Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.cer
File:                     FEAEF81974D8C58C36C81BB87666B0C4F005AC34.cer (raw, json)
Hash identifier:          lZ4gMdglS6RANbcL44C+wzW3BNbXABLkE23UKV/h+w0=
Subject key identifier:   FE:AE:F8:19:74:D8:C5:8C:36:C8:1B:B8:76:66:B0:C4:F0:05:AC:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AABC18ED563CA9F97197915962274C2A129A7FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 May 2024 16:03:36 +0000
Certificate not after:    Tue 06 May 2025 16:08:36 +0000
Subordinate resources:    AS: 53014
                          IP: 170.247.196.0/22
                          IP: 2804:588::/32

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ab:c1:8e:d5:63:ca:9f:97:19:79:15:96:22:74:c2:a1:29:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 16:03:36 2024 GMT
            Not After : May  6 16:08:36 2025 GMT
        Subject: CN=FEAEF81974D8C58C36C81BB87666B0C4F005AC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:c7:9d:26:58:38:76:f0:6a:01:95:8a:1e:
                    e5:0e:d4:54:ab:01:55:8f:d4:36:98:c8:49:d3:bc:
                    db:69:6e:35:cd:d5:9b:7a:f6:95:be:97:b1:c2:48:
                    87:be:72:7f:4a:e9:f8:08:10:a1:0a:3a:ca:3a:61:
                    e6:0b:62:97:60:12:05:9d:3f:9e:cb:81:2d:9b:01:
                    c3:85:8c:88:14:67:49:d3:b6:69:f3:14:43:5b:3c:
                    a5:42:a7:1b:09:2f:6e:9a:34:b0:fb:a2:06:9b:4a:
                    aa:09:97:92:c4:d8:e9:f8:7a:51:8f:c4:b7:f8:41:
                    92:68:35:8b:fb:46:98:bc:86:41:d9:44:1d:7e:19:
                    d2:37:fa:5f:cf:1a:35:a2:05:7c:25:9f:85:ac:32:
                    91:70:ee:ee:54:c0:5a:17:b0:ba:91:c8:4b:62:20:
                    19:32:61:bb:6e:b9:10:53:2d:84:6f:e9:d1:0e:b4:
                    dd:bc:3e:25:ea:c8:bc:1f:2b:c6:40:1f:4f:35:e6:
                    15:15:09:64:2f:a5:e7:4c:8b:31:72:72:17:6f:51:
                    8d:15:8a:e3:cc:a4:b2:a8:ce:b4:47:09:15:40:06:
                    1c:9c:84:84:68:ba:20:ae:75:eb:21:06:60:d1:68:
                    f2:d1:1f:32:ba:00:c4:c3:db:d5:51:1e:49:2f:20:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:AE:F8:19:74:D8:C5:8C:36:C8:1B:B8:76:66:B0:C4:F0:05:AC:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.196.0/22
                IPv6:
                  2804:588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53014

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:d5:a8:d6:0e:06:1f:ba:79:43:1b:bc:c5:4a:68:f8:fe:
         38:33:e2:1e:fb:aa:58:1d:e2:40:f6:b6:57:71:47:8c:83:9f:
         0a:76:9d:2b:59:ba:63:29:21:37:f1:db:98:12:e4:f4:f4:f6:
         27:d2:43:cb:1b:63:a2:ad:8f:02:04:41:0d:a7:a3:33:c1:32:
         25:8d:b0:a3:8f:bb:f2:a5:78:e1:45:7e:5b:9c:94:3e:97:45:
         81:26:b3:5b:de:9c:9e:89:71:90:e8:71:72:69:3a:bc:6b:a9:
         ac:9f:55:4f:1b:62:22:15:23:5e:19:24:90:48:c4:9e:ff:d9:
         17:09:bd:8d:d7:e0:1e:b4:b2:cc:de:94:6c:61:17:67:c1:0f:
         d7:1e:7a:e3:55:ae:18:ec:93:3d:b0:21:11:3d:3c:17:d7:d7:
         6d:1e:62:91:3b:ba:f9:d7:4a:16:51:f9:d7:d6:7f:cc:5c:5c:
         dc:4c:dd:d2:fb:8a:04:0f:ad:45:9a:b2:d1:0f:b4:1a:57:e5:
         87:08:b3:58:4f:01:1b:53:5b:a1:e2:bf:ff:5e:c8:59:3e:24:
         dd:9e:fb:3a:a5:7f:3c:95:ae:8c:8d:92:81:b1:f4:52:b3:ac:
         13:d9:fb:22:7c:36:a0:38:67:96:79:6a:7c:b8:4f:1d:01:84:
         1a:08:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 18:49:55 2024 by rpki-client on console-fra.rpki-client.org