Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.cer
File:                     C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.cer (raw, json)
Hash identifier:          TPJ8ZG9jWDHanI144B5cnyYR54iSJdn87ZU5ewu+XSk=
Subject key identifier:   C7:FD:B1:AE:17:E6:8C:CA:BC:36:EC:4E:9F:6D:05:26:2D:42:FB:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53FEEC417E47AC4ACD5C558AFBB14E85A2D61160
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jun 2024 12:17:13 +0000
Certificate not after:    Fri 13 Jun 2025 12:22:13 +0000
Subordinate resources:    AS: 264369
                          IP: 131.161.64.0/22
                          IP: 2804:1d74::/32

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 20:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:ec:41:7e:47:ac:4a:cd:5c:55:8a:fb:b1:4e:85:a2:d6:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 14 12:17:13 2024 GMT
            Not After : Jun 13 12:22:13 2025 GMT
        Subject: CN=C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:df:7a:0d:fa:2a:54:31:19:e2:06:5c:14:
                    8b:2b:ab:81:bb:d3:a2:9d:c1:1f:52:7f:15:9c:12:
                    19:43:4b:2d:d3:f8:7a:cb:83:3f:9f:a4:53:4f:49:
                    2b:f5:a2:4a:76:eb:7e:7f:a1:ab:d3:d4:a5:14:7a:
                    fb:de:87:1c:7e:76:37:3d:54:c2:67:31:02:f8:2d:
                    3b:05:da:cf:42:74:9e:35:60:7a:97:24:65:5f:1d:
                    3b:96:97:ad:48:ef:91:0a:a6:12:c4:ab:e3:e1:62:
                    a4:87:ac:6c:8a:e6:86:87:72:0c:a4:eb:4c:b4:ed:
                    7a:40:9a:2a:33:ad:bb:08:40:61:04:14:c3:6c:63:
                    31:04:f0:cf:e0:5e:7f:ba:b9:98:e4:2f:52:86:1a:
                    e6:4d:68:db:4c:ff:af:e7:46:6b:3f:c6:40:53:30:
                    f5:be:2c:60:b5:46:84:1a:f7:2b:ad:e3:d2:ac:d6:
                    16:35:b8:91:ff:70:06:af:8b:4c:42:31:8b:72:96:
                    51:89:ca:b9:e2:6e:c1:8b:95:8a:51:f1:b7:2d:d8:
                    85:37:11:11:9e:ea:2c:c2:ab:ed:49:da:98:d9:77:
                    63:f0:eb:2b:89:2b:87:66:b5:50:f0:3e:88:29:34:
                    e2:63:ee:ef:5e:1b:ca:f1:df:d5:d1:4b:6d:c7:96:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:FD:B1:AE:17:E6:8C:CA:BC:36:EC:4E:9F:6D:05:26:2D:42:FB:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.64.0/22
                IPv6:
                  2804:1d74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264369

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:c1:0e:a5:3e:7e:c8:ae:06:bb:01:58:50:61:c4:87:fe:
         84:c7:7f:06:da:0e:de:59:47:fe:db:a0:df:05:ed:24:6b:ee:
         29:0b:5f:08:b8:5e:90:e1:3e:4d:bc:4f:4c:08:cf:8f:7f:1a:
         c6:42:76:14:1a:a2:39:c0:ba:5c:a6:88:96:57:65:da:c9:c5:
         33:f9:6e:bd:d0:24:82:af:a2:10:28:2e:44:41:6e:fb:9a:b1:
         62:3e:a4:cc:2d:c7:99:34:ba:08:8d:c5:77:37:63:99:af:c7:
         0c:48:cf:9c:29:15:79:8d:7e:55:cf:42:83:2e:ad:70:6a:c1:
         83:b5:19:b3:f8:61:69:0c:16:91:6c:de:35:70:11:ed:11:34:
         b7:14:14:18:b5:d9:4c:d9:9f:09:ad:ca:9c:05:e3:fb:bc:9a:
         09:7a:03:29:00:63:ab:77:49:32:6a:26:ce:12:00:a2:c2:21:
         20:45:2f:2b:29:c6:bc:96:31:bf:c0:91:2a:1c:56:65:19:76:
         96:d8:a0:99:46:95:9d:c4:8c:22:f8:6d:db:96:90:0a:33:ac:
         64:87:26:f4:6e:fc:a7:2a:85:d9:3c:39:dd:7b:05:58:67:05:
         59:3b:bd:65:96:83:64:b2:db:4a:ef:81:fc:57:f7:2b:1f:e2:
         16:89:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 21:52:32 2024 by rpki-client on console-fra.rpki-client.org