Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6583CFEF699DC8C88F145658617A79CD61A3138.cer
File:                     D6583CFEF699DC8C88F145658617A79CD61A3138.cer (raw, json)
Hash identifier:          4fXYN8Pis3J2E7MLDIC/3rssHoeFYQCpA4bziMl+mOQ=
Subject key identifier:   D6:58:3C:FE:F6:99:DC:8C:88:F1:45:65:86:17:A7:9C:D6:1A:31:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       541146DB31C0020FFCF60D06B8F59DE0F314363D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:48:49 +0000
Certificate not after:    Thu 03 Apr 2025 16:53:49 +0000
Subordinate resources:    AS: 267946
                          IP: 45.166.64.0/22
                          IP: 2804:55a0::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:11:46:db:31:c0:02:0f:fc:f6:0d:06:b8:f5:9d:e0:f3:14:36:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:48:49 2024 GMT
            Not After : Apr  3 16:53:49 2025 GMT
        Subject: CN=D6583CFEF699DC8C88F145658617A79CD61A3138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:17:a4:5c:4e:48:05:91:3a:47:ce:31:35:45:
                    aa:41:2a:a0:c6:3c:1c:c0:e6:1b:11:59:3d:cb:e5:
                    05:9a:1c:8f:cf:14:94:37:18:53:43:f2:2a:e4:63:
                    3c:c5:fc:aa:bb:f6:df:07:59:c4:4d:03:91:f2:cb:
                    56:31:94:0e:93:83:2e:e8:58:25:3f:c0:c1:38:f3:
                    5f:b6:3a:70:23:dc:c4:50:62:f0:b8:c2:ba:d2:e7:
                    41:11:99:42:37:70:d8:9b:77:50:64:1b:26:be:ee:
                    40:17:3c:7f:ce:b3:64:70:ef:1a:54:62:1a:bf:f3:
                    18:02:14:be:5f:10:ed:ee:61:b8:22:02:50:eb:29:
                    bd:46:41:77:fb:9b:c6:b8:64:01:99:f0:ae:d9:63:
                    16:c3:cf:61:ba:cb:6b:04:1c:8a:c7:c7:a3:8f:c6:
                    9c:3b:3f:38:3f:8a:ba:2d:94:2f:f3:32:54:c8:81:
                    73:96:f8:06:41:af:97:37:4a:36:dc:dc:e0:f0:1e:
                    f7:2a:13:18:d8:6f:b0:d2:56:fc:5b:2c:f4:50:24:
                    82:de:14:9e:5d:47:64:d6:3a:47:4d:c2:27:14:44:
                    36:d5:f8:31:25:1d:c5:e3:3a:8f:29:9f:eb:86:56:
                    56:70:74:88:12:b8:fb:89:d3:8f:1a:2e:b5:c6:87:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:58:3C:FE:F6:99:DC:8C:88:F1:45:65:86:17:A7:9C:D6:1A:31:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22
                IPv6:
                  2804:55a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267946

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:d8:9c:b5:52:bc:83:af:f1:07:47:ba:af:86:37:df:84:
         07:53:14:ed:e2:cb:2a:39:79:f4:23:dd:93:48:24:41:f7:4a:
         b5:78:ad:f7:4f:db:cf:2e:4c:b7:91:b7:d9:09:fe:76:1a:f4:
         42:85:42:4f:4c:d5:df:72:3c:01:ee:65:ff:1e:70:8b:c8:a5:
         46:7c:3b:ca:8a:63:c6:ab:1c:8d:b7:8e:db:d3:4e:96:06:5f:
         ea:6b:ac:0c:74:96:83:cb:a2:2a:c7:81:fa:f6:b3:ed:68:fa:
         9e:58:06:2c:c6:70:f8:8a:5b:6b:74:60:05:ba:2a:f8:49:d9:
         06:12:a5:97:f5:28:08:3a:6b:dd:b8:a9:f7:97:9e:36:f2:dc:
         9c:0b:72:9f:3e:ef:05:b5:1a:9c:3b:5c:0d:d5:81:fa:0e:29:
         28:c8:fd:de:78:a8:97:7c:6e:c4:62:45:12:12:df:f6:2c:47:
         5a:8e:8d:76:6d:4f:cf:17:5b:6c:95:59:18:28:76:72:bf:bd:
         3e:de:03:66:e7:0c:5c:73:b0:1d:4d:df:af:06:33:61:55:2c:
         fb:b4:59:04:53:29:dc:35:35:1a:31:49:c6:54:91:6f:02:ad:
         3e:21:91:b4:9f:4c:e9:3d:7d:f0:e0:27:4b:ea:29:79:ba:ba:
         16:c4:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----