Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA191D4E9C5A6F9D433E715C07DC178BB1A1416A.cer
File:                     FA191D4E9C5A6F9D433E715C07DC178BB1A1416A.cer (raw, json)
Hash identifier:          ASvDk9akgyKnBxLim824Nckbp0pwuXbVr6ya78S9EI8=
Subject key identifier:   FA:19:1D:4E:9C:5A:6F:9D:43:3E:71:5C:07:DC:17:8B:B1:A1:41:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2127585087872F6C493F13EF59C08C6B5A29BD0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/FA191D4E9C5A6F9D433E715C07DC178BB1A1416A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Aug 2024 00:51:46 +0000
Certificate not after:    Wed 20 Aug 2025 00:56:46 +0000
Subordinate resources:    AS: 262911
                          IP: 177.38.48.0/21
                          IP: 2804:438c::/32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 19:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:27:58:50:87:87:2f:6c:49:3f:13:ef:59:c0:8c:6b:5a:29:bd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 21 00:51:46 2024 GMT
            Not After : Aug 20 00:56:46 2025 GMT
        Subject: CN=FA191D4E9C5A6F9D433E715C07DC178BB1A1416A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:53:2c:97:77:8f:2a:d8:1c:a4:d5:d9:98:
                    e3:50:a7:47:7f:c9:0d:02:c5:71:48:8f:bb:34:39:
                    ea:0d:1c:a1:d0:0e:79:da:ef:33:3b:37:3a:de:3e:
                    34:42:1b:3c:13:f2:7f:60:dd:8f:12:71:85:ae:a3:
                    d6:21:24:d6:de:fb:6d:84:a5:35:37:66:2b:62:0b:
                    3f:43:18:9c:bb:be:d6:88:f9:ef:06:f4:ae:49:9b:
                    4c:e7:91:88:1b:d0:22:4e:fc:49:ba:8d:ff:59:0c:
                    04:a3:13:8c:85:a6:bf:48:8a:27:1d:11:f0:dd:01:
                    42:68:bd:d7:12:7f:fe:e0:16:7b:a9:44:7e:a7:11:
                    cf:d0:d6:6f:15:a5:f9:41:c9:d7:72:2f:b0:a0:c6:
                    16:7a:db:b1:52:7e:ab:60:79:70:cb:38:1a:5d:02:
                    e2:80:f8:eb:5a:38:8c:2c:8a:03:7f:c2:36:e3:93:
                    4c:78:2f:7f:41:c8:68:4b:d1:a0:9f:e4:46:50:ae:
                    11:4a:c7:ea:a7:74:cb:6c:d2:6f:2f:c2:01:f2:f8:
                    f3:64:6e:e9:d7:80:e0:e2:ac:16:13:3e:1c:0a:5d:
                    95:97:d3:40:7f:96:72:56:73:13:b1:0e:b5:7c:ae:
                    06:a2:7e:9a:8d:9b:d1:2f:24:57:7d:11:89:c3:f7:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:19:1D:4E:9C:5A:6F:9D:43:3E:71:5C:07:DC:17:8B:B1:A1:41:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/FA191D4E9C5A6F9D433E715C07DC178BB1A1416A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.48.0/21
                IPv6:
                  2804:438c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262911

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:d2:16:20:b2:b1:da:9e:e8:a3:a2:0c:f8:3c:b4:45:95:
         52:53:bc:46:dc:9a:e1:ba:a0:69:e8:9a:b8:3c:e7:38:c8:8d:
         eb:72:4e:d8:d2:6f:11:6c:8c:97:e1:f2:75:db:fe:92:19:77:
         bd:bb:c9:61:08:90:1f:a7:52:77:f4:7a:75:52:24:4b:0f:41:
         a7:4f:fe:70:50:67:45:c5:ae:b2:a8:5c:6e:d3:13:54:f8:10:
         b4:89:d6:d7:8a:d3:f5:ae:50:c8:29:0e:cc:6d:37:fc:e0:6b:
         f1:22:2a:da:ff:1b:f5:8a:9a:c2:a7:44:12:c5:84:03:c2:7c:
         15:0a:7d:a8:29:1d:1a:09:ca:e0:34:06:03:59:4e:61:b6:28:
         fc:4e:c6:56:c2:7d:e4:88:b8:dd:36:5f:f6:e4:4d:ba:0c:24:
         a5:d3:bb:5c:22:19:cb:fc:47:8b:0f:ab:c9:53:de:14:67:7e:
         60:ed:47:33:db:35:2d:75:49:88:96:1a:d9:a0:f1:76:5f:6e:
         8a:6e:66:67:b4:63:37:77:b8:d9:5c:9e:4c:04:35:d8:27:4b:
         74:56:61:34:bc:90:b1:65:6d:4e:0e:a9:11:c4:2f:cd:1a:e3:
         a1:4f:ff:d5:bf:fe:bf:c4:76:35:79:57:3a:31:62:33:aa:39:
         60:9f:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:09 2024 by rpki-client on console-fra.rpki-client.org