Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer
File:                     9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.cer (raw, json)
Hash identifier:          5AOoPhbhcE5CADqcgFrmRINJBiXbFan7lUKXalxIcmI=
Subject key identifier:   9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49F119E8183F1D07A08721F9B45CDBA07B829B0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 02:55:10 +0000
Certificate not after:    Thu 26 Jun 2025 03:00:10 +0000
Subordinate resources:    AS: 269274
                          IP: 45.182.168.0/22
                          IP: 2804:6214::/32

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f1:19:e8:18:3f:1d:07:a0:87:21:f9:b4:5c:db:a0:7b:82:9b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 02:55:10 2024 GMT
            Not After : Jun 26 03:00:10 2025 GMT
        Subject: CN=9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:ef:0a:ba:5c:48:c1:f7:11:f5:49:8f:7f:
                    36:e1:f3:48:27:1b:31:e4:a7:b9:92:af:ed:9a:2a:
                    98:92:3d:89:ab:ee:9d:10:df:45:44:c7:cf:6f:ad:
                    58:90:7e:00:d8:d3:e5:bf:50:64:29:cb:33:fd:40:
                    5e:1a:8a:57:e2:02:1d:43:0a:c7:15:f8:83:ad:fb:
                    0b:6c:99:59:6e:89:1a:99:38:43:85:23:f1:63:4e:
                    d1:83:47:d7:a9:17:f7:33:93:a4:a1:71:ec:c6:f6:
                    0e:35:53:30:f9:5c:c5:8b:7f:44:b4:e0:e0:7a:2f:
                    98:bf:c9:38:d0:43:12:e5:a4:98:df:e4:d7:9c:19:
                    8e:6e:e2:8b:7f:38:e8:42:3c:b7:22:73:fe:2a:76:
                    78:9d:ee:51:06:2c:35:94:05:ec:49:0b:e8:b7:4c:
                    91:71:9d:20:eb:12:d4:6c:a6:93:2a:50:3d:20:0c:
                    ed:e2:99:49:b3:e6:e9:ed:a7:d2:eb:bc:6b:29:e2:
                    3c:3b:64:45:f6:3d:c3:0d:f4:1e:df:5b:c7:f9:2d:
                    b2:9b:fd:75:87:62:89:42:66:4a:44:c4:e0:59:f0:
                    3b:b0:f1:2f:b8:d9:12:9e:d6:fd:5e:c3:17:0d:62:
                    e3:67:22:a3:fb:ea:2a:2d:3e:49:ca:71:67:33:60:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:27:DD:9B:B1:31:EA:CC:88:E3:4E:6D:CC:56:50:B5:FE:44:FF:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/9D27DD9BB131EACC88E34E6DCC5650B5FE44FF70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.168.0/22
                IPv6:
                  2804:6214::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269274

    Signature Algorithm: sha256WithRSAEncryption
         d9:99:19:c6:fe:c9:78:50:f0:46:8b:6f:63:49:e4:cb:ac:b3:
         aa:e3:14:41:8f:09:a4:5a:3d:94:6d:10:28:0c:8d:71:17:6e:
         45:c0:c4:0b:b1:a2:15:42:1b:13:fc:29:94:79:b4:7f:91:7c:
         dd:a6:18:4f:30:98:bd:89:d2:c6:1f:dd:23:1a:77:f9:7f:a2:
         c3:60:ca:5e:84:c1:c4:93:6c:e1:94:35:32:84:9c:94:a5:83:
         7a:f7:69:3a:31:9c:92:dc:53:af:47:31:f6:0d:15:fd:f0:e1:
         c1:2a:9e:c6:98:29:9d:47:ff:eb:c5:c6:ce:f9:11:11:5a:68:
         5b:eb:b8:67:40:fd:e1:31:71:ff:1a:fd:fd:65:b8:53:e9:76:
         8c:05:ca:6c:8b:eb:c7:16:5a:d8:b8:ef:7a:71:64:a6:28:95:
         65:ed:a5:f4:28:16:01:7c:81:81:ba:9c:e1:c7:1f:7d:c9:2a:
         bf:0a:06:78:24:3a:97:aa:bb:00:e8:6b:92:d3:16:54:ce:01:
         28:ec:a7:6c:bd:ca:0b:f5:d9:92:b6:4f:e3:fe:21:26:3f:d1:
         dd:08:4f:b5:51:c6:fb:ac:df:74:ae:ab:d9:69:39:5a:cc:9a:
         de:77:fa:8a:1f:0f:c7:b6:02:c4:3b:a0:d1:32:d1:a5:2c:66:
         1a:ed:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----