Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
File:                     149F2053828E9D6B8CB095EF3F1D72541252D364.cer (raw, json)
Hash identifier:          yO0ldZmLobECsSAY7FV72V3TBT17MjbuUhLj0WtjDxk=
Subject key identifier:   14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AB9CC69131646B89DD77CEE79EA06DDFB260F46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 23:05:20 +0000
Certificate not after:    Thu 27 Jun 2024 23:10:20 +0000
Subordinate resources:    AS: 52545
                          IP: 131.72.48.0/22
                          IP: 168.121.168.0/22
                          IP: 170.82.168.0/22
                          IP: 179.107.80.0/22
                          IP: 2804:e1c::/32

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 22:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b9:cc:69:13:16:46:b8:9d:d7:7c:ee:79:ea:06:dd:fb:26:0f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 23:05:20 2023 GMT
            Not After : Jun 27 23:10:20 2024 GMT
        Subject: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:4a:e9:4a:2a:e3:65:cb:67:d8:1a:8a:bd:
                    20:9a:1a:97:f9:31:ed:f8:fa:e1:10:e3:d0:5b:95:
                    b5:a6:c5:b4:a9:d1:89:ef:1d:08:3a:52:d0:85:8a:
                    51:e3:86:7d:ba:9d:18:ac:73:4c:8f:84:4a:08:82:
                    6e:0b:ab:c2:5a:9e:c7:58:94:a9:56:f9:45:97:92:
                    78:50:fa:36:91:d7:cb:12:38:86:6a:22:4f:22:6b:
                    b9:ac:bf:f2:a8:8e:25:a8:44:68:b0:b5:ee:0e:98:
                    00:dd:fe:25:7b:f2:40:f1:2b:23:5a:6e:34:0e:da:
                    73:17:9d:00:a0:a2:0e:9a:56:58:2c:60:c0:f4:93:
                    da:83:e0:75:fa:78:e0:65:5d:ef:c1:37:99:94:36:
                    9e:b3:2c:0c:1d:2c:9a:2e:86:8b:9f:12:88:c4:6a:
                    d2:00:34:1b:e2:2c:34:52:1d:7a:75:1f:36:8f:d0:
                    d1:5c:93:bc:de:88:d8:d5:dc:8b:5c:3d:9b:56:06:
                    6f:0b:46:ae:50:8e:b2:3c:eb:3a:de:e5:61:ea:de:
                    3b:48:0b:38:5e:ba:77:a4:ca:30:33:50:cc:a7:10:
                    3b:64:64:43:c6:d8:da:af:36:d3:83:90:89:5d:e5:
                    27:d9:92:92:d3:7a:0b:98:8b:2a:fc:46:15:ec:52:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22
                  168.121.168.0/22
                  170.82.168.0/22
                  179.107.80.0/22
                IPv6:
                  2804:e1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52545

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:04:e6:c3:79:ac:00:d1:66:32:36:cb:2f:dd:6f:b9:a3:
         cd:a2:2d:8f:0b:a0:14:fa:f9:2f:95:dc:d8:80:29:02:01:75:
         5b:07:f4:3a:2b:82:5e:ae:b0:b4:28:f9:c2:fa:ba:19:df:e7:
         da:98:2a:52:44:40:fc:51:34:ed:8d:ea:c8:06:23:dd:c8:35:
         5f:28:1d:18:79:ce:60:2a:bd:c2:a4:97:62:b2:77:5d:f8:a4:
         11:49:d3:71:97:c9:c8:24:80:ea:19:69:0b:17:fc:31:c0:63:
         33:72:00:dc:c1:e2:3c:1a:cb:0f:95:fc:01:77:22:62:22:31:
         9d:2b:c1:0e:20:54:68:4d:fa:47:bf:6b:a0:be:52:ff:5b:0d:
         fa:1e:5c:31:df:b0:bb:41:ac:6b:7c:72:8c:c7:23:7e:c9:1d:
         7c:f2:b5:4c:d4:40:3e:e2:a4:fb:2a:2d:2a:85:47:ae:14:76:
         9c:0a:a7:c5:f1:74:08:77:13:ff:77:6e:78:e8:af:ac:fc:4e:
         98:54:4e:44:bf:a7:f7:ba:1b:e0:85:4a:4c:ef:49:df:12:bb:
         c3:64:52:54:74:35:4d:ab:cb:54:6d:1b:aa:ff:87:49:36:e6:
         3e:70:1f:31:ba:39:73:d3:ac:53:ce:83:cf:8e:ac:91:50:3e:
         dc:7c:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:04 2024 by rpki-client on console.sobornost.net