Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
File:                     F4350D0F7940D2C9E193A27C0A14B651396141D6.cer (raw, json)
Hash identifier:          R56Tj7ni8fnJmnvlLPpe9K8GvuXJrk1+aJlXpHoFEnA=
Subject key identifier:   F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77DBAA427B7CB70CF613048FE5896474D1B89747
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:47:51 +0000
Certificate not after:    Thu 03 Apr 2025 19:52:51 +0000
Subordinate resources:    AS: 53061
                          IP: 187.85.128.0/20
                          IP: 191.241.192.0/19
                          IP: 2804:117c::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 03:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:db:aa:42:7b:7c:b7:0c:f6:13:04:8f:e5:89:64:74:d1:b8:97:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:47:51 2024 GMT
            Not After : Apr  3 19:52:51 2025 GMT
        Subject: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:39:e9:cf:f1:4b:45:74:d3:08:4a:b0:53:
                    c6:f8:c2:41:a7:54:d4:fd:62:f9:2f:4c:95:1d:68:
                    db:de:71:e6:d2:7b:a7:b6:05:8a:b8:69:62:60:68:
                    ed:11:cb:ec:f0:3a:9f:da:df:36:2b:50:14:d0:7e:
                    c8:49:ce:ba:1b:c1:3c:ad:ab:49:bb:ba:ef:a9:35:
                    14:bc:82:13:e6:77:14:d8:28:d2:2b:39:81:26:7a:
                    71:b9:c2:6f:ba:0d:13:5a:db:ce:66:28:59:27:65:
                    4d:74:bb:15:39:fe:d1:80:57:b6:2c:59:e0:d0:1f:
                    39:c2:20:33:27:65:af:77:ce:bc:8d:91:3f:44:50:
                    93:1b:44:1c:26:ec:1d:33:1d:fa:b7:35:e4:d0:04:
                    23:5b:d6:34:54:0d:34:6c:e8:a8:a5:97:23:22:b2:
                    f8:d7:96:66:03:80:f4:51:e5:b9:dc:62:32:8b:53:
                    8c:33:f3:1e:cf:19:16:71:32:5a:5d:ae:cc:45:ab:
                    b6:3b:ac:e3:bc:20:b5:c9:cc:50:1f:10:9d:29:84:
                    a9:f7:3e:1d:06:cb:59:95:3a:31:81:ab:e0:11:ef:
                    57:e0:ab:93:b7:18:f7:ea:ba:c4:86:b9:af:07:23:
                    15:de:71:0d:64:1d:11:4f:5e:af:29:ec:dd:01:46:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.128.0/20
                  191.241.192.0/19
                IPv6:
                  2804:117c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53061

    Signature Algorithm: sha256WithRSAEncryption
         46:78:ee:48:69:ac:cc:fd:8d:02:81:be:2b:db:a6:4a:5e:fe:
         14:b9:48:b3:9f:21:c3:1b:8b:d7:12:9d:c5:50:8a:3b:1c:4a:
         ed:fa:2e:3c:dd:39:e8:33:d2:ee:05:37:a5:cc:e2:54:de:14:
         d9:23:b5:0c:c1:3c:04:2e:12:38:28:98:6b:40:74:a5:98:51:
         ba:96:46:7a:f3:2d:34:aa:a1:8b:61:5a:27:81:65:75:b2:17:
         65:84:19:8f:74:be:ae:84:88:19:be:58:9e:b3:99:3a:3f:11:
         3f:48:89:94:63:28:0f:8d:65:b0:01:66:d3:f7:e8:5e:03:f7:
         c9:71:6b:cb:5b:5d:18:65:10:2a:10:e5:75:7f:7e:07:cb:98:
         fb:a6:f8:5d:49:3a:de:d0:aa:3e:d2:85:c0:a8:3c:12:bc:c9:
         89:c4:99:d8:b8:f6:52:df:df:f9:a7:8e:6e:a1:ad:53:03:5c:
         d3:3f:1f:c6:8b:b6:ac:b4:5a:d8:7d:9e:a9:9a:bb:35:6e:c1:
         ec:a9:4d:5d:ec:a5:3e:63:46:f2:51:a7:b3:1f:ed:fb:1f:6e:
         15:bb:2c:95:fd:f2:a2:e8:00:77:5c:54:87:75:bf:7c:8e:c8:
         f8:59:b3:52:5a:6b:c5:60:79:58:ec:9d:f3:a3:ff:a3:83:e3:
         51:3d:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 05:52:45 2024 by rpki-client on console-ams.rpki-client.org