Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.cer
File:                     F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.cer (raw, json)
Hash identifier:          J8n0u7Nvegde/2Cw0rnLW8p17u1EoAaOleLZUxYuzbY=
Subject key identifier:   F1:D0:01:3C:BC:EA:E7:9C:32:F6:29:8A:75:3E:BB:B6:71:A3:BE:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       052B62F43239D7B471CE8DBE586C4C0A42B01E00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 Apr 2024 01:00:49 +0000
Certificate not after:    Sun 20 Apr 2025 01:05:49 +0000
Subordinate resources:    AS: 269678
                          IP: 45.191.68.0/22
                          IP: 2804:683c::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 02:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2b:62:f4:32:39:d7:b4:71:ce:8d:be:58:6c:4c:0a:42:b0:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 21 01:00:49 2024 GMT
            Not After : Apr 20 01:05:49 2025 GMT
        Subject: CN=F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:77:20:59:4e:5e:a3:d1:1d:da:cd:cd:31:
                    6e:20:b0:f8:51:ca:ee:a8:f5:7d:b9:1a:67:27:a0:
                    b2:a0:44:70:09:d4:b4:61:3e:48:18:3b:10:22:d6:
                    eb:4d:bf:fe:d4:01:db:16:35:18:f4:6e:04:de:c5:
                    75:48:40:6e:a7:47:7d:2c:b0:8b:bb:96:0a:13:60:
                    69:b9:76:6b:c9:b4:96:a4:82:26:28:99:bb:7f:1c:
                    aa:1e:13:75:0b:df:a5:57:65:87:4e:f0:03:f3:d5:
                    13:dd:0f:ef:f2:85:db:05:ac:81:d6:f8:d5:01:eb:
                    82:94:6e:40:a4:b5:18:c9:99:12:e8:0f:80:11:3a:
                    6a:60:45:fb:c3:1d:78:01:0d:51:e2:5b:58:9e:99:
                    a0:05:66:a7:fd:5b:a8:96:57:53:35:45:a5:bc:cd:
                    62:d6:85:25:02:20:c2:cb:76:b0:e1:d3:a5:c9:d8:
                    e5:79:30:0b:70:80:bd:02:79:d9:d8:ad:06:2f:ed:
                    23:9e:61:56:b1:8e:13:50:7b:25:ad:33:17:38:09:
                    1d:39:2a:e3:d6:a9:c8:d6:0e:63:e0:95:73:fd:c5:
                    40:da:60:44:08:f1:f8:13:82:f5:15:2c:f5:54:81:
                    72:65:08:19:c4:38:a6:01:54:f4:4d:3f:d0:6f:e6:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:D0:01:3C:BC:EA:E7:9C:32:F6:29:8A:75:3E:BB:B6:71:A3:BE:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.68.0/22
                IPv6:
                  2804:683c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269678

    Signature Algorithm: sha256WithRSAEncryption
         64:73:07:61:3a:45:9b:85:be:bf:cb:5d:74:31:b2:66:5a:c0:
         be:a2:ab:61:91:a5:93:f5:a4:52:9e:45:f1:68:72:9f:00:aa:
         22:b6:9c:d4:e2:f2:11:2d:5e:83:53:75:ec:11:33:11:d6:d8:
         70:3f:cc:9a:75:c1:22:4b:95:76:66:51:85:34:ba:32:f2:0a:
         87:ca:fb:f7:55:b7:37:e4:ff:e9:f6:df:4b:56:87:17:cb:7d:
         98:c8:fa:6a:1e:9b:63:a8:56:35:fb:38:e1:24:c6:c8:47:5f:
         b7:59:e4:d3:25:91:d8:8a:88:4d:f7:f0:b0:42:7a:fc:a1:3a:
         e1:73:7a:8f:f1:42:b6:60:85:5d:8f:cf:ea:67:8e:84:36:b8:
         54:c7:db:ba:f9:8f:69:7c:0d:30:34:65:bb:ec:8a:39:9f:0b:
         aa:8f:a0:84:de:15:cd:2c:ee:b1:c6:57:59:3c:09:36:f4:9c:
         82:f2:5c:d3:67:ab:86:fd:15:32:3b:84:78:3d:82:b5:1f:34:
         a6:df:13:66:76:5c:bc:b7:4c:2b:12:db:c7:e1:20:0f:2f:bd:
         09:f8:f0:53:0f:df:ad:c1:8d:b6:e0:32:f1:f5:cc:5e:5f:40:
         b2:56:52:7d:03:cd:76:d9:51:f8:f2:6a:bb:f8:3c:6b:6b:63:
         5f:05:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:45:38 2024 by rpki-client on console-ams.rpki-client.org