Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2F9AC7268555302AF30F54A7F45D44170882390.cer
File:                     F2F9AC7268555302AF30F54A7F45D44170882390.cer (raw, json)
Hash identifier:          BHn/AsHaEDu8toknImA7+x5JLeQ59lqB+QIgIS+ZZbQ=
Subject key identifier:   F2:F9:AC:72:68:55:53:02:AF:30:F5:4A:7F:45:D4:41:70:88:23:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77C78BAC0E274CD4D366D79B3369F47FCE2FACFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/F2F9AC7268555302AF30F54A7F45D44170882390.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:32:56 +0000
Certificate not after:    Thu 03 Apr 2025 10:37:56 +0000
Subordinate resources:    AS: 263926
                          IP: 138.219.112.0/22
                          IP: 2804:27dc::/32

Validation:               Failed, certificate revoked on Sun 12 May 2024 19:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c7:8b:ac:0e:27:4c:d4:d3:66:d7:9b:33:69:f4:7f:ce:2f:ac:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:32:56 2024 GMT
            Not After : Apr  3 10:37:56 2025 GMT
        Subject: CN=F2F9AC7268555302AF30F54A7F45D44170882390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:bf:9c:cb:02:93:f0:11:d0:96:35:8d:65:
                    b3:ae:8b:67:4f:7d:4e:dc:d0:71:a2:17:5b:93:de:
                    90:07:86:b9:49:cd:77:1e:09:42:e3:df:af:b3:c1:
                    75:4c:f9:5e:a4:03:36:e0:36:6f:57:12:ca:ae:e9:
                    b8:87:74:88:c1:d8:bc:c0:6e:84:24:dc:5d:b3:ae:
                    91:15:78:88:08:9f:6b:c9:92:d6:30:d2:8f:c4:d5:
                    f0:38:1c:87:d3:5d:09:60:c3:a4:a5:32:a9:63:48:
                    b9:51:af:f6:70:a7:3b:c0:4e:c5:16:8a:18:7b:93:
                    16:a6:9e:ed:29:80:eb:df:05:aa:9b:b4:0a:72:b0:
                    c6:cf:bc:f6:4d:d5:95:00:b2:a8:82:06:1b:da:d8:
                    33:85:15:34:b2:b7:69:be:5b:45:1f:f4:76:67:4c:
                    96:64:15:88:53:0f:2f:1e:a7:c6:44:9a:b1:e0:e6:
                    28:dc:29:53:af:c7:1f:9d:77:83:11:bc:10:45:69:
                    60:cb:34:a6:18:fb:a1:fb:a9:d6:5d:1e:ca:06:46:
                    85:1b:77:75:20:cc:ae:af:51:41:99:31:b4:4b:40:
                    58:6f:bd:ba:40:4e:ad:5d:7f:68:d2:b6:19:9a:cc:
                    7d:2a:20:c8:fa:26:68:57:0a:e9:43:50:49:0b:8d:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:F9:AC:72:68:55:53:02:AF:30:F5:4A:7F:45:D4:41:70:88:23:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/F2F9AC7268555302AF30F54A7F45D44170882390.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.112.0/22
                IPv6:
                  2804:27dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263926

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:3b:2f:e7:97:fb:62:61:31:90:7b:93:a0:d6:cb:47:5c:
         86:f6:57:4b:af:a2:64:bb:63:19:2b:ce:40:57:74:06:aa:9b:
         a4:45:ac:37:c7:ad:b1:c2:1a:5a:47:e5:0d:5b:d6:0f:8c:e9:
         4e:b1:52:3d:3a:0e:7f:c3:86:8b:cb:3d:8c:bd:ed:38:64:8d:
         5e:0c:aa:78:b2:d3:b0:52:79:54:59:67:33:e7:3f:a4:27:86:
         10:17:bc:9b:04:32:d5:50:04:ac:ba:74:6b:44:e2:b2:45:28:
         8d:26:32:52:c5:30:f2:77:d9:d5:f3:c0:04:34:e7:39:9f:0a:
         c1:c1:30:4e:b6:8b:a4:39:eb:41:de:e1:c1:65:8d:a4:96:da:
         ba:eb:49:34:83:ca:8a:9e:86:4e:be:d6:db:9f:fa:dd:d4:14:
         b9:68:18:15:2a:18:44:62:9f:b0:6a:7d:0e:fd:58:84:f2:37:
         1c:8e:eb:28:60:a8:7e:99:4d:c1:72:43:22:5b:94:e3:66:54:
         21:50:76:dc:15:f5:30:14:af:6d:74:ce:22:6f:ef:56:03:f6:
         4c:7f:4e:d3:7a:16:ba:10:d6:3f:c1:8e:63:4a:32:f5:e1:61:
         13:f4:16:33:aa:d0:3e:05:70:0e:97:36:44:e3:1b:5c:ac:19:
         3e:6e:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org