Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.cer
File:                     7F2A99A171605802A009376BC3AD8E1CA8B57C2C.cer (raw, json)
Hash identifier:          eU/YF6pqWW4Kz3qMnmAC9q9x2qtSa2tIe8NQTMoI4ng=
Subject key identifier:   7F:2A:99:A1:71:60:58:02:A0:09:37:6B:C3:AD:8E:1C:A8:B5:7C:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09EC34369406C762DEC7A68A66D64BB48FDBC23B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:58:08 +0000
Certificate not after:    Thu 03 Apr 2025 03:03:08 +0000
Subordinate resources:    AS: 271192
                          IP: 179.42.152.0/22
                          IP: 2804:77ac::/32

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 16:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ec:34:36:94:06:c7:62:de:c7:a6:8a:66:d6:4b:b4:8f:db:c2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:58:08 2024 GMT
            Not After : Apr  3 03:03:08 2025 GMT
        Subject: CN=7F2A99A171605802A009376BC3AD8E1CA8B57C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:9c:05:7b:1c:82:cc:10:d6:9d:2b:0a:5d:
                    09:73:f9:25:9e:a1:cd:02:6d:03:bb:31:fb:94:af:
                    07:e8:db:a4:cf:a5:28:74:fe:32:e9:88:22:97:21:
                    16:46:c3:05:e1:b2:ba:31:9e:2b:f7:16:e7:89:80:
                    0e:ec:83:2b:15:2a:57:17:96:31:16:7a:69:f4:bb:
                    ef:74:b6:8f:63:f2:5c:c9:40:85:52:30:59:32:ac:
                    b5:09:3a:e4:c1:7b:9c:0f:dd:87:d8:07:fd:25:29:
                    f4:30:c8:fe:5f:ef:b9:e5:7f:40:4d:67:f5:90:fd:
                    b7:9b:7e:48:aa:3d:19:09:06:47:46:ef:19:01:95:
                    11:7c:36:b6:43:9d:77:76:69:d3:7f:05:59:1d:5d:
                    fd:fc:75:b9:9c:bf:21:11:d2:c6:dc:cf:b8:1f:18:
                    00:c1:c6:71:72:1c:14:1c:da:80:a0:e6:2c:d5:88:
                    c9:16:22:01:5a:18:44:d9:d7:d6:e6:ba:a8:f5:bc:
                    a3:ba:cd:ec:0a:14:f8:b1:7f:5d:f2:86:c9:9b:78:
                    56:76:2b:f7:a0:e1:8d:dc:42:03:23:d4:89:7a:64:
                    41:b8:7c:ce:f4:b8:1d:66:e1:62:ca:56:94:af:88:
                    09:bd:67:f2:37:c1:a7:1c:1c:0b:95:d2:57:59:6d:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:2A:99:A1:71:60:58:02:A0:09:37:6B:C3:AD:8E:1C:A8:B5:7C:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.152.0/22
                IPv6:
                  2804:77ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271192

    Signature Algorithm: sha256WithRSAEncryption
         48:d6:bf:dd:57:1b:b4:a9:54:48:f1:16:dd:02:7e:99:1d:2c:
         d6:0e:a4:0b:a6:bc:ea:03:79:f2:6e:b7:5a:e1:11:4d:bd:05:
         8b:ee:f7:5b:e2:94:87:05:44:3d:be:7b:7c:bd:95:d8:d7:0e:
         09:7b:d6:9d:03:ef:dc:93:7c:ae:e7:be:f3:2c:65:10:96:25:
         91:1a:c3:b4:ac:93:e2:d6:d2:57:7e:77:3a:ab:68:8b:e5:e5:
         59:bc:c4:49:75:0f:29:25:a4:0b:73:a3:a1:04:f5:50:f4:19:
         46:e0:52:6a:0a:cf:2a:3f:2e:7f:c2:84:20:3a:14:73:05:db:
         96:e4:c7:1a:af:2c:70:ea:24:6e:ac:6d:6a:06:c0:1f:33:78:
         09:36:4e:85:bf:be:6d:89:ab:05:c0:c7:00:bb:6d:55:c1:9c:
         3a:27:78:bf:aa:3c:d1:4d:f5:3e:eb:b4:22:d8:cc:55:36:d6:
         08:e8:53:22:e6:d7:e3:d2:19:a8:71:5e:4f:a9:93:de:20:ce:
         f0:45:08:0b:d7:02:24:e4:a6:07:40:8d:b0:c2:9d:32:ef:6e:
         32:46:8f:02:cc:ae:2a:24:4a:41:ad:2e:4f:f6:f7:9a:a8:31:
         66:fb:3b:4b:14:a6:23:f5:37:73:cd:b6:5c:4b:80:37:70:8f:
         7c:98:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 18:50:05 2024 by rpki-client on console-fra.rpki-client.org