Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.cer
File:                     9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.cer (raw, json)
Hash identifier:          Z973+q0nCa6m8NPFhXd463ddx/q9JCEd1bhNtfOK0Wo=
Subject key identifier:   9F:B9:DC:7D:DD:18:C6:39:56:30:6C:BC:33:A5:1C:DE:FF:D2:88:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79C825BCD85F4A928A71DDDAE76383849D2B72F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Oct 2024 16:31:48 +0000
Certificate not after:    Fri 10 Oct 2025 16:36:48 +0000
Subordinate resources:    AS: 61664
                          IP: 131.108.60.0/22
                          IP: 2804:1c98::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 13:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c8:25:bc:d8:5f:4a:92:8a:71:dd:da:e7:63:83:84:9d:2b:72:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 11 16:31:48 2024 GMT
            Not After : Oct 10 16:36:48 2025 GMT
        Subject: CN=9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:10:af:81:fb:17:1d:a9:0e:4b:b8:89:92:
                    7b:7a:ce:ad:62:10:40:04:68:3e:f2:9c:b2:74:53:
                    3b:c6:df:9d:26:8a:ae:3b:7f:7c:c4:a0:14:db:cf:
                    8c:5b:22:9c:26:d3:8e:33:14:fa:9d:06:e5:c9:60:
                    73:6c:8e:a1:f3:15:b4:a4:1c:5b:86:de:6a:c0:d8:
                    ed:f6:cb:6d:30:a4:9a:02:75:e8:5d:c0:96:c5:ae:
                    53:f7:c1:cc:35:18:13:09:2d:5e:76:17:64:90:48:
                    bb:38:26:bb:7a:8e:14:40:1e:cf:fb:e8:16:0d:ed:
                    eb:dc:ea:63:1a:e3:91:e6:4a:1d:ae:c3:0d:f2:4c:
                    70:15:c3:8a:d2:2b:91:17:df:29:b7:8e:ad:e0:79:
                    4e:65:6c:71:13:69:d9:53:0f:97:e9:84:50:a0:20:
                    5c:95:b6:a7:d6:96:40:03:9b:a7:e3:4f:92:5c:21:
                    f3:3c:0d:da:35:61:fb:14:11:a3:0e:e6:38:74:b4:
                    f9:b6:9b:dd:d6:33:c5:09:ec:7f:be:55:22:4c:ea:
                    06:80:26:ac:f8:5a:96:61:b5:b2:2b:a7:64:14:83:
                    68:5d:b6:bd:bc:0b:62:c1:b2:05:20:f6:78:3d:34:
                    0c:40:c7:fc:e7:ca:aa:dd:0a:4f:da:1e:61:b8:06:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:B9:DC:7D:DD:18:C6:39:56:30:6C:BC:33:A5:1C:DE:FF:D2:88:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/9FB9DC7DDD18C63956306CBC33A51CDEFFD288DC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22
                IPv6:
                  2804:1c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61664

    Signature Algorithm: sha256WithRSAEncryption
         b0:fb:b0:10:c5:d6:9f:dd:18:d4:c9:1a:12:98:e8:ab:62:93:
         46:bd:62:59:49:4d:33:3b:9e:1c:5c:26:f1:04:0d:63:c2:d3:
         13:cc:4e:44:32:b6:05:d8:f5:bc:18:51:bc:ba:8d:92:e2:ee:
         97:ff:4c:57:45:65:af:d9:2d:e6:31:d2:ea:8f:76:ee:3f:e6:
         97:0c:a8:9f:53:b3:d9:71:f2:63:ad:79:a5:44:81:65:85:12:
         9f:30:0b:dc:cc:7c:fc:3d:ad:6c:27:e1:67:d4:63:97:8e:0b:
         76:e6:aa:af:d3:28:26:aa:5e:ac:15:45:1a:05:50:88:7d:95:
         60:ed:7d:25:02:c5:34:09:a3:63:1e:89:85:15:b6:60:44:96:
         90:c7:c3:35:23:dc:fd:15:50:32:14:13:0f:e8:69:31:92:3d:
         6f:19:b4:91:f7:b7:37:ec:ed:28:60:12:a8:50:82:11:56:f4:
         52:60:ad:69:d9:b6:d9:3d:a0:64:ed:ce:97:71:d0:be:93:95:
         9c:0b:74:be:55:51:11:cd:d5:6d:07:dc:70:73:79:ee:dc:90:
         90:7a:64:af:d9:14:ee:ea:e2:4a:19:f5:41:8d:9c:f1:8f:4b:
         b4:09:62:cb:72:d2:2e:3b:fb:fc:8e:39:07:8c:c0:90:0e:2d:
         ff:2a:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----