Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer
File:                     FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer (raw, json)
Hash identifier:          /g0qqrsYcDwNSVi39AYcXUgsVBNapGdMgRZeHYU1sKI=
Subject key identifier:   FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09EDF2C5DD589222F21E048841A416FD3348ECB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 May 2024 00:20:22 +0000
Certificate not after:    Wed 07 May 2025 00:25:22 +0000
Subordinate resources:    AS: 61774
                          IP: 200.225.136.0/22
                          IP: 2804:1924::/32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 19:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ed:f2:c5:dd:58:92:22:f2:1e:04:88:41:a4:16:fd:33:48:ec:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  8 00:20:22 2024 GMT
            Not After : May  7 00:25:22 2025 GMT
        Subject: CN=FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:4e:fd:51:77:ed:78:f3:4a:36:82:a2:54:
                    16:99:87:bd:bd:56:a0:fc:21:31:d2:17:31:17:e0:
                    83:7e:6f:d1:6a:d3:bd:19:37:90:58:18:a2:b4:37:
                    c1:a3:ae:a8:f9:34:76:72:6b:74:8f:c0:e8:a5:49:
                    ac:87:d0:bb:15:38:f5:8f:00:76:45:11:b4:0e:ea:
                    ac:dd:da:d6:bd:1a:88:4b:40:79:bc:c8:a4:a3:48:
                    84:61:23:2f:b8:2b:e6:87:28:68:87:8a:67:18:9f:
                    37:b3:e1:db:f6:a9:28:f8:58:19:36:e1:45:e8:3b:
                    83:ea:4e:ce:86:84:a7:14:25:11:7b:55:51:76:10:
                    39:b4:3b:92:ba:6b:1c:ca:f9:c6:07:54:2a:93:6b:
                    75:60:06:75:95:aa:ee:bf:63:8f:1d:76:01:fb:99:
                    0d:9c:75:40:cd:2d:a5:ce:46:6c:e1:c5:be:bd:57:
                    49:5f:31:52:bf:b6:77:90:a2:39:6f:13:fb:03:11:
                    20:41:7e:df:51:6d:1b:9a:71:29:59:5e:37:35:dc:
                    07:b9:23:44:4d:ba:04:d7:a8:9f:66:15:9f:9d:f8:
                    bf:54:d3:2c:eb:06:df:30:36:36:9c:d6:db:0f:76:
                    01:e3:01:e7:38:36:3e:b0:83:4c:d6:f0:e9:8c:c4:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/22
                IPv6:
                  2804:1924::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61774

    Signature Algorithm: sha256WithRSAEncryption
         d9:90:31:29:4a:c9:83:90:a8:1a:45:56:e1:07:89:66:b7:a9:
         a4:b4:67:6d:c5:8f:ff:aa:e0:4d:99:2c:ea:bc:82:cd:40:92:
         fe:2a:e1:f6:32:db:15:d6:22:77:f2:a0:cd:b4:4f:e5:47:0b:
         07:f4:ac:c5:f9:0a:bb:de:c2:04:8f:96:3f:04:1e:a0:46:9f:
         95:34:6f:6b:bf:c7:07:86:d0:42:57:e3:7d:37:c1:0b:8d:49:
         ad:be:66:de:bb:07:00:88:86:69:37:8c:50:71:61:e7:73:2e:
         32:56:a9:c7:03:83:69:9a:30:2c:b2:9e:9e:ac:eb:d9:3b:f0:
         29:51:97:0d:72:ea:59:39:f4:b6:97:0b:c3:40:0d:ff:c7:4c:
         f8:00:23:18:ab:c8:49:4c:da:15:c7:24:af:66:eb:60:8b:dd:
         7c:e7:45:3c:53:a9:1d:08:eb:57:a5:d0:23:0e:37:47:e0:b5:
         39:3c:3f:72:1b:3e:db:fa:6d:16:8b:e1:40:04:da:f4:5c:77:
         d0:bb:0e:5f:ab:d9:46:ce:25:bf:50:e2:f7:ce:e4:85:24:12:
         70:86:ed:8d:84:ad:79:41:00:57:77:51:f4:dc:70:71:25:64:
         e8:73:07:4d:83:ae:83:45:6c:cb:ab:6a:c8:ec:30:27:5e:77:
         0c:28:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 23:17:49 2024 by rpki-client on console-ams.rpki-client.org