Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D6E87D5385CBFEFF258606A9B75B50866B61CD5.cer
File:                     8D6E87D5385CBFEFF258606A9B75B50866B61CD5.cer (raw, json)
Hash identifier:          m+M9GTTwfh1cBarZtqBIn6gFoxM3YS8PHbnSZ/oJpiE=
Subject key identifier:   8D:6E:87:D5:38:5C:BF:EF:F2:58:60:6A:9B:75:B5:08:66:B6:1C:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BB2E4C187C8F633EA32421D9E205D9C449CDA3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/8D6E87D5385CBFEFF258606A9B75B50866B61CD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 13:46:25 +0000
Certificate not after:    Tue 24 Jun 2025 13:51:25 +0000
Subordinate resources:    AS: 273527
                          IP: 2804:9000::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 21:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b2:e4:c1:87:c8:f6:33:ea:32:42:1d:9e:20:5d:9c:44:9c:da:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 13:46:25 2024 GMT
            Not After : Jun 24 13:51:25 2025 GMT
        Subject: CN=8D6E87D5385CBFEFF258606A9B75B50866B61CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:8e:9a:ed:84:49:a8:c0:cb:c6:9b:91:ba:
                    f4:bf:be:22:ad:18:d0:fc:5b:c8:23:31:21:a5:16:
                    21:8e:91:01:75:41:8d:6a:b8:b0:3e:98:f5:08:01:
                    1c:89:95:83:40:60:01:65:64:ee:6b:9a:72:e5:39:
                    c5:8f:13:0e:77:1d:ea:b0:22:30:25:f4:35:77:f0:
                    92:35:09:49:9a:81:93:2f:fb:66:44:df:e9:aa:17:
                    d4:26:36:6d:5d:75:14:9e:d3:86:dd:0e:18:0e:ed:
                    86:50:72:02:f5:39:47:d3:38:d7:57:d4:11:98:e4:
                    75:42:39:7b:8a:00:56:cd:47:31:70:a1:99:5e:f1:
                    57:65:36:5d:17:86:0b:79:d0:48:ec:af:1d:1a:8f:
                    b9:e6:6a:1a:e1:68:58:07:43:54:b0:3a:56:fd:59:
                    2a:23:cb:0a:d0:3b:f8:5e:16:0c:74:5e:4d:10:77:
                    e6:88:89:49:4c:10:a4:2e:49:ce:d1:33:4f:ce:9c:
                    9c:c7:2b:70:08:bc:90:5b:8f:9d:b3:72:ea:b3:db:
                    9f:10:2c:e7:82:1a:db:9e:7a:d5:52:ea:10:b9:98:
                    35:f7:a1:ff:2f:1a:eb:4d:5c:e1:81:cc:9d:95:22:
                    25:26:84:00:27:55:2a:82:4d:7a:9d:10:df:d5:98:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:6E:87:D5:38:5C:BF:EF:F2:58:60:6A:9B:75:B5:08:66:B6:1C:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/8D6E87D5385CBFEFF258606A9B75B50866B61CD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273527

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:51:db:a4:0a:6b:94:67:98:bd:1e:c4:2a:91:4a:9d:61:
         94:d1:b8:d3:b8:e2:cc:6a:a7:7a:85:a5:30:23:1b:20:66:15:
         e7:70:77:af:42:56:3e:74:99:37:36:7b:28:fc:e2:9b:e4:fd:
         2e:00:54:e0:83:0e:0e:b8:26:d4:65:3e:ab:ec:eb:3e:ee:7c:
         77:81:f0:98:1b:43:1a:08:ab:75:ac:4b:a6:d8:83:28:09:df:
         77:94:25:40:9b:39:93:ad:1e:c4:4c:4e:b9:97:99:b9:ca:a2:
         5d:75:d4:de:b7:e2:30:9f:7f:3e:0c:b3:5e:d2:ea:03:cb:17:
         4c:ce:ae:5f:46:b1:5c:37:da:46:d2:e7:92:ef:04:a7:bf:28:
         9d:83:60:37:a0:b9:c1:78:a2:09:dd:38:2b:40:a7:34:5d:70:
         da:80:14:26:c8:04:48:71:19:cc:ee:8e:64:3f:a5:42:5a:99:
         1f:eb:0c:98:22:ea:74:26:1c:a2:58:fc:c3:2b:35:34:a1:6b:
         72:ac:53:a8:a4:71:eb:cf:b5:d2:10:ef:17:88:4f:f4:ae:ab:
         80:a2:da:84:41:34:29:96:a9:08:36:d8:33:23:e1:d8:d7:09:
         d3:c6:76:41:0b:a8:d7:a1:67:7e:48:6c:58:61:cd:52:69:a9:
         32:2d:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----