Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.cer
File:                     FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.cer (raw, json)
Hash identifier:          uyti/P7tmc0pNshOI4fHxpGCjLj6b61Vand7vz5QUO0=
Subject key identifier:   FF:62:C9:8F:3A:2C:86:33:9C:41:55:C3:3D:BC:2A:7D:9B:BC:7C:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AC332F59754D256D0CE4C99665077159362F8B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jul 2024 18:50:29 +0000
Certificate not after:    Fri 18 Jul 2025 18:55:29 +0000
Subordinate resources:    AS: 270990
                          IP: 181.225.172.0/22
                          IP: 2804:7494::/32

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 03:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c3:32:f5:97:54:d2:56:d0:ce:4c:99:66:50:77:15:93:62:f8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 19 18:50:29 2024 GMT
            Not After : Jul 18 18:55:29 2025 GMT
        Subject: CN=FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:69:95:99:50:5d:c0:83:f5:5b:14:72:4e:
                    22:2e:e2:04:3b:8e:13:f5:4c:d4:02:c7:e4:b5:de:
                    2e:58:72:9d:a4:cc:8b:58:d3:ce:6d:60:9d:36:bc:
                    43:33:c0:c1:11:d3:03:2b:d9:8e:63:ff:1f:f2:a0:
                    7d:fe:3b:a1:01:03:a1:56:58:90:dd:72:0e:82:81:
                    0b:f4:34:68:13:da:cc:6d:7b:56:48:a0:9c:0d:c1:
                    e6:07:f2:af:64:25:26:d6:ba:03:e3:b3:7f:08:de:
                    c7:3c:9e:08:dc:26:b2:4f:a8:b2:fa:73:ed:1d:25:
                    df:36:a9:b1:06:1a:d6:1d:d7:41:66:9b:b4:ff:96:
                    85:4e:f4:08:7b:71:0e:53:23:53:e0:f8:96:3a:44:
                    5e:fb:35:8a:85:9e:bd:92:dc:03:65:83:20:e1:dc:
                    64:a8:df:71:93:dc:5f:c5:02:63:e8:d5:70:c5:2c:
                    62:34:cc:40:76:f0:c4:6e:87:e6:ee:b4:78:e3:55:
                    69:22:df:3e:2a:e5:cf:cc:b6:ab:28:3d:bb:e9:4c:
                    c6:29:38:aa:f1:12:27:57:5c:0f:30:e1:a1:b1:aa:
                    83:dd:47:6e:c7:b2:55:4b:68:7f:c4:0d:7d:ec:81:
                    ec:1a:73:39:4b:ed:a2:64:ff:1c:89:d3:a7:b3:75:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:62:C9:8F:3A:2C:86:33:9C:41:55:C3:3D:BC:2A:7D:9B:BC:7C:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.172.0/22
                IPv6:
                  2804:7494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270990

    Signature Algorithm: sha256WithRSAEncryption
         76:31:a2:68:d6:78:02:0e:0a:28:1a:0f:85:74:01:53:ab:98:
         34:1e:4a:c3:eb:a1:91:9b:b7:11:c5:d5:94:31:35:aa:72:8f:
         a4:39:d8:d4:e6:2f:43:f9:e4:60:4d:a8:3a:3e:03:3d:9f:a3:
         73:c2:63:e6:8c:78:74:d4:e1:90:8d:f0:8e:b3:60:a0:08:90:
         74:81:cb:84:71:6d:a0:c3:6e:2c:de:77:3d:8e:fb:59:a4:91:
         d7:f3:85:ed:48:4c:42:d5:64:e6:c4:f5:a1:0b:87:5c:1a:0c:
         83:68:a2:c3:e5:66:2a:22:69:cc:16:1c:0f:02:9e:8f:84:84:
         36:64:78:75:1b:79:e2:72:2e:32:09:7a:ee:9e:f7:74:8a:d4:
         06:a0:17:2f:65:15:6c:cf:05:e2:d4:3b:b9:63:37:ea:9f:97:
         12:01:ba:fa:fe:21:48:22:a0:b9:f0:34:30:4a:97:68:58:ca:
         01:27:90:e8:f2:e5:cc:a2:07:8f:42:f8:e4:3f:58:51:3b:11:
         bf:6c:b8:53:28:67:5b:cf:fc:74:45:fe:70:f5:23:58:7c:5b:
         17:02:56:db:74:54:82:42:a3:df:1f:54:e2:4f:63:12:31:f5:
         38:81:94:4f:ea:79:b6:9f:93:30:28:ba:7b:da:74:01:75:43:
         b9:56:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----