Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4AC67AF95BBAB210D4C9DDDDE6FD7D4B4F3BE86.cer
File:                     F4AC67AF95BBAB210D4C9DDDDE6FD7D4B4F3BE86.cer (raw, json)
Hash identifier:          GijNQuKzsVZKh/A9mUdmCQqOba5QQLhkEl8z2cHpBSY=
Subject key identifier:   F4:AC:67:AF:95:BB:AB:21:0D:4C:9D:DD:DE:6F:D7:D4:B4:F3:BE:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7613C423C255362CE457EE55F3B02BCCF2C99129
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F4AC67AF95BBAB210D4C9DDDDE6FD7D4B4F3BE86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2024 01:23:31 +0000
Certificate not after:    Wed 18 Jun 2025 01:28:31 +0000
Subordinate resources:    AS: 271577
                          IP: 181.232.228.0/22
                          IP: 2804:7db4::/32

Validation:               Failed, certificate revoked on Sat 06 Jul 2024 23:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:13:c4:23:c2:55:36:2c:e4:57:ee:55:f3:b0:2b:cc:f2:c9:91:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 19 01:23:31 2024 GMT
            Not After : Jun 18 01:28:31 2025 GMT
        Subject: CN=F4AC67AF95BBAB210D4C9DDDDE6FD7D4B4F3BE86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:ad:b8:ce:92:94:5f:31:29:7a:40:b9:d7:
                    83:69:e0:8c:40:50:c8:cf:33:59:71:6d:c4:e4:4d:
                    eb:88:db:4e:de:88:99:3c:44:81:3b:63:62:ec:12:
                    02:3e:54:ef:f6:fe:ca:77:12:c5:c2:e9:6a:32:ff:
                    61:e3:ca:be:b0:ff:85:67:f5:22:c8:24:60:ab:13:
                    de:98:ce:ad:29:34:1c:25:a7:fc:f7:2f:6f:63:c1:
                    7c:11:81:12:67:a3:ee:66:25:2a:02:df:a5:4f:75:
                    9c:c2:96:a3:65:3c:f5:8e:1c:40:f6:5f:85:2f:f2:
                    fc:66:22:11:ed:a6:05:c5:8f:6d:46:c5:98:6f:59:
                    ce:a6:71:8b:a8:9d:05:c8:aa:7a:ed:59:10:ad:39:
                    ee:4e:17:47:24:96:a1:ae:a7:4c:66:fa:5c:ac:89:
                    ec:a2:f6:90:a3:6d:b3:f4:c0:75:57:c2:e1:f4:37:
                    12:82:ae:06:a2:af:ad:7e:da:31:be:35:67:0b:a9:
                    74:71:bb:f3:b4:61:40:9a:a2:76:31:06:71:3f:3f:
                    4e:8d:fd:46:56:e3:e6:58:9c:69:8b:af:cb:87:0d:
                    b1:25:15:56:dd:87:2d:e2:9d:56:a1:42:cd:10:4d:
                    2c:1e:19:22:2d:00:6f:64:fd:a9:0c:ae:53:32:16:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:AC:67:AF:95:BB:AB:21:0D:4C:9D:DD:DE:6F:D7:D4:B4:F3:BE:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F4AC67AF95BBAB210D4C9DDDDE6FD7D4B4F3BE86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.228.0/22
                IPv6:
                  2804:7db4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271577

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:8b:1c:c0:56:7a:d3:f6:f3:ac:63:0c:4f:f4:95:bc:19:
         a0:45:41:ff:4b:9e:9c:29:72:75:13:56:03:4a:a2:9f:35:bb:
         38:f5:8e:07:a2:23:50:4f:9c:01:25:fd:84:27:87:e1:8f:c1:
         87:a7:1b:7e:66:81:c1:4d:24:46:4e:11:17:c9:66:c8:96:2b:
         e8:81:19:d0:b8:da:6a:59:2e:f9:f1:d3:9f:e9:62:09:8f:78:
         75:10:a6:72:8d:36:ca:fe:06:67:c0:a9:b5:0f:8b:ac:67:5a:
         aa:5b:4b:2b:b1:f1:a6:19:73:34:83:6b:04:3d:72:1b:5a:64:
         ae:1b:5b:c1:d5:e2:be:ae:3c:2b:d2:c1:84:07:c2:91:41:8d:
         2a:d3:02:94:6b:95:fa:b3:40:d3:ef:f9:be:c9:3b:44:3a:93:
         1a:92:03:a3:d7:7e:19:f7:44:74:4a:69:0d:cd:b5:4a:de:23:
         de:38:93:45:ee:7f:24:5f:bd:7f:84:a1:8e:12:00:ad:c8:aa:
         d2:12:3b:0e:3c:87:7c:b3:79:48:f3:7b:32:4f:dd:e0:8b:05:
         a6:32:e6:3c:ba:60:8f:6c:29:e5:0b:8a:35:fe:25:c2:f8:f7:
         2a:4a:8f:51:08:38:b3:37:7f:c4:25:3b:0a:fc:92:fa:0f:16:
         f1:97:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 01:55:42 2024 by rpki-client on console-fra.rpki-client.org