Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
File:                     B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer (raw, json)
Hash identifier:          wEHxBmSNL2AUnRCfjM76IvAn2TuODyivFiSA7KSIvu0=
Subject key identifier:   B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       73BC726F171E6D3C4AC907BDC272BABA6CAC5C03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Apr 2024 17:44:37 +0000
Certificate not after:    Mon 28 Apr 2025 17:49:37 +0000
Subordinate resources:    AS: 271744
                          IP: 200.150.244.0/22
                          IP: 2804:8054::/32

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 12:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bc:72:6f:17:1e:6d:3c:4a:c9:07:bd:c2:72:ba:ba:6c:ac:5c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 29 17:44:37 2024 GMT
            Not After : Apr 28 17:49:37 2025 GMT
        Subject: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:61:a7:ef:e4:87:3c:c2:a5:f6:51:82:5d:
                    7d:eb:2e:8d:29:67:9b:4c:dd:c4:6a:d2:92:66:fa:
                    c6:33:24:0e:c0:8c:5e:57:e0:e8:ce:ca:89:b2:26:
                    32:ed:4a:79:17:8a:01:30:a2:aa:e8:b7:aa:5f:d4:
                    73:03:76:c2:2f:02:b0:09:e3:b8:b3:bb:45:2f:de:
                    c6:43:f6:bf:8b:2a:89:6b:09:b0:34:85:c7:f9:64:
                    d0:6e:97:e5:6a:5b:ad:f3:02:0b:4e:40:1f:c8:be:
                    d0:da:13:3b:d1:d1:fd:e7:64:69:fb:db:7d:c4:fb:
                    c4:1e:70:85:f0:74:51:c1:00:22:1b:a5:2a:80:f7:
                    57:4e:0a:0b:0a:1f:94:7f:6c:ad:34:3a:b0:4f:9c:
                    90:e4:09:58:46:69:dd:c7:93:b7:15:bb:84:b1:e3:
                    f3:35:4e:29:4d:67:87:05:9a:76:0f:0f:0c:2d:b2:
                    3f:7c:58:a8:ab:fd:53:38:27:23:b8:58:10:54:b2:
                    cc:3e:c1:e7:91:51:a1:87:71:dd:d8:5a:ff:ca:cc:
                    01:d9:e5:9d:df:58:7a:3d:66:ba:f5:11:97:53:69:
                    87:05:0d:f7:27:7f:24:9d:7e:b1:da:50:8a:d9:da:
                    f0:97:47:c2:ce:15:84:92:f5:c3:22:c9:ae:7b:cd:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.244.0/22
                IPv6:
                  2804:8054::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271744

    Signature Algorithm: sha256WithRSAEncryption
         8d:05:52:8f:80:73:e1:2c:21:b7:10:e5:9d:28:d7:f2:c9:9b:
         37:ac:32:d0:12:6b:3e:ba:fc:e6:42:27:6d:f4:b2:45:b4:18:
         8d:03:c4:91:ee:ce:37:3f:56:b6:23:63:c7:a0:41:70:96:ed:
         77:54:80:8b:8e:19:ee:6d:16:d0:07:18:26:1c:eb:dc:aa:e1:
         89:ee:42:04:1c:e2:33:41:94:e8:7d:f6:e2:73:aa:4d:2c:c5:
         a6:53:58:a8:6e:13:1c:11:b3:f9:a8:88:a4:ff:7b:3e:2f:59:
         35:35:16:30:78:27:82:63:26:d2:02:d1:dc:df:26:55:c4:30:
         16:77:94:4c:a2:85:ad:1d:d4:31:bc:aa:21:60:b8:76:02:23:
         21:d2:58:f1:17:82:1b:20:5b:c4:b1:e3:47:92:0b:51:a6:b3:
         0c:cb:ff:3d:da:f6:ab:da:5d:3e:a4:72:7a:5f:24:af:57:8c:
         d8:d7:70:f7:9a:da:08:0e:22:cb:fa:65:74:7b:ac:f7:ef:22:
         2a:51:6b:c9:c3:1f:1c:2b:0a:55:9b:97:75:1d:34:ec:72:c8:
         ec:8c:0b:73:75:a9:44:35:11:61:71:d3:02:91:2e:cb:8d:b0:
         49:22:2a:49:9a:28:a8:84:ad:6a:1d:5e:52:e4:0d:c5:02:e0:
         e3:30:1d:ad
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUc7xybxcebTxKyQe9wnK6umysXAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjkxNzQ0MzdaFw0yNTA0MjgxNzQ5MzdaMDMxMTAvBgNV
BAMTKEIwQjQ2MjNCQkY5NjkxQUVBMDg5NDFFQzFCN0IwOUQ4MDg0QzRGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMWGn7+SHPMKl9lGCXX3rLo0p
Z5tM3cRq0pJm+sYzJA7AjF5X4OjOyomyJjLtSnkXigEwoqrot6pf1HMDdsIvArAJ
47izu0Uv3sZD9r+LKolrCbA0hcf5ZNBul+VqW63zAgtOQB/IvtDaEzvR0f3nZGn7
233E+8QecIXwdFHBACIbpSqA91dOCgsKH5R/bK00OrBPnJDkCVhGad3Hk7cVu4Sx
4/M1TilNZ4cFmnYPDwwtsj98WKir/VM4JyO4WBBUssw+weeRUaGHcd3YWv/KzAHZ
5Z3fWHo9Zrr1EZdTaYcFDfcnfySdfrHaUIrZ2vCXR8LOFYSS9cMiya57zSYBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwtGI7v5aRrqCJ
QewbewnYCExPgzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Fk
YVdXZ0hwcDJXTDVUMlNRTmJMeDlqbnpRMWY1ejZFZ3JLTmVyRnRYUUMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh
ZGFXV2dIcHAyV0w1VDJTUU5iTHg5am56UTFmNXo2RWdyS05lckZ0WFFDLzAvQjBC
NDYyM0JCRjk2OTFBRUEwODk0MUVDMUI3QjA5RDgwODRDNEY4My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyJb0MA0EAgACMAcDBQAoBIBUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQlgDANBgkqhkiG9w0BAQsFAAOCAQEAjQVSj4Bz4SwhtxDl
nSjX8smbN6wy0BJrPrr85kInbfSyRbQYjQPEke7ONz9WtiNjx6BBcJbtd1SAi44Z
7m0W0AcYJhzr3Krhie5CBBziM0GU6H324nOqTSzFplNYqG4THBGz+aiIpP97Pi9Z
NTUWMHgngmMm0gLR3N8mVcQwFneUTKKFrR3UMbyqIWC4dgIjIdJY8ReCGyBbxLHj
R5ILUaazDMv/Pdr2q9pdPqRyel8kr1eM2Ndw95raCA4iy/pldHus9+8iKlFrycMf
HCsKVZuXdR007HLI7IwLc3WpRDURYXHTApEuy42wSSIqSZooqIStah1eUuQNxQLg
4zAdrQ==
-----END CERTIFICATE-----