7b:ae:21:59:62:1b:60:
         f4:98:94:5f:a7:83:b7:70:75:2d:36:72:4a:e2:84:59:d3:31:
         4c:a6:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 05:19:08 2024 by rpki-client on console-fra.rpki-client.org