Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.cer
File:                     F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.cer (raw, json)
Hash identifier:          m53GqaPCcYUOtcHa36FCsyl9xE/goSrh9eYlROccyfc=
Subject key identifier:   F7:BE:09:AF:81:65:E9:D2:20:AB:17:8A:FD:5E:7F:0E:75:32:F7:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C4825EDB3208FEDA9B96647C7439240FF800B29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:19:57 +0000
Certificate not after:    Thu 03 Apr 2025 03:24:57 +0000
Subordinate resources:    AS: 271388
                          IP: 200.36.132.0/22
                          IP: 2804:7ab8::/32

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 19:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:48:25:ed:b3:20:8f:ed:a9:b9:66:47:c7:43:92:40:ff:80:0b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:19:57 2024 GMT
            Not After : Apr  3 03:24:57 2025 GMT
        Subject: CN=F7BE09AF8165E9D220AB178AFD5E7F0E7532F727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:d8:0e:7d:34:68:04:fe:a7:ba:d9:9e:dc:
                    b5:ba:7b:ea:e2:f3:31:18:71:95:39:be:1c:54:9e:
                    ac:6d:2b:00:8c:ba:63:28:ab:ec:b1:cf:74:eb:13:
                    b1:7d:05:c2:ec:0d:7c:be:4f:43:fe:e6:23:48:f3:
                    12:99:53:58:3a:d3:4e:d8:46:cc:b4:b7:ce:e9:61:
                    cf:5d:2a:33:d0:44:ac:7a:14:c6:d3:4b:87:0c:c9:
                    58:44:41:80:94:76:8c:dc:96:03:87:1a:77:bb:b0:
                    00:a6:c0:20:63:fd:75:18:63:03:83:ce:b6:cb:26:
                    7b:51:f5:5e:72:ae:f1:14:42:6f:41:0d:4d:a5:5d:
                    6a:67:84:3c:08:cb:72:88:33:2b:7b:4c:d6:4a:b0:
                    39:72:e3:66:20:45:ce:69:0c:5c:f8:96:5b:76:6e:
                    b7:a6:75:c3:d4:49:48:4f:b1:a4:5e:94:b6:9b:de:
                    a3:1a:c5:e2:02:64:28:a3:e9:6e:f6:0a:ce:6c:ad:
                    f8:10:39:c8:41:d7:45:63:15:6e:33:51:a6:3b:6d:
                    cd:38:77:66:df:09:41:a0:df:6d:60:1b:91:ce:58:
                    db:25:ea:dd:6f:bc:93:8d:2b:a3:a6:d6:3d:55:86:
                    db:d3:bf:7a:17:ee:98:86:e2:ec:b1:c3:17:6b:82:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:BE:09:AF:81:65:E9:D2:20:AB:17:8A:FD:5E:7F:0E:75:32:F7:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.132.0/22
                IPv6:
                  2804:7ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271388

    Signature Algorithm: sha256WithRSAEncryption
         d6:c6:2a:65:1d:a8:db:49:66:f6:04:b8:68:53:b4:86:91:56:
         a9:46:2c:b1:22:10:95:0e:0c:73:0a:4f:05:b5:99:ca:92:6c:
         92:1f:8e:be:b4:97:5f:47:07:81:5f:3a:cb:3c:01:5c:9c:f4:
         9a:4d:16:be:94:89:87:c5:f3:dd:c9:2a:26:fd:a1:d8:bd:10:
         76:20:25:dd:7c:20:b5:c8:af:13:cb:4e:44:09:0e:b5:d1:59:
         60:b1:6f:6f:53:fd:9b:76:8b:17:44:3e:8d:10:0b:05:49:39:
         5e:02:dc:c8:35:56:26:db:48:b9:e6:c2:c0:ab:f1:c8:d5:78:
         ea:86:dd:15:66:c9:1e:67:4c:02:f7:84:b5:ec:cc:42:3e:9a:
         7e:85:0f:c4:3a:41:d7:b0:88:46:7c:14:12:d1:b6:10:01:df:
         72:6b:c2:36:48:b5:db:37:8a:7b:80:bf:63:e3:c1:fa:ee:20:
         e1:c8:3b:31:c1:b2:dd:a2:7d:34:24:90:ac:cc:e1:b5:30:9e:
         a3:ca:5b:c4:30:eb:55:1e:58:2a:fb:fc:76:66:f3:d4:32:96:
         d7:bd:b7:cd:fa:b5:f4:f1:23:c7:7a:b0:08:5b:7e:b6:72:a9:
         a0:62:6b:51:9f:db:b3:b8:b6:3d:65:79:02:c0:43:ed:4b:64:
         e0:3b:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 21:59:59 2024 by rpki-client on console-fra.rpki-client.org