Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.cer
File:                     F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.cer (raw, json)
Hash identifier:          Q2uN8641ob/uo9n3Ix1EzZ9ZtDymTx7hVlJXjnXBuz0=
Subject key identifier:   F1:6C:AE:28:A9:DF:35:33:B6:F7:5C:D0:6E:A0:51:62:AA:08:D7:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       020B755B47D73DF17165C32B63B9D65473F103FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jul 2024 18:54:08 +0000
Certificate not after:    Thu 03 Jul 2025 18:59:08 +0000
Subordinate resources:    AS: 269109
                          IP: 45.179.68.0/22
                          IP: 2804:5f90::/32

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0b:75:5b:47:d7:3d:f1:71:65:c3:2b:63:b9:d6:54:73:f1:03:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  4 18:54:08 2024 GMT
            Not After : Jul  3 18:59:08 2025 GMT
        Subject: CN=F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:db:53:4d:51:a9:04:33:0b:7b:6f:a1:19:
                    8d:85:85:61:00:5a:d2:9c:30:b4:5e:5d:29:61:22:
                    e2:10:25:54:ef:46:ba:3f:bb:bc:70:9e:46:5f:f1:
                    d9:10:4e:c2:33:ab:00:aa:8c:7c:fa:8e:f9:60:99:
                    ab:27:04:22:15:66:2e:f3:bb:5d:cd:70:af:ff:ac:
                    d0:e5:a8:bc:2f:ca:40:33:81:b4:04:36:1c:0c:bd:
                    31:2f:54:c4:89:3c:8b:64:6a:c2:3a:7c:91:54:62:
                    9e:0f:2a:18:ca:4d:84:b0:ed:47:de:c1:df:54:83:
                    ff:39:14:9d:1d:69:0f:4d:70:1f:e6:90:6d:87:cf:
                    7e:19:a7:57:9c:e5:61:69:2e:16:27:24:58:a9:af:
                    da:28:aa:31:b1:27:53:3c:e2:7c:77:49:d3:bf:dc:
                    f2:dd:c5:cb:c7:24:c0:4b:8e:26:bd:42:4b:36:00:
                    92:13:58:76:3a:57:92:2d:74:f5:44:44:f3:36:42:
                    63:bb:c8:fb:cd:69:05:c3:85:0f:80:33:46:f2:2b:
                    3c:12:39:14:af:77:41:ee:fa:06:b5:d2:88:18:99:
                    bc:88:9d:06:aa:51:22:33:1d:36:d0:d1:5b:b4:f1:
                    7f:cd:25:c9:45:0e:d9:8d:c1:12:28:9f:26:17:b0:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:6C:AE:28:A9:DF:35:33:B6:F7:5C:D0:6E:A0:51:62:AA:08:D7:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22
                IPv6:
                  2804:5f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269109

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:fa:9a:75:8b:59:3a:1d:87:e8:10:0c:07:c6:6f:ad:7f:
         07:94:f8:cf:0a:6c:b7:5d:02:5f:33:4b:cb:6d:ad:f6:93:e4:
         11:94:5d:bf:30:b9:e7:1f:f6:56:96:ba:5a:1b:50:d0:f9:7a:
         30:0c:85:23:bd:40:f5:02:a3:e4:fa:c0:7d:f8:d7:d6:ff:cb:
         32:99:c4:10:32:91:a1:77:06:b6:a9:14:a1:59:17:ed:3f:82:
         d5:57:da:d0:cc:f9:1b:66:4d:ab:be:e4:81:a2:85:12:5d:e2:
         a0:c1:5c:31:20:3a:ba:f3:94:4a:55:b4:68:86:c6:48:ae:6d:
         91:96:a9:4f:50:95:8d:dc:bf:8c:00:91:d6:81:44:9c:61:5b:
         3b:64:9e:55:b3:f4:63:8d:25:f8:86:40:18:1a:05:9e:15:41:
         5b:37:58:46:aa:17:7f:95:ab:71:18:e7:69:18:f7:80:cb:75:
         00:88:c7:87:1a:14:61:f8:c8:ee:d6:85:47:29:0b:b9:83:3b:
         de:72:2f:26:f0:58:b0:18:a9:b1:e9:09:e7:2a:aa:64:b1:e4:
         ec:e1:fe:38:6c:59:c0:1c:3a:80:87:84:50:ce:a6:bf:b0:65:
         ef:bf:a1:9a:99:83:98:61:c5:fe:36:08:c7:f1:eb:77:69:76:
         79:bb:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 05:44:05 2024 by rpki-client on console-fra.rpki-client.org