Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.cer
File:                     FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.cer (raw, json)
Hash identifier:          AnfA2EIkbodZ9l88BlefcSH9XOTXOYuCd2Uc8FgAqJA=
Subject key identifier:   FC:75:7B:E4:33:9B:CF:80:34:4E:B1:FC:45:CB:5E:0C:4D:D3:00:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       017B86F6A59DD8244A15D2258E8C39346E71FB9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:18:35 +0000
Certificate not after:    Thu 03 Apr 2025 09:23:35 +0000
Subordinate resources:    AS: 262988
                          IP: 168.90.80.0/22
                          IP: 179.125.64.0/19
                          IP: 186.251.8.0/22
                          IP: 2804:1058::/32

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 03:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:86:f6:a5:9d:d8:24:4a:15:d2:25:8e:8c:39:34:6e:71:fb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:18:35 2024 GMT
            Not After : Apr  3 09:23:35 2025 GMT
        Subject: CN=FC757BE4339BCF80344EB1FC45CB5E0C4DD30034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:15:40:e1:0b:6f:be:35:59:75:aa:13:8e:
                    18:c3:97:80:68:80:4c:7a:5c:8b:02:c4:86:39:bd:
                    b4:6b:69:cf:2c:f2:77:15:c3:f4:b4:ee:50:bc:f5:
                    20:96:37:63:fd:7e:99:44:52:98:a7:47:4b:84:80:
                    bc:5a:d5:f4:57:38:d5:a2:2f:36:f5:24:60:d0:f9:
                    e1:c7:89:66:15:0b:93:dd:a8:73:00:3c:e2:dd:69:
                    c3:24:d1:52:54:b5:44:7b:f6:83:33:61:c7:16:2f:
                    8e:83:e7:3a:eb:40:27:41:89:84:ce:80:9b:c6:f2:
                    0f:bd:98:7b:6d:cd:a6:9e:0a:e5:ec:51:57:62:e1:
                    fc:84:67:cb:9e:47:2f:23:32:80:c1:83:20:0a:f1:
                    d1:59:86:37:2f:bc:b6:db:b1:3d:4e:9a:fe:e7:26:
                    1b:18:b5:0f:97:a1:52:94:e2:aa:49:07:c0:f0:81:
                    19:35:3e:0b:83:4f:85:40:38:9c:72:34:21:6c:be:
                    66:d1:5f:f3:d7:1c:32:6f:d2:8b:5b:84:b2:b8:e4:
                    89:3a:dc:b4:de:54:c4:79:b3:26:fa:11:54:4d:de:
                    93:33:e2:51:08:ab:0c:59:87:d2:63:19:8c:b2:ed:
                    82:d1:0a:44:64:ef:c6:b5:94:57:ce:b8:64:3d:0f:
                    e9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:75:7B:E4:33:9B:CF:80:34:4E:B1:FC:45:CB:5E:0C:4D:D3:00:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22
                  179.125.64.0/19
                  186.251.8.0/22
                IPv6:
                  2804:1058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262988

    Signature Algorithm: sha256WithRSAEncryption
         b2:7d:b8:50:81:b9:09:6a:ee:72:ad:36:99:f0:18:4a:50:97:
         00:02:b1:17:a3:15:45:42:ed:29:5d:d0:9a:16:5d:d6:d3:c2:
         6f:3a:39:b0:ff:83:96:c3:06:e4:a7:a5:d6:eb:70:c5:c9:b0:
         18:21:7f:e4:9a:c8:6e:81:8b:54:8f:66:76:f7:0a:5e:a1:b2:
         57:0d:b3:7e:57:e3:c9:04:77:6c:0b:30:6c:b5:ff:e6:5c:5c:
         ce:b7:d1:74:3d:81:58:b2:2e:b0:c1:2a:32:da:b7:79:6c:37:
         0c:a5:e4:6a:30:d7:2c:67:ff:1d:00:d7:c5:3e:2b:a8:53:e4:
         68:95:56:f9:13:84:89:29:39:98:dc:3a:01:4b:cc:1f:33:25:
         63:1c:51:17:a5:7e:d9:9d:85:51:6a:0d:e5:45:18:1c:bc:c8:
         1d:81:aa:cf:de:8e:ff:97:9e:a6:66:cf:c4:1b:7d:8d:96:99:
         2d:9d:e1:dd:59:cb:20:77:fa:be:3b:de:50:cd:58:46:54:c1:
         2a:05:55:f0:87:f4:42:75:e2:20:1b:52:cd:e8:49:34:43:3c:
         33:aa:b5:e9:cc:65:41:bf:08:09:22:09:a2:fd:c9:87:92:02:
         32:a1:7e:7d:f0:a7:f4:18:49:5e:5f:9a:6d:c3:da:cc:9f:0e:
         ec:f1:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 05:13:44 2024 by rpki-client on console-fra.rpki-client.org