Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9A11FC6BD5E48FA6BB080AC15938B03809BC4F4.cer
File:                     F9A11FC6BD5E48FA6BB080AC15938B03809BC4F4.cer (raw, json)
Hash identifier:          /r6w/+ym4uqnO+LVaQvEuBgegA6y2X+kh7Xv3CSNXW4=
Subject key identifier:   F9:A1:1F:C6:BD:5E:48:FA:6B:B0:80:AC:15:93:8B:03:80:9B:C4:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CB191C14CDEF0A2EAE349CC1D6E6D38414E576E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/F9A11FC6BD5E48FA6BB080AC15938B03809BC4F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Dec 2022 00:18:11 +0000
Certificate not after:    Fri 29 Dec 2023 00:23:11 +0000
Subordinate resources:    AS: 270397
                          IP: 190.89.232.0/22
                          IP: 2804:6b64::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b1:91:c1:4c:de:f0:a2:ea:e3:49:cc:1d:6e:6d:38:41:4e:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 00:18:11 2022 GMT
            Not After : Dec 29 00:23:11 2023 GMT
        Subject: CN=F9A11FC6BD5E48FA6BB080AC15938B03809BC4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:47:ae:cd:6e:1a:e9:5b:bd:c5:89:e2:df:
                    30:73:01:d2:06:6c:88:62:2f:7a:5b:ac:b2:77:b3:
                    dd:2e:56:40:0b:5f:8e:78:e9:99:86:08:4b:38:b8:
                    73:52:7a:47:90:dd:2a:5f:63:f5:54:b7:3a:bd:71:
                    84:6e:3b:29:4c:66:a1:e3:35:34:4f:79:ad:f0:45:
                    75:e2:42:70:00:7a:80:9a:65:41:e9:2c:e2:e3:a9:
                    86:c0:01:84:6d:9d:cb:37:cd:c3:19:e0:77:91:26:
                    88:99:83:a9:03:1f:23:76:1b:b9:79:25:6b:12:93:
                    62:18:1c:42:a1:ff:80:d3:f6:7c:3b:ee:d4:55:1e:
                    66:8c:4b:c4:9c:f5:e2:9b:0a:47:7c:ed:13:47:d4:
                    96:90:69:68:19:ae:72:ed:1e:d4:45:62:4b:f7:17:
                    9f:98:dc:1b:f9:00:1c:5b:d8:e9:d6:a3:69:d8:ab:
                    99:be:e9:7d:54:70:bd:7a:d4:ea:47:14:a6:89:af:
                    83:69:0f:9f:17:53:e3:9f:5c:cd:0a:ec:64:b4:fb:
                    3f:b0:d1:3a:cd:44:e8:97:47:61:e2:94:97:14:08:
                    05:f1:00:ba:28:dc:30:08:0d:73:d2:e0:71:b3:62:
                    06:0c:c3:2a:34:3d:91:9b:d6:f6:1d:35:c6:78:db:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:A1:1F:C6:BD:5E:48:FA:6B:B0:80:AC:15:93:8B:03:80:9B:C4:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/F9A11FC6BD5E48FA6BB080AC15938B03809BC4F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.232.0/22
                IPv6:
                  2804:6b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270397

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:2d:3b:32:17:18:32:69:69:fe:78:5a:f2:d6:32:8f:ea:
         6e:c2:76:af:81:58:03:30:00:b1:69:c9:a7:ca:80:06:a0:89:
         ec:c3:65:45:3a:a3:67:5b:01:87:32:55:40:28:be:9a:ed:5f:
         c1:90:01:6a:2c:22:8a:31:10:58:bf:3e:e7:5a:bb:ce:0a:ee:
         52:22:83:08:e6:6a:9a:a3:06:95:0c:1f:3a:67:82:c9:66:19:
         d2:13:3b:fc:0f:ed:3c:02:ef:d9:44:50:5b:95:fb:b9:30:01:
         de:1f:59:66:35:e8:99:59:28:69:63:a2:c1:fd:0b:55:ef:f6:
         74:35:97:64:20:53:89:69:5a:7a:04:d3:9c:b4:b8:37:2d:1a:
         9a:6f:e1:07:58:c1:c6:13:0f:78:b9:fe:43:1b:06:04:28:46:
         15:84:6b:1d:80:bf:85:38:63:a1:55:5e:80:1d:7b:31:b3:b3:
         25:73:b6:d6:3c:cf:91:7c:fa:24:9d:45:b9:00:ba:31:90:90:
         95:cc:9b:7f:b5:da:46:4b:d6:f7:03:98:95:4b:23:d5:ba:dd:
         8a:96:7a:f3:3a:a2:c5:f5:ee:5a:8f:20:9b:68:a4:95:35:ce:
         fc:9b:3e:9a:60:10:c4:e0:f3:8c:5d:36:81:c9:32:6b:fd:79:
         ba:e5:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:42 2023 by rpki-client on console.sobornost.net