Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B148BFE58A942F8B03275AFE2EB6E9DE4653CC9D.cer
File:                     B148BFE58A942F8B03275AFE2EB6E9DE4653CC9D.cer (raw, json)
Hash identifier:          btLr1ZcGoXsjWu5IgvlJL9qXovxsJdFm+wzV9b8zmkQ=
Subject key identifier:   B1:48:BF:E5:8A:94:2F:8B:03:27:5A:FE:2E:B6:E9:DE:46:53:CC:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24D366F59A30B9B24120C07085CB714E1A15BAD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/B148BFE58A942F8B03275AFE2EB6E9DE4653CC9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 17:44:58 +0000
Certificate not after:    Tue 22 Apr 2025 17:49:58 +0000
Subordinate resources:    AS: 270563
                          IP: 24.152.28.0/22
                          IP: 2804:6de8::/32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 09:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d3:66:f5:9a:30:b9:b2:41:20:c0:70:85:cb:71:4e:1a:15:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 17:44:58 2024 GMT
            Not After : Apr 22 17:49:58 2025 GMT
        Subject: CN=B148BFE58A942F8B03275AFE2EB6E9DE4653CC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:ca:82:2f:33:ac:b2:11:6e:db:7e:61:6d:
                    57:fc:42:6a:3f:d1:9d:0a:5b:ac:fa:61:4c:82:80:
                    66:e0:17:74:57:40:31:e3:83:db:fa:a2:ee:89:48:
                    8a:cc:19:a2:64:09:c9:c0:85:04:5c:29:ea:6f:70:
                    5c:2a:86:d8:b4:b2:ee:25:7a:e2:d4:c4:c5:4d:db:
                    35:7b:3a:fd:5d:2d:53:13:d7:60:c7:36:b2:a2:53:
                    cf:d3:aa:0b:2d:7b:94:3d:e0:fc:f2:31:7c:8f:1f:
                    c0:fd:f2:42:a5:97:48:b2:ce:29:16:73:17:6b:5e:
                    e6:7e:ce:3f:a7:6b:90:b7:53:08:48:35:27:65:a3:
                    bd:a2:02:c4:dd:0e:78:08:c6:fd:60:9d:48:68:84:
                    d8:cd:a8:28:28:6e:e3:6c:29:1b:75:c0:2b:d9:7d:
                    3d:b0:06:d5:e5:32:85:c2:39:00:a3:37:ed:b8:22:
                    25:7a:0b:96:88:40:21:5b:de:75:0c:eb:dc:34:9f:
                    f9:cd:63:73:73:fb:73:60:1e:9b:15:97:25:8c:1a:
                    49:ec:14:ec:a5:53:e1:aa:6a:77:7d:45:58:47:b3:
                    99:fc:5a:a0:e2:d9:d8:e3:22:9d:74:3d:ef:c6:58:
                    31:01:65:a2:e3:14:3e:8a:00:13:47:04:f5:68:59:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:48:BF:E5:8A:94:2F:8B:03:27:5A:FE:2E:B6:E9:DE:46:53:CC:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/B148BFE58A942F8B03275AFE2EB6E9DE4653CC9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.28.0/22
                IPv6:
                  2804:6de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270563

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:c0:57:c9:35:b3:4a:95:dd:d1:40:d3:3e:92:9e:c2:73:
         24:d5:79:a2:4a:54:89:37:2a:2e:42:2d:5b:9b:e2:3c:56:4e:
         03:15:ad:57:02:9f:03:93:65:8c:51:bc:07:56:b8:d9:fb:54:
         bf:7c:7e:eb:39:4c:a3:3c:c6:76:e6:a1:60:b2:8e:0c:36:82:
         bc:d5:92:aa:60:21:e9:9c:23:57:f4:6d:e9:48:32:41:09:7a:
         f0:0c:af:20:4e:0d:b7:4c:b2:8a:53:c5:16:86:ec:a3:7e:4e:
         f9:75:f3:94:0b:3d:fe:01:4c:de:e9:55:f1:0e:03:ef:b3:6e:
         48:af:e2:e7:8d:29:92:c8:6e:d3:15:04:08:ec:5c:6a:ac:dd:
         a1:41:e7:ad:c3:9e:06:83:c3:a6:22:29:fc:37:58:f0:4d:c6:
         d9:e8:11:0e:a3:ae:30:78:69:cb:69:b3:1c:09:e1:0e:96:cb:
         46:86:48:82:9f:12:00:a1:9e:b2:ce:31:b3:43:4f:27:e5:d2:
         ab:36:3b:94:f9:bf:93:78:56:4c:1f:df:eb:4b:d2:f6:bf:2a:
         66:81:23:36:e6:9b:15:cc:1a:02:52:53:02:bf:ae:14:e9:f6:
         df:58:86:9b:74:6d:6c:9b:a9:71:e9:ff:d3:b1:9d:6a:d6:aa:
         40:9b:03:10
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJNNm9ZowubJBIMBwhctxThoVutkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MjMxNzQ0NThaFw0yNTA0MjIxNzQ5NThaMDMxMTAvBgNV
BAMTKEIxNDhCRkU1OEE5NDJGOEIwMzI3NUFGRTJFQjZFOURFNDY1M0NDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoMqCLzOsshFu235hbVf8Qmo/
0Z0KW6z6YUyCgGbgF3RXQDHjg9v6ou6JSIrMGaJkCcnAhQRcKepvcFwqhti0su4l
euLUxMVN2zV7Ov1dLVMT12DHNrKiU8/Tqgste5Q94PzyMXyPH8D98kKll0iyzikW
cxdrXuZ+zj+na5C3UwhINSdlo72iAsTdDngIxv1gnUhohNjNqCgobuNsKRt1wCvZ
fT2wBtXlMoXCOQCjN+24IiV6C5aIQCFb3nUM69w0n/nNY3Nz+3NgHpsVlyWMGkns
FOylU+Gqand9RVhHs5n8WqDi2djjIp10Pe/GWDEBZaLjFD6KABNHBPVoWSidAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxSL/lipQviwMn
Wv4utuneRlPMnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNB
ZWNKVHlEWGJxMkd0VjNXYkJ1aVJVeDhaTG1QWmszU1RqYmhvYW12SzgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JT
QWVjSlR5RFhicTJHdFYzV2JCdWlSVXg4WkxtUFprM1NUamJob2Ftdks4LzAvQjE0
OEJGRTU4QTk0MkY4QjAzMjc1QUZFMkVCNkU5REU0NjUzQ0M5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCGJgcMA0EAgACMAcDBQAoBG3oMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQg4zANBgkqhkiG9w0BAQsFAAOCAQEATZfAV8k1s0qV3dFA
0z6SnsJzJNV5okpUiTcqLkItW5viPFZOAxWtVwKfA5NljFG8B1a42ftUv3x+6zlM
ozzGduahYLKODDaCvNWSqmAh6ZwjV/Rt6UgyQQl68AyvIE4Nt0yyilPFFobso35O
+XXzlAs9/gFM3ulV8Q4D77NuSK/i540pkshu0xUECOxcaqzdoUHnrcOeBoPDpiIp
/DdY8E3G2egRDqOuMHhpy2mzHAnhDpbLRoZIgp8SAKGess4xs0NPJ+XSqzY7lPm/
k3hWTB/f60vS9r8qZoEjNuabFcwaAlJTAr+uFOn231iGm3RtbJupcen/07Gdataq
QJsDEA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:39 2024 by rpki-client on console-fra.rpki-client.org