Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F890C5F6184833DCFA85CC387B0DE43D6BA21367.cer
File:                     F890C5F6184833DCFA85CC387B0DE43D6BA21367.cer (raw, json)
Hash identifier:          LTPRQK3936mx0G6FRlymZ78rCNfC2HRuoGZ2Bpp88xU=
Subject key identifier:   F8:90:C5:F6:18:48:33:DC:FA:85:CC:38:7B:0D:E4:3D:6B:A2:13:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D15F713D4FBAA560E754EF3FEC38583E494C2F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/F890C5F6184833DCFA85CC387B0DE43D6BA21367.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 May 2024 13:10:32 +0000
Certificate not after:    Tue 27 May 2025 13:15:32 +0000
Subordinate resources:    AS: 265463
                          IP: 168.197.12.0/22
                          IP: 2804:3484::/32

Validation:               Failed, certificate revoked on Sun 11 Aug 2024 03:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:15:f7:13:d4:fb:aa:56:0e:75:4e:f3:fe:c3:85:83:e4:94:c2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 28 13:10:32 2024 GMT
            Not After : May 27 13:15:32 2025 GMT
        Subject: CN=F890C5F6184833DCFA85CC387B0DE43D6BA21367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:49:42:40:b1:7a:df:8b:56:02:15:6d:73:
                    a0:ef:41:18:50:01:3d:c5:f9:96:03:85:a0:91:b2:
                    04:5a:d7:ca:dd:59:40:cc:75:01:dd:e7:f4:c2:40:
                    ab:9a:50:c1:c9:49:6c:de:89:6b:db:ef:c6:3d:35:
                    20:95:65:bf:64:96:92:5b:ef:22:1b:70:21:13:b2:
                    4f:65:1f:07:a3:06:dd:79:d7:4c:4b:1e:60:42:ff:
                    1a:1f:b4:c5:b2:2e:c4:a9:ab:36:6a:c8:69:8c:dc:
                    1d:f6:ea:49:37:1f:b8:ff:08:b1:58:b3:77:00:77:
                    0e:45:15:d9:c3:62:22:12:45:f3:76:48:0b:fa:b6:
                    3b:b6:df:6e:b0:96:c6:75:9f:a8:65:dc:93:12:41:
                    62:37:26:fd:b8:6d:ae:8d:09:ed:63:9e:0f:ad:10:
                    ca:76:83:27:f4:8c:f4:b0:19:6a:06:3a:f9:df:d5:
                    3d:38:08:54:69:4a:96:46:c3:55:61:bb:a3:0a:3c:
                    76:6d:fa:68:32:24:8a:55:39:25:9f:36:fd:b5:a7:
                    c9:c8:28:43:f8:25:51:58:28:23:9f:19:2c:c2:3f:
                    87:b7:88:97:bf:a4:71:f8:4f:17:87:ad:04:11:8a:
                    c9:4c:0d:48:99:40:70:8d:13:ac:fd:5b:4e:7d:fa:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:90:C5:F6:18:48:33:DC:FA:85:CC:38:7B:0D:E4:3D:6B:A2:13:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/2/F890C5F6184833DCFA85CC387B0DE43D6BA21367.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22
                IPv6:
                  2804:3484::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265463

    Signature Algorithm: sha256WithRSAEncryption
         4d:75:c2:42:ff:78:67:f4:c4:ab:bb:42:14:68:22:dd:16:ef:
         ad:3a:53:ef:30:58:00:a1:39:fe:cd:96:6f:eb:1a:a9:fb:72:
         85:f0:a7:50:fc:1f:26:8a:1d:f4:10:f6:cf:61:d8:1a:e8:a3:
         46:96:9b:a0:44:09:a1:26:ac:70:09:2f:d4:1f:98:73:e7:a1:
         dd:20:26:b3:29:2c:30:1e:70:a3:8a:62:24:f2:c0:0f:5f:86:
         52:80:85:ed:f7:54:1e:ce:9e:d1:d4:43:c2:72:f2:ec:44:6e:
         2c:bb:9c:36:81:61:ba:86:c7:94:b9:c6:e2:c9:f9:98:ea:71:
         c1:45:ca:a4:04:f3:20:a3:b3:80:b9:ec:84:1a:69:c6:3e:ae:
         0c:90:ab:34:53:b7:29:bf:9d:a9:68:10:db:44:d0:1e:9b:3a:
         ac:4d:bc:a1:c8:10:ce:06:88:38:3a:18:4e:79:9a:fa:bc:74:
         ef:0e:98:13:48:5b:0d:be:14:c6:38:16:0d:82:b5:b6:c5:72:
         23:d9:08:66:d9:67:a1:89:f6:a0:55:3a:3b:6b:82:4e:69:2e:
         7a:f0:84:3d:07:12:1d:11:7c:ae:e6:42:52:7c:38:b4:1f:77:
         66:ea:6d:f4:0c:44:b4:31:c8:de:96:68:1e:65:16:33:46:1b:
         e7:c5:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 06:02:51 2024 by rpki-client on console-ams.rpki-client.org