Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
File:                     FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer (raw, json)
Hash identifier:          LalLf7wHVz7M6jD00kuDixzZZGmjr4Y7wDeOtL4VWKE=
Subject key identifier:   FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71C89CE3C73622FFAECA4B53AFD54F27318C85B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 12:50:02 +0000
Certificate not after:    Thu 03 Apr 2025 12:55:02 +0000
Subordinate resources:    AS: 270668
                          IP: 179.60.132.0/22
                          IP: 2804:6f8c::/32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 03:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c8:9c:e3:c7:36:22:ff:ae:ca:4b:53:af:d5:4f:27:31:8c:85:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 12:50:02 2024 GMT
            Not After : Apr  3 12:55:02 2025 GMT
        Subject: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:fa:ca:74:13:a0:5a:5a:15:82:68:33:6c:
                    4a:b6:e9:58:eb:09:5b:1f:23:a5:3d:58:79:32:4b:
                    76:b2:5e:cb:c1:5f:36:71:e6:8a:e1:ac:f5:61:54:
                    79:13:5e:cd:46:1c:a7:80:11:9a:4a:02:9a:01:04:
                    cf:43:c3:b9:00:11:57:4e:54:f2:63:04:fb:c3:d2:
                    ea:88:76:b5:9d:fc:b0:a1:3d:0c:6b:12:74:2a:e6:
                    1a:ea:47:15:18:50:eb:7e:19:e7:98:ca:4c:cf:06:
                    4c:c5:df:94:8e:b5:85:69:a7:06:11:95:e0:dc:23:
                    c3:6f:a0:de:a1:35:c4:de:3d:8d:cf:85:c2:a3:c4:
                    eb:7c:ae:bd:ee:fe:8d:b8:06:f4:d6:39:b8:c7:af:
                    c9:85:29:4e:06:c8:2a:5d:83:6a:f4:61:12:90:56:
                    05:72:da:61:1d:d4:00:45:5e:0c:8a:90:8b:3d:5a:
                    da:f4:b2:46:ee:16:5e:da:42:41:68:9d:7a:c2:54:
                    b1:1f:58:9b:89:ab:09:c1:02:34:1a:21:cb:61:0c:
                    95:02:c1:99:a5:7e:09:e7:2e:f9:7c:7a:9d:86:7a:
                    41:6a:3e:f3:7a:57:cd:f6:9d:ef:40:05:9f:d6:f5:
                    13:e6:e2:ad:9f:e1:e7:cd:8e:94:ba:5c:8a:18:b6:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.132.0/22
                IPv6:
                  2804:6f8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270668

    Signature Algorithm: sha256WithRSAEncryption
         68:34:4f:12:00:bd:c4:7c:b9:58:46:4c:96:e0:8f:ad:78:c5:
         0e:d0:10:78:46:96:da:e7:8e:93:76:fb:3f:3d:a2:5a:4d:a0:
         3e:42:b7:54:ab:68:a6:40:b6:fd:dc:66:19:d4:7d:b8:57:02:
         f1:94:d8:7e:5d:52:37:e8:b7:7d:36:88:8a:f4:4a:ba:42:bb:
         78:59:78:c6:46:8a:b9:9b:8b:7c:ee:2c:d4:5b:5c:0e:a2:84:
         06:5d:db:55:db:2f:96:5d:c3:84:e1:c6:36:46:6e:a8:8e:a6:
         2b:96:3a:c9:1c:45:04:39:99:bc:aa:e6:71:ab:99:ad:bb:3d:
         08:1f:db:51:cd:1e:c7:6a:3a:35:7b:5d:c4:ff:27:03:d4:68:
         1f:b1:d1:4a:1c:c1:5f:a8:bf:35:0d:77:df:d6:44:1b:ed:de:
         5d:55:7a:84:cb:ea:a8:4d:f8:57:37:ed:7a:f5:54:be:31:d0:
         b8:04:f0:0e:e9:c3:b9:c8:69:9e:ea:3e:5e:f9:20:2c:8e:01:
         b2:86:78:99:67:a0:92:2c:30:04:28:12:4b:12:9c:d1:0c:c7:
         bf:5e:c1:dd:ff:9d:15:d0:bc:2d:87:57:dd:a5:3f:a0:78:10:
         1d:0a:52:e1:d6:d4:8a:e2:aa:93:05:fd:b4:a3:6b:07:05:73:
         86:63:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----