Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
File:                     FECB959E21E756261292E2137CDE9CAD85492B0A.cer (raw, json)
Hash identifier:          I5fE50U83tSwm5QjjebNgZH6QQriBufZMTFs+G6Up3w=
Subject key identifier:   FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17AD62452F477A3DEFDAC6EFB607A13C946628A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Sep 2024 14:46:55 +0000
Certificate not after:    Mon 08 Sep 2025 14:51:55 +0000
Subordinate resources:    AS: 53054
                          IP: 187.73.192.0/19
                          IP: 2804:a3c::/32

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 15:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:62:45:2f:47:7a:3d:ef:da:c6:ef:b6:07:a1:3c:94:66:28:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  9 14:46:55 2024 GMT
            Not After : Sep  8 14:51:55 2025 GMT
        Subject: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:86:24:15:d4:cf:06:8c:a7:67:f7:41:92:
                    f2:19:19:3f:9c:9d:21:bb:58:a8:bc:7b:1d:72:06:
                    43:63:59:e0:4f:3a:5a:c0:38:de:8e:74:4f:ed:72:
                    be:f6:69:c3:b4:a6:9f:d6:c2:5e:bc:0a:3e:75:ee:
                    e5:96:99:65:6b:a3:44:f9:26:8f:5d:ab:46:54:66:
                    f5:8a:b7:d6:0b:b9:1c:8d:ce:fa:32:20:34:e2:54:
                    8c:79:a6:20:a0:99:b0:f3:e5:bb:aa:92:f1:93:41:
                    b8:29:05:ce:5d:20:79:60:d8:11:35:12:e8:d4:2b:
                    b7:15:df:0c:cb:d2:37:67:09:18:91:21:72:ae:72:
                    0e:e5:54:cb:8b:e5:68:4f:4f:d6:53:a1:4c:16:b6:
                    5c:40:da:80:8d:b0:0f:36:9a:4b:a0:c7:07:96:00:
                    5f:35:94:5d:58:a7:27:6e:8e:8e:fe:b2:fd:ad:a0:
                    89:14:ee:0f:55:14:4e:66:97:89:9f:51:2b:ff:4f:
                    4c:20:a9:22:25:0a:b1:de:c0:e7:fc:67:65:06:89:
                    82:c7:18:cb:f8:33:9e:94:73:68:0e:2d:98:66:3b:
                    fc:9a:66:00:68:00:b8:41:d3:fc:d8:01:d1:89:14:
                    d7:f8:e5:d8:7c:87:1e:d9:94:9e:37:39:af:d9:c1:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19
                IPv6:
                  2804:a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53054

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:e0:2b:7c:cf:48:b3:42:d3:9d:3a:f9:1e:75:49:e2:77:
         ed:7c:3d:b5:60:1a:e1:8a:01:fb:c5:97:78:3c:c4:5c:fa:49:
         4e:87:c6:a1:a0:ce:b1:76:5a:ab:3a:fd:fd:87:94:cb:25:b7:
         df:7e:70:3e:de:f2:f1:82:1d:55:42:81:a2:da:9b:c7:40:b4:
         9d:51:9f:eb:52:c1:2d:d5:ba:e1:1a:bf:f3:ca:34:e1:17:bb:
         38:c2:20:71:d5:87:20:ff:9c:8e:91:3c:6d:04:22:52:8b:24:
         45:89:6e:e4:e2:d8:51:d7:78:97:5f:0d:b6:42:d8:58:b7:7b:
         db:75:75:bf:71:86:21:39:2a:a2:86:26:47:10:aa:34:30:68:
         50:42:66:8e:3d:4c:e8:36:17:9f:d1:f0:6c:a4:f0:21:75:3d:
         eb:ea:8b:92:cf:cb:50:88:ea:b6:15:78:dd:29:b4:70:40:9b:
         77:93:db:8a:36:56:ab:84:c6:53:52:af:c6:7b:47:14:95:97:
         0c:66:01:a5:29:14:af:9c:40:4c:d1:9d:71:a1:5f:c2:68:65:
         ab:e6:f0:24:28:cf:73:a8:bf:e2:31:8d:d2:c8:62:16:c9:8c:
         cf:fc:3e:64:9b:0b:d5:65:c1:e9:20:b7:64:57:3c:a5:9e:70:
         20:cf:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 23:14:47 2024 by rpki-client on console-ams.rpki-client.org