Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.cer
File:                     FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.cer (raw, json)
Hash identifier:          /06atKaAIzWwZ7XDup5YqNK0+B4MZjJ2Km8P0sETcpM=
Subject key identifier:   FC:4D:39:33:6E:F3:8A:FA:9E:9A:EE:F9:92:F0:BC:D9:F1:5D:94:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BFA2DC9E9EC606C133145661D1E926196DB7229
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 May 2024 20:15:47 +0000
Certificate not after:    Fri 02 May 2025 20:20:47 +0000
Subordinate resources:    AS: 28287
                          AS: 262272
                          IP: 45.70.232.0/22
                          IP: 138.36.180.0/22
                          IP: 138.118.120.0/22
                          IP: 167.249.176.0/22
                          IP: 168.194.60.0/22
                          IP: 177.21.128.0/20
                          IP: 177.130.96.0/20
                          IP: 177.154.32.0/20
                          IP: 179.127.64.0/21
                          IP: 187.1.16.0/20
                          IP: 187.120.128.0/19
                          IP: 189.124.80.0/20
                          IP: 201.49.192.0/20
                          IP: 2804:1080::/32
                          IP: 2804:21f8::/32

Validation:               Failed, certificate revoked on Mon 20 May 2024 12:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fa:2d:c9:e9:ec:60:6c:13:31:45:66:1d:1e:92:61:96:db:72:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  3 20:15:47 2024 GMT
            Not After : May  2 20:20:47 2025 GMT
        Subject: CN=FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:ee:c0:e2:58:6e:e2:8a:ea:fb:64:d3:26:
                    19:30:43:f9:7f:ec:a8:59:66:fb:1f:a0:59:24:09:
                    55:fd:b8:87:99:a7:f7:6a:3b:72:b7:43:9e:cd:d1:
                    27:38:3c:6f:4b:31:c8:29:be:b6:f7:32:73:da:54:
                    15:a2:b9:66:56:93:22:b3:13:bd:33:a3:a5:d9:c7:
                    ee:2c:57:6d:d4:df:0c:9b:e9:fd:fd:d1:13:6d:3d:
                    28:e6:e4:a4:a7:9b:7f:dc:05:ad:02:89:3d:cc:60:
                    b8:ec:c7:50:91:98:a2:3f:49:e0:9d:be:ce:3d:dc:
                    56:7b:f7:66:8e:c0:69:0e:0e:e3:4e:7f:86:31:9e:
                    33:43:39:44:b0:56:51:2a:89:8d:aa:15:7b:46:68:
                    80:eb:cb:b4:e4:37:8c:fe:69:74:95:33:48:d9:d8:
                    bf:f2:8b:2e:10:62:30:da:4c:44:8f:b2:f4:e6:b0:
                    6e:b1:e9:32:f3:b4:a2:28:25:5c:5c:9b:89:95:f5:
                    58:ad:30:ea:b3:5f:69:91:de:e7:af:6e:79:5e:bd:
                    42:6b:aa:26:9e:3d:d9:d1:ab:75:7e:dd:b5:e2:5c:
                    9b:47:d9:b6:81:b3:e9:7d:c2:b9:a3:3c:8f:3e:fb:
                    16:27:4c:9f:e2:c4:78:dd:f2:a2:14:4e:f2:2c:69:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:4D:39:33:6E:F3:8A:FA:9E:9A:EE:F9:92:F0:BC:D9:F1:5D:94:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.232.0/22
                  138.36.180.0/22
                  138.118.120.0/22
                  167.249.176.0/22
                  168.194.60.0/22
                  177.21.128.0/20
                  177.130.96.0/20
                  177.154.32.0/20
                  179.127.64.0/21
                  187.1.16.0/20
                  187.120.128.0/19
                  189.124.80.0/20
                  201.49.192.0/20
                IPv6:
                  2804:1080::/32
                  2804:21f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28287
                  262272

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:8c:5f:59:69:f3:15:74:29:11:b1:da:ff:ca:13:33:ac:
         b5:d1:ad:b2:5c:df:2b:f5:d9:31:f2:fe:79:21:cf:d7:77:3f:
         74:19:5a:eb:a1:a4:5e:91:27:b9:8a:12:e2:90:38:a5:84:27:
         fa:6f:d5:f6:32:63:7d:a6:d5:1f:c8:43:12:f7:fe:ac:a7:a0:
         c4:ee:7d:7e:48:f8:91:61:4c:0e:f0:21:51:9a:a5:67:66:11:
         ce:ea:d1:b2:c5:97:df:ca:e6:0a:93:5c:70:35:7a:a3:a4:d4:
         a9:c3:98:7d:04:67:55:a5:39:ae:49:d0:09:53:f5:aa:f4:24:
         86:57:ef:eb:83:f0:ce:3c:8d:05:62:3f:cd:8c:a4:4b:06:08:
         4b:50:08:b1:ea:64:a0:bc:d7:14:1e:32:6e:a8:a7:ba:29:90:
         b3:53:fa:c3:67:48:4c:d6:25:6c:7b:22:e3:26:22:a6:c6:b2:
         70:1d:1f:25:b3:b6:45:af:af:33:49:8e:06:20:50:e9:23:d7:
         01:91:d9:32:b3:6e:ed:84:f0:e2:fe:1b:62:c1:ac:bb:d9:33:
         36:3e:05:b7:2a:6c:8b:ef:55:52:a5:87:ef:a7:87:07:ed:f2:
         04:62:bc:9c:37:1a:f2:22:58:49:d5:47:09:b8:23:7b:09:a5:
         ff:84:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:51 2024 by rpki-client on console-fra.rpki-client.org