Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.cer
File:                     FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.cer (raw, json)
Hash identifier:          khl5xqpSyO2nMME2THLMs4Jb8/nZm90n+50U5nABd4c=
Subject key identifier:   FD:5C:0C:99:42:60:A7:4D:E0:FE:7E:FA:84:DB:66:CA:7F:8E:BF:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F27A940CAE08653CF8A485CA58FA464037892A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:39 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:39 +0000
Subordinate resources:    AS: 270716
                          IP: 189.127.188.0/22
                          IP: 2804:7044::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 04:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:a9:40:ca:e0:86:53:cf:8a:48:5c:a5:8f:a4:64:03:78:92:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:39 2024 GMT
            Not After : Apr  2 18:30:39 2025 GMT
        Subject: CN=FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:a8:92:f8:f5:22:08:11:29:7b:82:5c:81:
                    47:8a:30:57:c9:57:a8:12:12:17:fe:93:e1:9c:ac:
                    d5:70:f6:88:fe:4a:73:de:8c:a6:91:e6:4e:c5:37:
                    17:b9:8b:58:53:33:32:85:d8:84:e9:ab:60:dd:26:
                    96:e3:10:f2:3a:b8:5b:33:01:f9:b1:75:bc:5e:26:
                    28:21:f1:d4:15:5a:86:20:eb:ab:37:ad:73:d0:a4:
                    1e:ca:cc:3f:6d:6b:95:c5:55:17:0b:de:d4:59:66:
                    18:20:d0:23:e9:40:27:9a:74:67:d5:f4:08:3b:52:
                    d9:f5:dd:e7:81:eb:3d:11:ac:fe:c9:d4:13:d7:a2:
                    56:3b:ab:29:d9:a3:0b:cc:9c:19:2e:24:6b:de:e9:
                    50:e2:1a:da:10:82:57:40:e3:27:b9:73:23:8f:5a:
                    6b:bc:23:7f:b4:f8:3b:fe:72:c4:9a:47:64:0e:2c:
                    76:73:29:84:4c:84:f3:f6:8f:36:6b:f9:1d:c7:f4:
                    ea:80:17:2e:1e:81:14:a5:e4:6a:e7:58:bd:15:d3:
                    8f:3b:d3:49:49:79:c1:f8:c2:68:59:b5:76:07:02:
                    8d:85:0f:a2:4d:07:22:4d:55:71:22:c6:02:c5:72:
                    6c:43:49:ae:e2:93:b4:75:5d:e6:4e:8c:04:11:60:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:5C:0C:99:42:60:A7:4D:E0:FE:7E:FA:84:DB:66:CA:7F:8E:BF:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/1/FD5C0C994260A74DE0FE7EFA84DB66CA7F8EBF6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/22
                IPv6:
                  2804:7044::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270716

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:b2:dd:a7:65:24:25:7d:a1:db:6c:a1:20:58:74:c6:81:
         31:55:4a:95:ed:34:74:1d:50:a9:fa:c9:d6:db:c2:cc:86:c1:
         7c:06:80:41:80:94:13:42:63:36:e9:aa:82:60:b6:bc:83:14:
         39:c0:af:60:02:3a:a1:28:8e:9f:8e:db:24:f4:ed:6d:57:6d:
         39:c5:eb:a8:93:c8:40:12:3b:a5:19:3b:8a:7d:ed:06:07:5e:
         d2:9d:69:64:39:21:42:89:46:2e:a4:a0:d9:ab:0a:5c:b1:55:
         4c:d3:6a:ae:69:17:54:a3:66:30:e4:f7:e9:04:6f:01:99:03:
         c1:98:a4:a4:45:60:31:3a:54:15:68:26:1d:d9:b1:6e:62:40:
         6b:46:26:93:fd:63:66:72:9b:8c:f0:9f:f4:1d:ee:64:4b:ac:
         e9:44:51:23:64:31:69:b6:f1:b7:bc:88:bf:a2:50:50:47:a2:
         08:3c:eb:1e:4c:0e:4a:56:c9:bc:68:08:c2:cc:ca:2d:52:79:
         80:07:56:ca:3b:b5:d0:4e:e9:68:f3:3f:f0:22:7d:1a:99:43:
         19:12:41:8c:90:1f:0b:93:1c:97:64:75:8b:1a:4c:bc:01:cd:
         fe:88:06:cd:9a:63:0c:46:e8:31:3f:59:93:1d:d4:a5:8b:5b:
         07:4a:19:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----