Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9F56E183EE065A36D830C9D35441B87388A72126.cer
File:                     9F56E183EE065A36D830C9D35441B87388A72126.cer (raw, json)
Hash identifier:          6RvwbjJEf9HCjKVGJytyGQpyMsbQMcEsbBcBI0OmCtE=
Subject key identifier:   9F:56:E1:83:EE:06:5A:36:D8:30:C9:D3:54:41:B8:73:88:A7:21:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B309E8FDFC20A10D5E2109BB3737CF4946FEDE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/9F56E183EE065A36D830C9D35441B87388A72126.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 May 2024 18:52:57 +0000
Certificate not after:    Thu 22 May 2025 18:57:57 +0000
Subordinate resources:    AS: 52976
                          IP: 200.169.64.0/21
                          IP: 2804:420::/32

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 16:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:30:9e:8f:df:c2:0a:10:d5:e2:10:9b:b3:73:7c:f4:94:6f:ed:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 23 18:52:57 2024 GMT
            Not After : May 22 18:57:57 2025 GMT
        Subject: CN=9F56E183EE065A36D830C9D35441B87388A72126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:32:7a:31:df:85:a0:8f:06:1c:b1:d3:9a:
                    b1:8a:8b:6e:d8:20:94:a2:2c:4e:c3:b8:3e:ae:58:
                    1b:bd:33:ca:c6:1a:96:0f:c0:c0:f3:d7:6b:1f:56:
                    d9:26:54:fe:31:95:51:64:e1:39:b7:c5:84:b2:0d:
                    31:3c:dc:49:b7:d2:53:45:79:5f:1b:ea:08:37:ff:
                    71:6e:cf:e4:55:c6:6f:74:8c:06:2d:e9:7f:2a:aa:
                    e4:3e:ee:8c:10:d5:cd:28:82:23:fb:f5:e5:c8:e1:
                    39:73:29:66:98:d6:59:fb:e6:c8:19:bf:bf:d5:7c:
                    e5:69:9c:97:d4:61:f7:2c:ed:e7:7b:cc:72:01:53:
                    9e:6a:52:60:36:a3:30:37:0f:76:1b:b7:13:2c:5f:
                    89:67:94:ae:4c:63:9b:b4:82:d8:65:76:32:96:8d:
                    44:e1:d6:ac:37:19:37:f7:6c:c5:ff:5f:e1:65:e0:
                    5f:c5:38:ba:41:a2:c2:dd:ac:94:b3:a6:0f:4b:0f:
                    35:3e:c4:b5:f0:fe:8d:34:bf:88:a2:c2:2d:c1:94:
                    57:12:5e:06:9e:70:a6:2d:af:06:98:c3:d3:fe:84:
                    0c:51:b6:13:59:95:8d:bf:95:68:02:52:cb:61:68:
                    38:13:8f:96:c1:17:cb:36:d6:5f:e5:aa:d1:2b:89:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:56:E1:83:EE:06:5A:36:D8:30:C9:D3:54:41:B8:73:88:A7:21:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/9F56E183EE065A36D830C9D35441B87388A72126.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.64.0/21
                IPv6:
                  2804:420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52976

    Signature Algorithm: sha256WithRSAEncryption
         c8:a4:8b:f8:3e:55:9e:7d:c7:f9:40:31:bf:b7:0e:33:78:97:
         b3:82:e5:9a:19:08:d7:be:b2:d0:b4:c2:9c:c5:7f:aa:54:95:
         ae:33:30:34:53:ab:e0:3d:21:ed:8e:06:c6:76:f7:7e:36:b7:
         81:86:98:f0:30:0d:6d:f3:b7:17:62:a9:26:26:58:9e:86:2b:
         b7:25:c4:d2:c1:a3:07:f0:bf:aa:48:f5:83:21:54:bd:1d:19:
         b3:88:30:7b:b4:1b:ec:bc:c8:d3:e0:26:8b:74:32:f8:c2:f3:
         ce:fe:97:da:fd:76:18:fa:b1:58:59:14:3f:77:2d:26:90:30:
         8c:a7:8c:20:8c:83:78:48:18:66:d0:aa:f8:16:cd:72:df:9f:
         c7:ec:af:15:2e:2e:fd:a4:e3:00:e7:6d:8f:ba:ac:1c:3e:59:
         bf:de:6b:14:9e:8c:f2:d0:b7:ab:63:44:e4:3b:04:94:4b:d1:
         c8:14:ea:6b:f6:e9:93:59:af:1a:d6:c5:93:8c:86:73:84:91:
         61:1a:7e:68:ce:87:9c:70:45:c0:45:e4:24:8d:d7:e2:4a:bd:
         94:6a:e0:d8:0f:cb:ef:c7:d6:a0:f9:98:08:b0:53:de:7a:f0:
         1b:65:c2:f4:3b:1a:6b:88:10:cb:ff:9e:80:60:74:f7:c5:8d:
         4b:db:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----