Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
File:                     48B65496F1100A4BEC2A103360694784DE4E87AA.cer (raw, json)
Hash identifier:          NML4aBJx8GL7KDE0UY5DIvLBs5CkdlnKjXRIB024euU=
Subject key identifier:   48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A650A2B52E0941EF3C79521D04299ABC0800051
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:27:00 +0000
Certificate not after:    Wed 02 Apr 2025 18:32:00 +0000
Subordinate resources:    AS: 268564
                          IP: 45.162.212.0/22
                          IP: 2804:531c::/32

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 06:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:65:0a:2b:52:e0:94:1e:f3:c7:95:21:d0:42:99:ab:c0:80:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:27:00 2024 GMT
            Not After : Apr  2 18:32:00 2025 GMT
        Subject: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:c0:e7:3d:ac:d9:52:02:ca:2c:08:cc:c8:
                    7a:8a:85:bd:8e:87:41:48:55:37:12:14:42:71:4c:
                    bf:b5:fb:e7:7f:6b:a6:f9:3e:9c:37:dc:39:c5:53:
                    cd:2a:55:35:c7:f1:de:b4:26:33:8a:a2:88:0b:41:
                    88:17:ea:21:4a:4b:e3:71:9b:31:d1:b1:50:de:7a:
                    9d:96:62:3f:a1:c1:ac:e2:e0:09:55:31:ff:08:77:
                    48:c0:6f:25:5f:4b:3a:ee:4c:fc:7a:7f:13:10:ab:
                    91:d9:76:d4:02:f9:77:d1:64:b3:7d:8e:cb:fb:03:
                    69:bb:e2:e8:93:dc:36:83:95:77:82:6c:ad:a9:f9:
                    78:f3:68:31:35:2c:a6:f9:9f:ad:ec:3f:e4:c6:ac:
                    cc:22:50:d6:66:75:dd:0e:60:86:d6:62:76:5f:4d:
                    9b:42:92:7f:a9:b9:f8:c2:20:da:4a:a6:58:5a:af:
                    d9:45:f4:d1:a3:9c:14:25:a0:3c:78:c8:ba:e5:5c:
                    66:6e:af:68:34:d9:a1:2d:b8:9b:29:62:77:c3:7e:
                    b3:cc:6a:76:a3:41:9a:97:6e:8f:e9:ee:14:61:f3:
                    58:f5:ba:b6:b3:19:1a:9c:ee:25:35:11:af:cb:67:
                    ba:5a:7f:e6:7b:be:78:4b:30:93:34:34:29:04:e0:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.212.0/22
                IPv6:
                  2804:531c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268564

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:ce:1f:53:77:85:cf:b0:16:05:a9:e8:07:63:56:25:50:
         df:3f:d5:73:54:d7:60:b6:52:00:ac:b2:0e:cb:b5:12:85:ad:
         41:1f:d5:6b:46:6c:ea:5a:97:ad:00:37:a4:49:2b:18:c4:2f:
         5e:61:ab:d3:9c:a9:0b:a1:e2:c2:08:4c:57:a9:05:d5:9f:dd:
         63:84:64:0f:c7:9c:24:8c:a8:59:39:79:48:03:45:1e:d6:85:
         67:e8:cd:f8:c9:be:ca:f2:75:68:8e:1e:61:5b:c8:72:b5:0f:
         8d:e7:da:0c:68:f8:90:a0:89:e0:2b:70:17:f7:20:c1:3f:59:
         ec:ba:bb:61:b0:dc:27:d8:5d:de:70:49:60:dd:cc:d3:07:81:
         2d:a9:ca:f3:75:b8:d4:c3:a9:2d:f7:5f:29:bb:22:8c:71:44:
         fc:4b:d0:9b:38:13:4f:8b:dd:4d:1f:60:0b:b4:a9:37:ed:8e:
         a5:b7:6b:db:26:b7:bd:ab:b1:25:7a:9d:96:85:1f:21:f6:6c:
         58:96:f0:2a:dd:bb:7e:22:59:41:fd:91:88:f8:d9:57:17:c8:
         10:a0:b6:e7:7c:cb:00:6d:cb:64:59:1d:9b:c5:af:61:62:d0:
         ad:b7:da:b4:e7:a1:0e:6e:53:64:25:64:4f:97:3f:be:3b:b7:
         c3:13:ea:76
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUemUKK1LglB7zx5Uh0EKZq8CAAFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI3MDBaFw0yNTA0MDIxODMyMDBaMDMxMTAvBgNV
BAMTKDQ4QjY1NDk2RjExMDBBNEJFQzJBMTAzMzYwNjk0Nzg0REU0RTg3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlsDnPazZUgLKLAjMyHqKhb2O
h0FIVTcSFEJxTL+1++d/a6b5Ppw33DnFU80qVTXH8d60JjOKoogLQYgX6iFKS+Nx
mzHRsVDeep2WYj+hwazi4AlVMf8Id0jAbyVfSzruTPx6fxMQq5HZdtQC+XfRZLN9
jsv7A2m74uiT3DaDlXeCbK2p+XjzaDE1LKb5n63sP+TGrMwiUNZmdd0OYIbWYnZf
TZtCkn+pufjCINpKplhar9lF9NGjnBQloDx4yLrlXGZur2g02aEtuJspYnfDfrPM
anajQZqXbo/p7hRh81j1urazGRqc7iU1Ea/LZ7paf+Z7vnhLMJM0NCkE4J0jAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRItlSW8RAKS+wq
EDNgaUeE3k6HqjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDRM
WFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g0
TFhVY2RZU2Q2N2k3b0N5SnBWVEhVMWZ5QjU5SkttaHU5MlRqcDFnaGFuLzEvNDhC
NjU0OTZGMTEwMEE0QkVDMkExMDMzNjA2OTQ3ODRERTRFODdBQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaLUMA0EAgACMAcDBQAoBFMcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZFDANBgkqhkiG9w0BAQsFAAOCAQEAHnXOH1N3hc+wFgWp
6AdjViVQ3z/Vc1TXYLZSAKyyDsu1EoWtQR/Va0Zs6lqXrQA3pEkrGMQvXmGr05yp
C6HiwghMV6kF1Z/dY4RkD8ecJIyoWTl5SANFHtaFZ+jN+Mm+yvJ1aI4eYVvIcrUP
jefaDGj4kKCJ4CtwF/cgwT9Z7Lq7YbDcJ9hd3nBJYN3M0weBLanK83W41MOpLfdf
KbsijHFE/EvQmzgTT4vdTR9gC7SpN+2Opbdr2ya3vauxJXqdloUfIfZsWJbwKt27
fiJZQf2RiPjZVxfIEKC253zLAG3LZFkdm8WvYWLQrbfatOehDm5TZCVkT5c/vju3
wxPqdg==
-----END CERTIFICATE-----
Generated at Wed Jul 17 08:08:12 2024 by rpki-client on console-fra.rpki-client.org