Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F27941693B376C4C67B0FD176F1538F4B07BE79E.cer
File:                     F27941693B376C4C67B0FD176F1538F4B07BE79E.cer (raw, json)
Hash identifier:          jxaVWctcDqbze5Yj/9znTC+WypewaLbx7X/u55dFWV8=
Subject key identifier:   F2:79:41:69:3B:37:6C:4C:67:B0:FD:17:6F:15:38:F4:B0:7B:E7:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E41E44CA978BFECB8C223E5E432F2181E32DDA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/F27941693B376C4C67B0FD176F1538F4B07BE79E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jul 2024 12:04:21 +0000
Certificate not after:    Mon 21 Jul 2025 12:09:21 +0000
Subordinate resources:    AS: 268031
                          IP: 45.168.60.0/22
                          IP: 2804:56e8::/32

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 01:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:41:e4:4c:a9:78:bf:ec:b8:c2:23:e5:e4:32:f2:18:1e:32:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 12:04:21 2024 GMT
            Not After : Jul 21 12:09:21 2025 GMT
        Subject: CN=F27941693B376C4C67B0FD176F1538F4B07BE79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:51:00:92:ff:5a:91:61:ef:50:8e:ed:58:
                    8c:61:04:97:f2:d7:24:a2:5e:ed:c1:ce:0f:62:4d:
                    e0:9c:8c:0c:0f:30:06:85:9a:9c:f7:ea:8a:d1:0a:
                    91:3c:22:61:5c:87:f0:cd:55:37:a0:2a:99:f5:f4:
                    b1:5b:49:8f:28:26:b5:44:4b:bf:4a:72:27:ff:98:
                    cb:e8:02:1e:1c:1b:a4:08:0e:d7:be:3e:fb:8d:1f:
                    53:6a:47:46:f4:9c:33:ae:9e:85:d8:15:39:4d:57:
                    8a:f5:86:a1:9e:da:6b:08:ed:d7:a7:1a:dc:2f:36:
                    08:68:65:c0:50:ba:ba:01:0c:e4:b1:78:bd:f3:b8:
                    25:06:e9:dd:a9:40:2a:80:b3:fd:ac:a2:6c:01:d6:
                    ea:40:30:ba:15:10:4b:4f:00:99:03:65:44:a2:e7:
                    d3:fe:5b:79:25:70:de:16:1d:fa:dd:78:3f:6f:21:
                    bf:4f:4c:13:55:3e:ac:2f:80:5a:19:89:f5:56:ca:
                    28:4c:7e:65:2d:aa:eb:6e:89:99:24:3b:15:17:cc:
                    ba:fa:01:4a:b2:5f:f4:0a:fd:b6:67:a7:5d:a4:40:
                    b4:76:e9:18:bb:40:71:a3:77:54:06:02:d2:d7:f2:
                    c9:8c:89:33:9a:43:6e:b6:3c:8c:e2:eb:37:ce:c2:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:79:41:69:3B:37:6C:4C:67:B0:FD:17:6F:15:38:F4:B0:7B:E7:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/F27941693B376C4C67B0FD176F1538F4B07BE79E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.60.0/22
                IPv6:
                  2804:56e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268031

    Signature Algorithm: sha256WithRSAEncryption
         02:63:32:fe:88:33:4c:67:82:5b:4b:82:f7:f5:3f:9b:70:26:
         aa:ca:10:65:70:ff:65:d7:42:a9:ba:90:6b:ed:86:eb:e3:99:
         88:99:02:2f:cc:6b:7a:50:ce:ce:29:b1:36:7d:12:27:4e:2f:
         8d:17:a4:12:01:a8:9d:1e:bd:7a:6e:ed:0b:7b:34:21:a9:d2:
         95:dd:59:b9:5f:53:9b:dc:9a:02:2b:6a:e4:75:e9:bf:a0:a3:
         0f:ea:73:9a:03:c3:71:2a:c1:82:d5:a6:05:ca:53:c8:c7:91:
         30:8e:54:83:90:d2:0a:3d:08:f2:90:5b:6d:fd:24:b6:6d:f8:
         95:9f:52:53:c4:7d:5e:4b:7a:21:02:3c:18:ba:33:e3:52:0c:
         f1:78:60:61:dc:80:1c:8a:9f:b4:6a:9e:07:44:50:d8:dd:ca:
         95:ae:ac:98:ac:e9:be:89:69:35:59:8a:8c:85:96:21:ab:76:
         aa:75:8c:6c:3a:cb:0f:20:6d:40:9b:e9:c5:1a:67:86:15:32:
         94:50:cb:e8:8e:65:e4:04:30:7c:9f:e1:5e:9b:92:45:bf:75:
         48:81:45:c1:fb:0a:5a:16:01:de:92:b7:f8:f2:27:b7:d3:13:
         4a:8a:bb:f7:44:57:28:a5:11:5e:6c:fe:1f:1c:6d:72:34:c9:
         67:ad:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 04:27:40 2024 by rpki-client on console-ams.rpki-client.org