Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.cer
File:                     FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.cer (raw, json)
Hash identifier:          F1PGxCZ70r1MWBD2ArI11X27U1sM6tQNvKGKkqCjbr8=
Subject key identifier:   FB:C6:2A:8A:E7:DA:6C:CE:75:A9:14:AB:58:C1:F6:98:47:F5:7E:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       286162387D7E238282D1F4F3EF195C38B4FC2251
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:52:23 +0000
Certificate not after:    Thu 03 Apr 2025 10:57:23 +0000
Subordinate resources:    AS: 266413
                          IP: 170.81.100.0/22
                          IP: 2804:376c::/32

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 14:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:61:62:38:7d:7e:23:82:82:d1:f4:f3:ef:19:5c:38:b4:fc:22:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:52:23 2024 GMT
            Not After : Apr  3 10:57:23 2025 GMT
        Subject: CN=FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:11:8a:1e:71:42:fe:ff:92:b6:4f:dc:61:
                    06:2b:e5:f3:86:3e:4f:77:98:27:69:c3:f9:e7:64:
                    e5:5b:eb:80:a4:ba:26:8e:fe:e0:15:37:c1:1b:0b:
                    4e:2e:c7:4e:b2:99:28:88:c1:83:cb:56:d0:c0:7f:
                    7c:a4:10:53:1a:87:1c:9c:c4:ed:f5:83:98:a6:5c:
                    d0:d0:82:26:5a:e7:60:25:64:4a:0a:a6:89:e6:6c:
                    f0:01:ba:e8:03:0f:3b:a4:f3:be:68:47:95:82:95:
                    5b:1d:13:f2:8f:a3:68:17:48:d8:1a:f8:cb:51:ca:
                    e9:fb:3e:43:75:ca:ee:29:1e:8c:1a:b9:10:25:9a:
                    14:7f:53:2b:3c:09:ba:24:08:68:25:78:1b:4d:e3:
                    cc:6e:38:c3:cd:0d:bf:46:0d:e0:2b:56:86:73:01:
                    c4:51:05:0f:69:c3:15:02:f9:ca:5b:8a:85:c4:fd:
                    c3:75:b2:23:45:f3:98:04:21:2a:06:08:3d:fc:cb:
                    74:2d:1b:67:1e:1a:47:29:56:d6:2f:14:d5:41:37:
                    c6:68:2b:93:dd:e8:09:2d:80:b5:de:88:cb:19:1b:
                    b1:59:97:e3:ca:40:29:fb:30:f0:de:6a:f3:98:19:
                    8a:2c:e0:fd:b1:e8:0f:e7:89:d2:ba:e6:fe:61:6d:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:C6:2A:8A:E7:DA:6C:CE:75:A9:14:AB:58:C1:F6:98:47:F5:7E:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22
                IPv6:
                  2804:376c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266413

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:3f:e5:2c:b1:2d:84:87:ef:85:77:7f:67:37:e3:14:b0:
         de:3d:66:45:b8:e8:51:1d:de:33:39:17:dc:84:99:6f:81:5e:
         4f:5e:6c:bf:86:ff:76:2e:f1:ee:c3:4e:00:19:82:c5:4a:9a:
         48:99:2f:6a:5d:34:70:c3:0e:38:6a:1a:a2:bc:1a:2a:6b:86:
         94:0d:f1:89:49:37:dd:1b:a5:a2:30:8a:10:d4:0c:22:62:e5:
         3a:bc:bb:a3:47:c9:d0:3f:4c:16:14:6d:21:b2:b5:cd:70:54:
         93:ad:ce:fe:f1:1b:42:d5:fd:13:40:01:c5:95:2b:82:1b:3a:
         8f:fb:d7:8e:78:26:9e:f7:c3:6b:65:73:df:31:32:33:02:cf:
         6f:a0:44:fd:e3:16:6e:0c:e3:93:aa:89:25:3f:48:c4:36:61:
         9c:42:ed:b9:4e:52:11:9a:8d:fc:01:74:83:67:05:90:f6:d3:
         05:ef:d6:60:c1:87:a0:09:e3:52:e9:99:d9:a3:ab:cd:a4:d3:
         2a:2d:d9:f7:02:7d:23:11:64:6f:81:5b:f0:7f:2f:71:08:58:
         56:68:9a:4d:b5:2b:7e:2f:fe:24:cb:8c:ca:2b:2f:59:96:a0:
         67:2d:6b:57:bb:51:c4:30:88:69:a9:e9:22:cb:0d:1d:eb:31:
         b6:da:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org