Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.cer
File:                     F57F099FD271EDBB9C48568CA6AE35DA053DB80B.cer (raw, json)
Hash identifier:          Hp+vF9S2uP3ng/HTDZNT5Y92wob6ovyPciNVllz4/dk=
Subject key identifier:   F5:7F:09:9F:D2:71:ED:BB:9C:48:56:8C:A6:AE:35:DA:05:3D:B8:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3478B425FD0426D478C519914832C2DB4ABE1D33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:53 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:53 +0000
Subordinate resources:    AS: 267233
                          IP: 45.231.60.0/22
                          IP: 2804:4a54::/32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 13:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:78:b4:25:fd:04:26:d4:78:c5:19:91:48:32:c2:db:4a:be:1d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject: CN=F57F099FD271EDBB9C48568CA6AE35DA053DB80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:f1:9b:1b:ad:bd:81:65:e4:7d:a7:9e:6e:
                    50:55:00:95:b5:ee:cf:52:05:aa:ef:b6:4b:fc:28:
                    5e:07:2a:2d:6d:97:6d:27:6f:9a:62:ca:fd:de:b4:
                    e6:9e:7b:41:33:37:88:df:2d:9e:e4:97:26:19:df:
                    93:0b:2c:4b:24:6f:d8:12:d1:bf:4c:95:4f:ff:51:
                    d3:19:54:17:4d:a7:c8:94:1f:26:0f:ba:6c:64:10:
                    3e:d1:1d:ba:19:74:81:41:63:07:e4:86:cd:57:1a:
                    7e:a2:95:57:c0:4f:28:8c:c7:8a:f7:0d:e4:a3:dc:
                    33:7e:fb:64:76:e0:66:0f:33:55:d8:a2:84:7c:3d:
                    eb:eb:4f:68:00:e8:8e:27:9c:3f:fa:43:c1:46:6b:
                    54:d1:75:3f:62:7a:2c:18:b2:c6:e3:e3:39:4a:bf:
                    0b:5a:1c:12:40:19:de:cd:16:b7:a0:30:39:2d:3d:
                    d2:a5:94:84:74:ca:80:eb:e8:2d:95:b4:7f:33:15:
                    c6:bc:02:27:4a:87:a5:cb:4d:30:dd:cf:30:70:e4:
                    c7:d2:d9:52:a8:96:62:88:2a:d9:ed:c6:04:db:ce:
                    14:cf:0d:26:f4:53:ea:2f:6d:d4:85:84:89:c6:e5:
                    0f:61:17:5a:93:ed:b7:94:79:74:96:6d:df:c6:ff:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:7F:09:9F:D2:71:ED:BB:9C:48:56:8C:A6:AE:35:DA:05:3D:B8:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/1/F57F099FD271EDBB9C48568CA6AE35DA053DB80B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.60.0/22
                IPv6:
                  2804:4a54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267233

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:87:33:24:29:1e:d1:06:d1:28:d4:5e:5d:8d:71:d7:a5:
         82:d1:72:6a:3d:f2:6a:52:c8:8e:30:23:32:21:32:41:76:9b:
         60:67:e0:29:32:d3:48:e2:49:43:4f:58:e1:3e:17:02:3d:75:
         e9:1b:15:64:8a:86:f0:e7:2a:d7:76:fe:96:df:ae:f8:51:41:
         54:84:2c:38:bd:43:48:e1:32:02:f4:73:32:f1:08:f3:93:66:
         3c:a3:ae:47:8c:b1:01:ad:8d:65:9e:05:9b:32:ab:0f:bd:f0:
         bd:5b:30:b5:42:69:1f:6a:ed:f4:0d:ed:62:07:3d:c9:5a:11:
         3c:51:4e:4c:2c:f5:15:2f:c7:57:4d:c0:63:0e:b2:b2:7c:b1:
         4a:9f:cd:69:e3:1d:7d:90:fe:14:43:a3:2f:37:04:d4:46:97:
         8f:e0:ac:cd:a8:c7:44:e4:f2:02:ad:5a:33:08:d8:a6:3e:2f:
         1b:a4:c9:9b:02:2f:8f:fe:3e:ea:1e:54:e6:0a:bb:44:0d:fe:
         20:08:6f:79:5e:e2:72:d0:ed:24:9c:f0:57:af:0f:1f:94:2f:
         fc:b0:38:74:e9:94:a0:e9:36:c0:71:45:7d:83:e8:68:4a:a4:
         50:0b:86:94:e0:3b:3d:ff:82:31:e5:5c:fb:96:fd:fe:b2:14:
         40:21:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 18:22:43 2024 by rpki-client on console-ams.rpki-client.org