Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
File:                     FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer (raw, json)
Hash identifier:          7DrIdYaluVnK51AAfecyig6eSBV8YhkY1TIo94/2R/Q=
Subject key identifier:   FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AD3D8D4D9568409B0D78CE735BDEDCFE75E04C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:44:21 +0000
Certificate not after:    Thu 03 Apr 2025 22:49:21 +0000
Subordinate resources:    AS: 262578
                          IP: 177.84.32.0/21
                          IP: 2804:658::/32

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 17:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d3:d8:d4:d9:56:84:09:b0:d7:8c:e7:35:bd:ed:cf:e7:5e:04:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:44:21 2024 GMT
            Not After : Apr  3 22:49:21 2025 GMT
        Subject: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:b6:7e:88:c8:d5:8c:29:b3:55:54:30:fd:
                    52:53:64:ea:06:25:50:0b:6d:69:90:ac:d1:60:60:
                    ae:fe:b2:55:0b:02:a3:18:00:b7:4f:66:c7:f4:7f:
                    17:84:65:8d:42:20:85:c4:fa:ca:e6:2b:12:47:32:
                    ca:de:6e:52:33:0e:77:44:5e:db:68:57:67:48:52:
                    87:fa:c7:2a:fa:1e:62:13:04:bd:61:51:3c:29:e0:
                    8f:48:5f:3b:69:51:bf:a9:66:44:be:b4:f1:b5:70:
                    cc:30:28:d7:1c:9e:d0:91:8a:ef:eb:69:41:55:c9:
                    18:36:1f:af:5e:72:ec:e0:e9:b6:ff:13:d3:6a:aa:
                    42:2a:f7:b1:3f:47:fa:8c:ee:45:7e:96:af:f8:f1:
                    8d:cf:95:d4:84:51:1b:39:f0:cc:2c:1a:cf:af:e7:
                    25:ba:d9:d1:4e:11:01:e4:d7:48:91:34:9a:94:7f:
                    fe:73:b0:9f:d1:b5:7f:0e:2d:d7:56:17:7a:18:b4:
                    33:08:19:99:9d:de:49:38:0c:c4:fd:95:39:fc:08:
                    44:99:74:04:cd:23:88:0f:2d:76:61:ba:b2:48:3a:
                    f0:aa:24:fd:d4:8c:17:f5:7e:f4:d3:4d:ab:bc:6d:
                    63:df:a0:1b:d0:c1:aa:29:f2:82:0b:da:28:ea:d4:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.32.0/21
                IPv6:
                  2804:658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262578

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:c5:40:b3:75:4a:37:89:a3:6b:d1:c4:d7:6d:26:60:fe:
         a1:c4:88:ba:c0:14:cf:cb:ef:54:f1:6f:2a:5b:15:b2:13:45:
         e4:cb:26:f7:c6:91:35:1f:de:2a:64:b3:3c:cc:87:ec:ac:8b:
         6d:9f:05:57:5f:e8:23:39:d8:08:21:16:ec:0a:2a:6b:5a:bc:
         ed:43:df:ca:92:c3:81:14:bb:b1:68:f9:11:71:a7:f2:f4:45:
         d3:32:4c:39:cb:1b:88:ef:4a:6b:b8:38:61:d9:fe:d5:57:7a:
         df:a7:1b:78:b0:34:5f:21:4f:9b:d4:f4:21:b6:7b:cb:02:bf:
         d9:4f:3b:a9:cf:44:3d:1d:2b:36:64:74:58:86:b4:4c:83:89:
         37:16:af:ae:54:c3:ae:c3:54:3a:be:02:92:43:8a:6f:d2:22:
         6e:74:90:b3:43:1a:a3:e2:c5:f3:02:cf:2e:70:8f:cb:d6:37:
         2d:85:98:a5:00:d1:64:2b:b1:b0:ae:09:33:c5:1d:f8:5e:b8:
         9e:92:da:5a:43:27:32:29:a1:f3:f8:0d:3a:f9:3c:85:e6:64:
         cd:15:04:d7:a0:cb:d3:af:f6:e2:b8:e9:4f:43:eb:99:3e:a7:
         cd:95:bf:64:14:eb:91:a4:64:80:89:0e:1c:04:9c:94:c2:57:
         52:27:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:45 2024 by rpki-client on console-ams.rpki-client.org