Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.cer
File:                     FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.cer (raw, json)
Hash identifier:          TzG3WRYMWq+E6SkgwI+gzKukulNkUApaeoOkpY+pPAs=
Subject key identifier:   FF:36:04:A2:C2:38:9D:C8:A8:5E:D0:D2:BD:88:5B:96:AE:59:B6:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A03290C6F5F46AD506AEEFF28613588EBDD6112
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 17:53:04 +0000
Certificate not after:    Thu 14 Aug 2025 17:58:04 +0000
Subordinate resources:    AS: 273728
                          IP: 2804:8b5c::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 17:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:03:29:0c:6f:5f:46:ad:50:6a:ee:ff:28:61:35:88:eb:dd:61:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 17:53:04 2024 GMT
            Not After : Aug 14 17:58:04 2025 GMT
        Subject: CN=FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:b6:76:1d:04:ad:b3:67:79:43:85:49:0d:
                    bf:fe:aa:c8:f6:24:96:6c:f4:97:08:1a:cc:f7:c9:
                    7b:ca:56:6c:70:4c:21:fc:ec:3d:e9:9a:a2:70:d1:
                    18:9d:83:e7:f4:fc:cb:37:bb:67:60:2c:bd:d3:86:
                    56:57:9b:93:1a:15:81:b7:34:94:a2:48:b5:c0:c2:
                    47:14:b0:71:08:3e:2f:58:e5:67:85:42:0e:bf:76:
                    92:71:0d:00:d0:87:7d:f3:86:ea:9d:88:7c:6a:90:
                    19:99:69:b2:54:6a:e3:9b:d4:29:3a:08:fe:15:59:
                    b9:44:a7:9d:2d:af:31:8a:2f:16:f8:73:8d:15:a1:
                    f7:4c:af:89:96:05:7b:c3:6a:f2:2b:2b:06:25:8b:
                    5d:28:c9:cd:1e:6f:f8:c1:bd:01:31:09:e5:83:5d:
                    bf:df:f8:80:c1:de:b8:05:42:80:a4:e9:b8:f7:56:
                    e0:63:35:a5:b0:be:c9:a5:fa:ba:5a:6b:1f:8e:f5:
                    19:dc:af:72:55:34:74:53:0e:db:1b:5d:68:fd:c8:
                    48:4f:82:9e:51:2e:66:e2:11:15:d2:4a:28:c4:23:
                    e5:55:6d:df:49:81:c7:f1:73:a6:48:fb:e6:a5:75:
                    7c:b8:b5:4e:7f:eb:7b:f7:42:b5:b5:db:98:fd:71:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:36:04:A2:C2:38:9D:C8:A8:5E:D0:D2:BD:88:5B:96:AE:59:B6:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273728

    Signature Algorithm: sha256WithRSAEncryption
         00:26:e6:4c:5f:6c:f3:ba:63:6b:68:c4:f7:df:e2:1a:59:89:
         f7:14:2d:0c:35:b1:12:54:e8:fa:5a:c3:f0:0f:43:8b:09:3c:
         f4:84:e5:ad:ad:3b:d2:fd:8c:ae:66:ed:2d:f0:c0:3f:da:3b:
         4e:fd:d7:11:14:11:62:36:8f:8a:34:e4:6b:27:38:32:4d:26:
         7c:1d:e5:a7:ef:9d:de:11:02:a1:89:93:91:af:e2:7c:28:58:
         a8:67:f3:4a:21:fd:d4:2f:72:39:6b:12:70:5b:b1:af:e5:16:
         fc:1f:4e:af:a7:d8:99:18:41:83:99:e2:1f:21:11:5f:8a:47:
         62:a8:7d:bd:4d:e9:54:94:d5:75:95:cc:09:5c:6f:f3:b4:3e:
         ef:3a:1b:02:10:f9:00:fe:da:d8:17:ff:21:8a:df:e0:d6:c9:
         94:b2:58:66:97:10:fb:fd:6e:f9:af:7b:74:7c:da:14:53:31:
         bc:00:a9:44:9c:64:05:b7:af:10:7d:4b:a0:43:21:96:8b:11:
         3d:c6:82:1b:13:00:4b:00:43:2b:33:37:a6:c3:d6:65:62:16:
         f2:5a:b8:99:93:58:16:df:6b:e5:e9:1d:25:54:63:d3:7c:38:
         85:cd:f1:8d:ca:9d:18:33:c1:2c:08:8e:38:de:45:1f:11:d3:
         33:08:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----