Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer
File:                     5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer (raw, json)
Hash identifier:          ejZsJUjAcLffkUUrW80jv21xPystMDGCkYjNcT93d0Y=
Subject key identifier:   51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46F85CB96A98E199666222F786392D3CFB91BB79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:23 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:23 +0000
Subordinate resources:    AS: 266020
                          IP: 170.245.236.0/22
                          IP: 2804:393c::/32

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 05:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f8:5c:b9:6a:98:e1:99:66:62:22:f7:86:39:2d:3c:fb:91:bb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:89:8f:2e:e7:cf:1b:88:f0:55:6f:26:29:
                    f5:09:63:ca:14:60:4c:c2:80:0e:1a:bc:29:72:d3:
                    94:99:9a:12:2a:6c:4a:93:26:fd:31:59:84:ca:5e:
                    20:52:c3:dd:30:a6:60:c8:cf:45:1d:e5:66:3b:65:
                    36:78:95:e4:d0:e8:09:91:68:3a:00:50:0d:b8:98:
                    cd:19:bf:44:78:ce:1b:7a:b5:62:c6:8b:26:62:22:
                    f8:4e:6b:a6:f0:af:5a:4b:b8:b0:6c:be:0c:7f:5b:
                    cc:e8:09:7b:50:fd:f4:c6:80:f6:8f:ca:e6:ab:51:
                    25:73:22:53:58:0a:46:50:e5:63:90:01:05:df:16:
                    5c:2d:2e:12:55:e0:eb:66:3a:25:23:c6:92:a8:ca:
                    33:4d:af:76:1b:8c:0e:88:e3:dd:b7:06:96:3d:3a:
                    7f:70:6b:69:9a:16:ac:06:c0:43:47:75:b6:08:f2:
                    ef:9b:93:f4:d8:bf:ab:08:fc:2b:ed:6a:00:17:fe:
                    7b:41:6c:98:18:df:20:b8:c6:02:c3:29:22:1d:e3:
                    6b:48:53:af:38:96:f2:f9:27:e2:a2:50:2f:b6:8b:
                    9f:02:1c:dd:61:b0:9d:8b:87:8c:f2:70:65:7d:6d:
                    2d:21:3a:6a:cd:13:c0:b0:45:a1:60:6f:12:50:47:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/22
                IPv6:
                  2804:393c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266020

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:10:d4:fd:0e:13:48:e1:6b:0d:99:07:6b:73:a0:c9:da:
         7a:74:81:d8:22:30:ab:ef:d0:3c:0e:06:37:92:1d:30:5b:34:
         78:4a:7a:99:19:ca:bb:f3:29:79:45:31:e3:32:ea:23:6e:f8:
         94:7a:29:a3:86:d7:0b:30:01:22:53:98:e2:c6:4b:de:d6:ec:
         03:8b:da:d4:9c:71:22:4c:0d:73:51:1b:d1:fd:d8:5c:32:47:
         f1:68:80:8b:5f:61:21:13:f4:25:11:7c:e9:f9:f6:9d:d4:c5:
         01:2f:58:6f:88:63:06:2a:fe:21:9c:80:6c:ea:95:97:8c:0b:
         50:b3:3f:41:d3:fa:63:9c:2d:69:de:85:70:16:a5:fe:fd:4e:
         79:55:dc:c8:d3:7c:19:96:2c:3e:cc:61:af:30:e7:f9:bc:7b:
         2f:52:47:40:fb:44:e8:69:09:a7:a9:7b:a4:f0:29:10:26:c9:
         4f:e1:47:98:9e:c3:70:dd:09:d2:7f:57:81:05:be:0e:5d:48:
         a1:48:ae:92:8e:4d:81:a9:5c:bd:29:71:5b:e1:fd:c9:41:fa:
         ff:4a:38:d0:46:5f:99:f7:e6:84:e4:e1:b5:1d:10:c8:5d:c1:
         6d:af:c1:c6:19:76:ce:05:52:41:52:85:ae:64:25:f0:a6:8f:
         2d:5c:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org