Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B1B62F93E6B3FB9F74C377A97CB1344F4F167A2E.cer
File:                     B1B62F93E6B3FB9F74C377A97CB1344F4F167A2E.cer (raw, json)
Hash identifier:          ESB0dZ/ULq39ug5DYvJloWYUy4+6UEmMNdlMr5fg1aE=
Subject key identifier:   B1:B6:2F:93:E6:B3:FB:9F:74:C3:77:A9:7C:B1:34:4F:4F:16:7A:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57A98A7FF01E62B02B1B83976027E6048442DCC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/B1B62F93E6B3FB9F74C377A97CB1344F4F167A2E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Oct 2024 01:54:55 +0000
Certificate not after:    Fri 10 Oct 2025 01:59:55 +0000
Subordinate resources:    AS: 270928
                          IP: 190.123.2.0/23
                          IP: 2804:73a4::/32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a9:8a:7f:f0:1e:62:b0:2b:1b:83:97:60:27:e6:04:84:42:dc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 11 01:54:55 2024 GMT
            Not After : Oct 10 01:59:55 2025 GMT
        Subject: CN=B1B62F93E6B3FB9F74C377A97CB1344F4F167A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:12:45:1a:23:7a:a7:27:c2:5e:43:d7:c4:
                    6e:cc:b1:e5:b1:c0:e1:e6:3e:50:98:57:16:b0:d0:
                    ab:e5:b0:a4:9f:2d:59:bc:c3:7d:c3:29:b3:54:04:
                    71:96:9b:57:43:89:7e:4c:81:59:9b:76:7b:58:d3:
                    7b:91:c7:6e:b7:5c:4a:79:fb:9f:f5:62:03:8d:ed:
                    96:8a:56:0a:8c:39:ce:17:07:88:24:ef:27:c1:d1:
                    f9:21:24:d3:5f:d7:6f:07:6e:5a:be:e6:98:42:08:
                    ca:42:0b:68:84:40:62:ee:b8:a4:d4:8d:f4:0b:65:
                    ec:1a:61:a5:30:25:e5:3a:88:71:a5:fc:2b:c0:a2:
                    76:b6:e7:7a:69:43:0b:d5:13:ad:2b:c4:88:6b:5d:
                    ea:03:ee:dc:ed:f5:c2:67:84:db:d2:96:88:3e:a7:
                    0e:e2:6e:77:d4:82:f8:34:55:56:63:c8:61:f4:70:
                    97:df:0b:90:69:df:79:57:9e:49:2c:71:77:fb:8d:
                    f9:1d:15:b1:66:55:51:0a:e8:0e:80:dc:e2:3d:d2:
                    8d:20:07:82:9a:15:04:24:2f:8e:8b:6f:4d:9c:35:
                    fb:5a:59:15:b8:d3:3c:90:b7:cf:16:8f:42:fd:99:
                    10:d9:1e:5e:95:8b:65:fe:c3:33:b7:97:94:d1:3c:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:B6:2F:93:E6:B3:FB:9F:74:C3:77:A9:7C:B1:34:4F:4F:16:7A:2E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/B1B62F93E6B3FB9F74C377A97CB1344F4F167A2E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.2.0/23
                IPv6:
                  2804:73a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270928

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:89:51:f9:ec:a9:4e:88:f9:fc:7f:50:fc:2f:bf:bf:56:
         90:f3:79:a0:10:c7:79:bf:0a:17:a8:7d:66:03:7f:fa:66:61:
         a9:52:e9:ac:92:31:cf:9b:f6:1e:ca:f8:e5:53:b1:89:80:9d:
         32:4f:20:af:b0:d4:d1:be:6b:ed:ca:63:ea:01:9c:b6:49:6a:
         08:97:5a:a1:2c:2e:f1:bf:38:24:30:92:14:82:e7:58:01:44:
         9f:a8:4e:bf:7e:6d:41:fa:07:f9:27:d1:2a:45:fa:c1:e8:33:
         61:51:04:91:c0:a6:d1:7a:ae:83:cc:0a:d3:4a:e6:25:0b:95:
         58:bf:95:db:9e:dc:e8:17:5c:20:d3:c5:6e:51:67:86:b6:29:
         ec:b1:91:42:7c:0c:8a:78:d3:a1:c7:d3:48:a7:b6:82:1e:c7:
         5f:6a:34:6a:47:c4:c7:93:3f:c1:df:be:c4:07:76:2e:05:24:
         78:f7:3f:f8:b3:82:7f:72:8d:d6:3b:fc:d9:31:3d:cf:5a:59:
         96:83:cd:09:f5:ea:2c:05:5f:4c:8e:6c:96:bd:63:05:db:63:
         09:74:b6:c9:05:38:a9:99:ca:b6:8e:ef:5f:8b:91:df:29:57:
         9c:e1:60:a1:68:9a:56:93:d6:7f:9a:ab:0b:53:f7:da:7b:cd:
         f7:b5:a0:0e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUV6mKf/AeYrArG4OXYCfmBIRC3MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMTEwMTU0NTVaFw0yNTEwMTAwMTU5NTVaMDMxMTAvBgNV
BAMTKEIxQjYyRjkzRTZCM0ZCOUY3NEMzNzdBOTdDQjEzNDRGNEYxNjdBMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpihJFGiN6pyfCXkPXxG7MseWx
wOHmPlCYVxaw0KvlsKSfLVm8w33DKbNUBHGWm1dDiX5MgVmbdntY03uRx263XEp5
+5/1YgON7ZaKVgqMOc4XB4gk7yfB0fkhJNNf128Hblq+5phCCMpCC2iEQGLuuKTU
jfQLZewaYaUwJeU6iHGl/CvAona253ppQwvVE60rxIhrXeoD7tzt9cJnhNvSlog+
pw7ibnfUgvg0VVZjyGH0cJffC5Bp33lXnkkscXf7jfkdFbFmVVEK6A6A3OI90o0g
B4KaFQQkL46Lb02cNftaWRW40zyQt88Wj0L9mRDZHl6Vi2X+wzO3l5TRPMVlAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxti+T5rP7n3TD
d6l8sTRPTxZ6LjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHFK
UEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0ZtWHYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rx
SlBBUzl4TGFTa1pXZThCbjEyVEU3ZXBSZEFhdWNTc3RYRU1iTFNGbVh2LzAvQjFC
NjJGOTNFNkIzRkI5Rjc0QzM3N0E5N0NCMTM0NEY0RjE2N0EyRS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBvnsCMA0EAgACMAcDBQAoBHOkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiUDANBgkqhkiG9w0BAQsFAAOCAQEAUdSJUfnsqU6I+fx/
UPwvv79WkPN5oBDHeb8KF6h9ZgN/+mZhqVLprJIxz5v2Hsr45VOxiYCdMk8gr7DU
0b5r7cpj6gGctklqCJdaoSwu8b84JDCSFILnWAFEn6hOv35tQfoH+SfRKkX6wegz
YVEEkcCm0Xqug8wK00rmJQuVWL+V257c6BdcINPFblFnhrYp7LGRQnwMinjTocfT
SKe2gh7HX2o0akfEx5M/wd++xAd2LgUkePc/+LOCf3KN1jv82TE9z1pZloPNCfXq
LAVfTI5slr1jBdtjCXS2yQU4qZnKto7vX4uR3ylXnOFgoWiaVpPWf5qrC1P32nvN
97WgDg==
-----END CERTIFICATE-----
Generated at Wed Oct 23 16:24:28 2024 by rpki-client on console-fra.rpki-client.org