Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
File:                     FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer (raw, json)
Hash identifier:          YwKu6mWc2u7qPEg/ANZzDdRcBy+PsN/8IdkY01f/U7o=
Subject key identifier:   FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B8D3B0DB8C32E85EC18EFAE7E12DE8391347A26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:33:50 +0000
Certificate not after:    Thu 03 Apr 2025 04:38:50 +0000
Subordinate resources:    AS: 263950
                          IP: 138.255.0.0/22
                          IP: 2804:2840::/32

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 19:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8d:3b:0d:b8:c3:2e:85:ec:18:ef:ae:7e:12:de:83:91:34:7a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:33:50 2024 GMT
            Not After : Apr  3 04:38:50 2025 GMT
        Subject: CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:1c:98:e8:84:88:2e:26:29:ae:f6:bd:a3:
                    a4:4a:26:d7:26:dd:ed:cd:ce:07:d4:d0:ec:c6:bf:
                    3f:d8:a7:84:43:19:a3:cf:d2:5a:3d:e4:e8:cb:8c:
                    34:62:ef:a9:ec:5f:d5:ea:23:6b:6a:c1:37:34:3e:
                    eb:7a:51:57:9e:eb:7a:3a:e9:3f:ed:5b:b7:fa:1d:
                    4b:3e:eb:61:d1:00:21:90:f2:d9:84:32:f4:70:2a:
                    01:6a:08:42:ff:bc:8c:18:26:6c:3c:8b:43:3f:d6:
                    c0:d5:08:ca:c4:b1:67:df:e0:6d:24:7f:a2:ac:5a:
                    41:5e:4f:41:e8:55:6f:28:fd:5d:69:38:a0:48:86:
                    7e:82:31:ca:f4:05:8a:8a:5f:9c:d4:f3:2a:0e:ee:
                    4e:3c:4a:2c:53:72:bc:15:87:03:87:4d:f8:bb:62:
                    0f:10:95:a1:8d:1b:a3:c6:79:89:e8:f6:3a:4e:f8:
                    27:ae:21:88:ff:4e:1b:99:9c:22:1f:58:50:c3:32:
                    56:d4:31:e5:7d:2b:f7:d6:07:a9:05:47:57:7e:1e:
                    d5:b4:22:b3:79:e6:c8:34:41:21:2a:41:79:2a:f1:
                    c6:6c:97:81:e2:89:bf:d6:23:71:fb:47:c7:a3:36:
                    3c:1f:15:ce:6c:f4:4e:00:de:fd:7e:25:8c:4a:05:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/22
                IPv6:
                  2804:2840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263950

    Signature Algorithm: sha256WithRSAEncryption
         1a:e0:f2:c0:21:dd:b6:01:16:1c:6c:ed:ce:0e:0d:29:fb:ba:
         21:c6:64:36:35:43:1e:80:c0:a0:e6:ca:d2:0a:b8:f7:47:ed:
         79:c2:6f:e4:9a:74:e7:d8:ac:4d:30:fb:07:47:23:0e:b7:27:
         80:ba:89:c1:a4:d5:6e:53:a4:4e:2b:7c:8d:5a:09:33:a9:6d:
         a9:4a:60:ab:31:eb:63:81:d4:5f:84:90:08:1c:fe:f4:fb:8e:
         74:0f:b0:f7:5c:6a:89:96:c2:ed:3e:18:00:77:8c:da:5e:01:
         a0:67:66:63:06:f7:ca:f6:c3:ee:a0:df:0f:69:c1:6e:ef:3c:
         5b:51:03:36:e6:aa:b3:a0:1e:0f:88:fb:56:90:40:ff:f4:6e:
         22:b9:52:a6:b7:20:b0:a2:d8:dc:a0:b5:45:04:b0:72:ce:2c:
         5a:a3:45:51:87:66:6a:7f:b4:08:36:c6:48:d0:46:0f:9e:a5:
         fe:f7:d5:07:0f:3f:b3:5a:a0:bf:80:6a:7a:d6:1c:df:97:5a:
         0b:a5:58:2b:34:fe:e0:82:94:f6:59:97:ea:13:78:a5:5d:e9:
         75:a8:1b:f2:73:49:cd:88:45:cb:9f:31:d9:7d:ea:51:8b:bd:
         e9:e1:2d:62:f4:a6:ae:1d:5b:58:39:2b:99:f0:5b:80:90:6b:
         45:19:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 21:37:27 2024 by rpki-client on console-fra.rpki-client.org