Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE6FE20D5D5311E739CEA618F354893B551B86BE.cer
File:                     CE6FE20D5D5311E739CEA618F354893B551B86BE.cer (raw, json)
Hash identifier:          VqoE67PO8xO/WWe1fQPtzXlA0UdCPTI+6ICkTOQgLJg=
Subject key identifier:   CE:6F:E2:0D:5D:53:11:E7:39:CE:A6:18:F3:54:89:3B:55:1B:86:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       548BE74BFB11EBEF5E21847B6249C5BDAD092F76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:55:18 +0000
Certificate not after:    Thu 03 Apr 2025 08:00:18 +0000
Subordinate resources:    AS: 266549
                          IP: 160.238.192.0/22
                          IP: 2804:3db8::/32

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 11:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8b:e7:4b:fb:11:eb:ef:5e:21:84:7b:62:49:c5:bd:ad:09:2f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:55:18 2024 GMT
            Not After : Apr  3 08:00:18 2025 GMT
        Subject: CN=CE6FE20D5D5311E739CEA618F354893B551B86BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:96:b5:b2:86:32:ea:73:e4:aa:b6:f7:38:
                    6b:68:56:c9:f9:95:36:1f:d9:6d:8b:cd:ca:c2:fa:
                    34:52:65:c7:0a:cd:96:3b:27:d3:9e:97:0a:0c:b8:
                    b0:16:16:67:15:e7:47:83:1b:f6:db:b8:21:95:4d:
                    32:2d:b9:f6:de:ec:fb:f6:1f:56:9e:3b:d4:d7:b5:
                    a2:99:04:24:95:83:ef:06:59:0b:1a:3e:87:7a:84:
                    f9:73:ed:11:d9:12:50:c9:e4:6b:cc:51:e8:2c:2c:
                    87:ea:58:87:6c:0e:ac:d1:3d:fb:45:61:3f:e3:a5:
                    ee:0c:c2:f6:55:7d:3d:4b:23:f9:a8:e9:c9:9a:2f:
                    84:6f:63:b2:29:05:62:bb:29:25:f9:e8:1f:f5:3d:
                    a2:96:34:5f:88:80:36:f5:f2:ad:19:a2:22:52:88:
                    50:cb:1e:3e:93:83:0c:c8:37:db:ac:88:9d:6d:1d:
                    d3:cd:10:48:40:fa:85:f5:67:88:f1:55:d1:9b:fa:
                    51:ac:ac:d2:0c:93:3a:4a:4d:4f:6b:a9:6e:88:6e:
                    f7:7d:f3:0e:01:27:24:f1:71:d4:50:ae:af:b1:25:
                    e5:36:b4:17:d8:d7:94:ce:63:6a:95:c8:fb:85:f0:
                    d4:c7:3a:f8:e4:38:f6:47:4d:bf:bf:b9:d2:d3:0e:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:6F:E2:0D:5D:53:11:E7:39:CE:A6:18:F3:54:89:3B:55:1B:86:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.192.0/22
                IPv6:
                  2804:3db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266549

    Signature Algorithm: sha256WithRSAEncryption
         67:24:d6:f0:6a:1e:ef:1e:b8:44:42:b2:ca:13:8d:1a:fd:3f:
         cc:51:fc:d8:99:32:17:fb:96:49:0a:50:2e:c2:f1:da:44:31:
         2d:6f:ba:f6:96:9c:e4:f2:47:63:2c:6e:51:75:d3:23:cb:8b:
         f9:7e:9e:71:95:2e:ff:64:2c:f7:dc:85:ea:09:82:38:17:29:
         dd:68:bf:7d:6d:f5:31:91:e9:f9:04:93:37:bb:f3:13:f6:76:
         19:62:af:cd:99:ea:d2:ff:15:27:5d:91:56:05:76:22:06:19:
         53:fc:39:76:26:ab:c6:ed:d7:bb:e2:df:d2:02:84:e9:d0:3f:
         e3:e1:d0:d5:c4:ef:05:87:cf:c9:78:47:c4:8c:df:fb:1c:37:
         33:f9:ad:45:4f:5d:32:c5:16:46:f3:ff:aa:3f:20:36:24:fe:
         67:b0:53:8e:e6:b8:81:e5:33:3e:57:a0:3b:91:92:32:66:69:
         4d:f7:55:06:b3:20:f2:89:d2:ff:48:8e:7d:42:fb:0a:89:05:
         e8:a8:9e:b6:42:12:88:c2:1d:f6:48:0c:b1:bb:32:b9:1f:c6:
         41:c5:ce:f2:1d:8a:32:5a:ba:bb:4c:81:cb:1f:85:68:09:aa:
         d0:d1:a5:38:b7:6b:62:78:53:78:63:58:bb:86:80:65:db:f7:
         94:5c:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----