Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
File:                     FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer (raw, json)
Hash identifier:          hW3sxjCZEv6wH+UOWfx289Q1vUvHZv0jKHtn+jD7of0=
Subject key identifier:   FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       150377F2965D57E7E170D2015F9542AD3A6B6120
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:30:44 +0000
Certificate not after:    Thu 03 Apr 2025 12:35:44 +0000
Subordinate resources:    AS: 262485
                          IP: 138.118.88.0/22
                          IP: 170.238.172.0/22
                          IP: 177.66.0.0/22
                          IP: 191.7.16.0/22
                          IP: 2804:500::/32

Validation:               Failed, certificate revoked on Fri 24 May 2024 17:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:03:77:f2:96:5d:57:e7:e1:70:d2:01:5f:95:42:ad:3a:6b:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:30:44 2024 GMT
            Not After : Apr  3 12:35:44 2025 GMT
        Subject: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:34:77:95:34:4a:2e:2f:83:23:f7:46:16:
                    7d:3d:57:fc:5b:14:0f:7c:16:2b:f2:64:1f:41:6a:
                    7e:ad:93:99:01:bb:e8:a0:8a:0b:86:2b:18:41:e0:
                    7a:03:77:d0:ab:98:f1:f7:5b:eb:93:bc:76:aa:d1:
                    eb:ac:b4:3a:64:a5:62:1b:24:bd:c8:0d:9a:ff:89:
                    b2:b0:cc:1a:74:4b:57:51:e1:27:9e:bc:f1:c1:3a:
                    c3:75:1d:46:dd:06:8f:55:dd:86:03:b8:20:e5:3e:
                    68:28:69:7a:d3:36:16:b9:cd:cd:96:70:c4:51:33:
                    8e:16:e5:5e:a6:d4:26:f0:87:30:6b:78:7b:7c:cb:
                    51:88:15:40:b9:51:7c:3d:34:33:c5:f4:e7:31:d2:
                    b6:ba:79:8d:fc:c7:4c:6b:eb:25:e2:42:09:fa:ea:
                    e3:10:73:47:5a:89:ca:86:5b:09:aa:7a:77:4d:f2:
                    61:d8:9c:88:a4:bd:0b:45:a5:db:5a:96:ed:c3:d1:
                    7c:c8:a4:9e:a8:0a:bc:3b:5e:94:f6:c3:08:d1:15:
                    c4:f4:9a:f2:93:98:d9:1e:7b:5e:83:2d:0e:da:7e:
                    a8:a5:6f:e4:5d:9a:98:af:14:81:90:4d:2d:99:8f:
                    6d:c7:e6:97:6a:2a:03:a6:3e:70:4a:67:57:89:62:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.88.0/22
                  170.238.172.0/22
                  177.66.0.0/22
                  191.7.16.0/22
                IPv6:
                  2804:500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262485

    Signature Algorithm: sha256WithRSAEncryption
         75:09:89:77:2c:7a:20:a8:ed:14:8d:15:2e:8f:7c:ae:fc:a9:
         41:b4:18:4e:6d:13:c4:65:cd:cb:6f:f9:a0:75:52:4e:7f:11:
         0e:e8:73:32:0d:5b:b5:03:cb:1f:95:d8:06:3e:b4:23:78:61:
         81:9d:e5:ff:3c:56:b7:17:54:60:e3:3d:20:39:1a:bc:b5:86:
         f4:7c:f9:15:cc:51:a0:57:8b:77:59:8a:fe:95:a2:40:33:6f:
         ae:8f:91:19:b6:94:bb:2a:2b:9c:09:94:43:d5:b5:5d:31:96:
         d0:91:81:9b:d6:ce:48:1d:d9:f7:e2:c9:dd:43:3f:49:9f:b4:
         2c:12:d2:dd:7d:05:5a:65:65:73:3d:7e:07:bd:40:0e:c0:8e:
         f9:8d:30:fa:c2:e4:d6:67:a5:2b:1f:7a:98:0b:37:6a:3c:90:
         d2:7c:e1:02:8f:9a:36:f4:18:6e:65:16:0b:88:bb:d5:44:4a:
         68:db:c1:cf:10:7f:77:e3:09:b5:3c:bd:a3:b7:21:d1:03:aa:
         dd:61:56:a0:2b:31:08:3c:9b:42:36:cc:0a:83:b9:18:f8:9e:
         81:19:36:d6:48:ad:c0:9d:56:d2:ab:84:92:35:6b:06:47:fb:
         83:60:03:f8:fe:18:c3:70:a7:70:95:e9:49:88:97:46:aa:15:
         99:68:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org