Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7588D003DBCC41BCD5EF1DDB85D8F2ED4E10D8EF.cer
File:                     7588D003DBCC41BCD5EF1DDB85D8F2ED4E10D8EF.cer (raw, json)
Hash identifier:          6tO6urqlHO7y86MtIp4YmdtrCFgv7dd2BsxwWFaU0uM=
Subject key identifier:   75:88:D0:03:DB:CC:41:BC:D5:EF:1D:DB:85:D8:F2:ED:4E:10:D8:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45E65C0D369F4EF9E9DE1643277AF8E670C8242C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/7588D003DBCC41BCD5EF1DDB85D8F2ED4E10D8EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jul 2024 20:28:25 +0000
Certificate not after:    Fri 25 Jul 2025 20:33:25 +0000
Subordinate resources:    AS: 262543
                          IP: 177.72.80.0/21
                          IP: 2804:37a4::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 20:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e6:5c:0d:36:9f:4e:f9:e9:de:16:43:27:7a:f8:e6:70:c8:24:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 26 20:28:25 2024 GMT
            Not After : Jul 25 20:33:25 2025 GMT
        Subject: CN=7588D003DBCC41BCD5EF1DDB85D8F2ED4E10D8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:f5:93:cb:21:a8:12:ac:b0:74:24:31:bf:
                    1b:98:31:d1:f4:30:98:e4:f9:d9:a0:63:ce:93:e7:
                    5b:a1:e8:76:c9:70:ec:aa:c2:6b:d3:0a:f0:58:08:
                    36:5a:3d:c3:70:56:ae:43:b1:2c:ac:46:1c:18:56:
                    1b:14:70:83:4d:09:61:a2:ef:a4:71:0b:71:e4:15:
                    41:f1:6f:99:94:c7:b1:d1:73:39:51:7f:5c:95:4c:
                    89:b1:ee:ae:d8:6b:18:d0:67:a7:a1:0c:de:ba:fd:
                    00:df:79:f8:f7:fc:36:79:03:78:e2:49:58:99:ba:
                    69:ab:14:0c:e9:c6:46:06:b5:f8:83:00:70:b4:e2:
                    41:4e:7e:73:a3:9a:ea:25:c3:8c:16:42:53:ec:4c:
                    ed:14:cf:84:c3:ef:48:14:0f:b6:84:b0:57:e5:fc:
                    67:76:07:b1:9a:01:02:c8:96:9b:45:fc:95:48:81:
                    d2:69:8a:88:e2:9d:e0:8c:67:7c:56:ae:dc:2c:6c:
                    b9:cb:30:fe:1b:21:a7:2c:88:1d:80:be:87:0e:74:
                    6f:65:62:ab:7d:ed:53:71:36:af:0c:6e:2c:64:72:
                    fb:9d:04:e2:1d:e5:aa:6f:d4:3e:78:a8:b3:74:a9:
                    8f:94:90:fc:01:9f:34:60:be:7c:23:38:2a:29:e6:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                75:88:D0:03:DB:CC:41:BC:D5:EF:1D:DB:85:D8:F2:ED:4E:10:D8:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/7588D003DBCC41BCD5EF1DDB85D8F2ED4E10D8EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.80.0/21
                IPv6:
                  2804:37a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262543

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:ec:6b:7c:c0:a1:82:d7:05:a3:19:a1:f3:20:29:8b:3d:
         9e:4c:08:c7:12:49:f0:0c:d1:2b:61:a0:95:d4:1c:10:9c:ef:
         78:d7:cd:fc:95:55:c7:6a:fd:97:8b:c6:55:01:38:ce:5a:de:
         32:af:5b:ce:54:e2:9e:8d:68:d4:fd:05:38:ac:fc:f7:78:98:
         97:45:38:ee:5d:ea:85:f3:2a:f3:c6:f7:7d:82:cc:cf:41:ef:
         c9:c8:3e:ba:01:8b:9b:f4:ad:9c:93:ab:54:23:24:72:ba:2b:
         3a:1c:90:5e:5a:be:44:52:f6:92:ad:6f:83:d2:77:ff:d2:7b:
         a5:24:c5:db:6b:40:a8:67:8c:ca:2f:cf:79:e1:82:f7:4e:e0:
         21:0d:4e:79:29:8c:c0:a5:f4:d8:18:ec:09:7b:3c:62:d5:eb:
         74:73:89:42:a7:89:6b:b8:20:94:42:82:3a:a4:7d:94:ee:bc:
         a6:42:10:52:84:d6:92:90:0f:4e:35:e8:98:88:ca:6d:1c:6b:
         74:7d:ec:56:a3:b1:6b:42:a1:82:a3:4c:9a:da:6d:f3:ae:c3:
         35:be:1c:80:3a:17:50:40:7c:d7:58:66:34:9c:1e:df:54:c3:
         d2:cf:02:6c:25:af:12:20:7f:00:b8:da:f9:ea:7e:b2:1d:2c:
         61:e8:2d:ef
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUReZcDTafTvnp3hZDJ3r45nDIJCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjYyMDI4MjVaFw0yNTA3MjUyMDMzMjVaMDMxMTAvBgNV
BAMTKDc1ODhEMDAzREJDQzQxQkNENUVGMUREQjg1RDhGMkVENEUxMEQ4RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CfWTyyGoEqywdCQxvxuYMdH0
MJjk+dmgY86T51uh6HbJcOyqwmvTCvBYCDZaPcNwVq5DsSysRhwYVhsUcINNCWGi
76RxC3HkFUHxb5mUx7HRczlRf1yVTImx7q7YaxjQZ6ehDN66/QDfefj3/DZ5A3ji
SViZummrFAzpxkYGtfiDAHC04kFOfnOjmuolw4wWQlPsTO0Uz4TD70gUD7aEsFfl
/Gd2B7GaAQLIlptF/JVIgdJpiojineCMZ3xWrtwsbLnLMP4bIacsiB2AvocOdG9l
Yqt97VNxNq8MbixkcvudBOId5apv1D54qLN0qY+UkPwBnzRgvnwjOCop5slRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1iNAD28xBvNXv
HduF2PLtThDY7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUdV
TjRDODFwZWlrYkt6RHlzckdubmtnVVZ2cXhBY29CdkI4R2Z5YjlUU2UvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH
VU40QzgxcGVpa2JLekR5c3JHbm5rZ1VWdnF4QWNvQnZCOEdmeWI5VFNlLzAvNzU4
OEQwMDNEQkNDNDFCQ0Q1RUYxRERCODVEOEYyRUQ0RTEwRDhFRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsUhQMA0EAgACMAcDBQAoBDekMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQBjzANBgkqhkiG9w0BAQsFAAOCAQEAnf7sa3zAoYLXBaMZ
ofMgKYs9nkwIxxJJ8AzRK2GgldQcEJzveNfN/JVVx2r9l4vGVQE4zlreMq9bzlTi
no1o1P0FOKz893iYl0U47l3qhfMq88b3fYLMz0Hvycg+ugGLm/StnJOrVCMkcror
OhyQXlq+RFL2kq1vg9J3/9J7pSTF22tAqGeMyi/PeeGC907gIQ1OeSmMwKX02Bjs
CXs8YtXrdHOJQqeJa7gglEKCOqR9lO68pkIQUoTWkpAPTjXomIjKbRxrdH3sVqOx
a0KhgqNMmtpt867DNb4cgDoXUEB811hmNJwe31TD0s8CbCWvEiB/ALja+ep+sh0s
Yegt7w==
-----END CERTIFICATE-----