Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.cer
File:                     8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.cer (raw, json)
Hash identifier:          mp6V9ZcQq19iPZ7rYKv+ZemWVMYgwlYFhlEkTNtNXU4=
Subject key identifier:   81:49:E5:76:2D:0E:1B:8F:F0:BE:DD:31:2E:E1:10:B7:D5:3E:CF:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       706A2E8FE50AEE131981EB352608AB9CB5B2CFC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jun 2024 18:22:00 +0000
Certificate not after:    Fri 06 Jun 2025 18:27:00 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 02:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6a:2e:8f:e5:0a:ee:13:19:81:eb:35:26:08:ab:9c:b5:b2:cf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  7 18:22:00 2024 GMT
            Not After : Jun  6 18:27:00 2025 GMT
        Subject: CN=8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:8c:5f:80:7c:cc:16:9e:34:ce:1b:50:f4:
                    4f:d5:f3:74:1e:e6:b8:0d:6f:e9:83:62:e5:0f:33:
                    fd:a3:4e:2c:c2:5e:57:15:8c:0f:49:bc:21:c8:2a:
                    04:c1:b2:62:19:81:be:9b:03:ff:c6:05:02:00:19:
                    73:aa:51:2f:7c:97:c9:53:98:bc:f0:31:87:59:70:
                    3b:f5:7d:1d:e9:0b:3c:3e:15:ef:9e:a6:3d:e1:72:
                    0d:e0:e5:bd:4c:12:70:4b:88:56:e3:e2:bd:eb:e8:
                    35:80:a0:02:1b:52:16:a5:63:3f:c0:11:95:25:5e:
                    ed:c1:38:d8:f7:3d:a0:a4:5d:d8:0e:13:de:d7:f9:
                    c4:9e:d4:36:55:17:91:22:9f:ba:6b:bd:16:df:18:
                    e2:25:3a:88:60:73:51:83:c7:ef:fc:ea:ae:12:74:
                    4d:bb:d4:df:eb:3f:82:43:33:58:b8:7d:44:5f:12:
                    49:1e:5c:a5:b2:ce:12:73:f1:a8:b8:ab:56:61:37:
                    2f:f6:65:d3:5f:35:dd:d9:12:31:d5:be:3d:85:0a:
                    0d:e4:eb:3d:2c:9b:25:87:7e:7e:83:6f:1f:ed:f4:
                    68:8d:3c:dc:2b:ce:15:94:af:2a:0f:d1:58:01:a7:
                    f4:b7:69:83:c9:90:92:f9:b6:fb:b4:d3:81:f0:50:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:49:E5:76:2D:0E:1B:8F:F0:BE:DD:31:2E:E1:10:B7:D5:3E:CF:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/8149E5762D0E1B8FF0BEDD312EE110B7D53ECFBB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         20:86:59:a7:6c:e2:8b:9e:d1:ba:a2:70:97:8c:9d:b3:58:b1:
         d0:84:0e:ce:18:ca:c7:bf:6b:d5:87:8e:b5:2d:b8:77:96:ca:
         24:12:f1:b4:63:b4:4f:f1:e7:c3:70:95:f9:70:2d:bd:a2:22:
         19:dd:79:f3:26:15:71:5e:8b:d7:4e:5a:d8:c4:a4:fb:4c:5c:
         a5:7c:7c:03:67:c6:a3:3c:01:42:43:d7:d5:b8:91:27:c0:d0:
         95:a2:41:a5:cc:31:ed:3a:04:e3:d3:44:1c:35:ea:22:74:5a:
         09:ce:cb:9d:8f:5a:75:03:ba:e1:73:47:25:bb:55:36:1d:c0:
         e4:c0:d6:a6:88:70:84:c5:ad:c0:f9:9c:10:22:43:92:3e:b8:
         fe:01:10:1a:1d:77:4d:2c:f9:21:d5:1f:d0:2f:f6:e8:1a:54:
         49:8f:95:8c:68:b8:ce:8c:e1:f1:e0:5e:06:2b:29:dd:cb:1a:
         6d:a5:2c:39:59:31:4c:a9:60:12:25:ff:a5:ff:7d:b1:35:70:
         18:81:d1:60:7c:bc:6e:52:1b:d7:77:63:03:79:c7:d0:6b:1b:
         00:67:b2:43:9e:44:45:1e:31:fd:2e:f7:5f:8e:f4:b3:f6:2d:
         76:84:42:cb:a2:ee:5d:0a:26:bc:b2:fc:b4:f3:a4:4a:18:ff:
         02:0f:5a:13
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUcGouj+UK7hMZges1JgirnLWyz8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MDcxODIyMDBaFw0yNTA2MDYxODI3MDBaMDMxMTAvBgNV
BAMTKDgxNDlFNTc2MkQwRTFCOEZGMEJFREQzMTJFRTExMEI3RDUzRUNGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JoxfgHzMFp40zhtQ9E/V83Qe
5rgNb+mDYuUPM/2jTizCXlcVjA9JvCHIKgTBsmIZgb6bA//GBQIAGXOqUS98l8lT
mLzwMYdZcDv1fR3pCzw+Fe+epj3hcg3g5b1MEnBLiFbj4r3r6DWAoAIbUhalYz/A
EZUlXu3BONj3PaCkXdgOE97X+cSe1DZVF5Ein7prvRbfGOIlOohgc1GDx+/86q4S
dE271N/rP4JDM1i4fURfEkkeXKWyzhJz8ai4q1ZhNy/2ZdNfNd3ZEjHVvj2FCg3k
6z0smyWHfn6Dbx/t9GiNPNwrzhWUryoP0VgBp/S3aYPJkJL5tvu004HwUFVzAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBSeV2LQ4bj/C+
3TEu4RC31T7PuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlZu
ZVRuRmRDWFR5Z2Zjam9lQThvY05OTlR2Z1lzY2N0eEpNcHhLRFg1dVQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JW
bmVUbkZkQ1hUeWdmY2pvZUE4b2NOTk5UdmdZc2NjdHhKTXB4S0RYNXVULzAvODE0
OUU1NzYyRDBFMUI4RkYwQkVERDMxMkVFMTEwQjdENTNFQ0ZCQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyNsQMA0EAgACMAcDBQAoBHHEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQh2jANBgkqhkiG9w0BAQsFAAOCAQEAIIZZp2zii57RuqJw
l4yds1ix0IQOzhjKx79r1YeOtS24d5bKJBLxtGO0T/Hnw3CV+XAtvaIiGd158yYV
cV6L105a2MSk+0xcpXx8A2fGozwBQkPX1biRJ8DQlaJBpcwx7ToE49NEHDXqInRa
Cc7LnY9adQO64XNHJbtVNh3A5MDWpohwhMWtwPmcECJDkj64/gEQGh13TSz5IdUf
0C/26BpUSY+VjGi4zozh8eBeBisp3csabaUsOVkxTKlgEiX/pf99sTVwGIHRYHy8
blIb13djA3nH0GsbAGeyQ55ERR4x/S73X470s/YtdoRCy6LuXQomvLL8tPOkShj/
Ag9aEw==
-----END CERTIFICATE-----