Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.cer
File:                     B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.cer (raw, json)
Hash identifier:          t5ktD7JsZiK5YpN8/kqvbxrc/XtbCeeaV2wBW8rEXFM=
Subject key identifier:   B9:4E:D0:ED:F9:8C:0A:5C:FD:8F:E4:10:85:89:24:05:A1:FB:2D:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44DCF1156CF7E4D07D79690F53F04E405F320A96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jul 2024 19:45:14 +0000
Certificate not after:    Wed 30 Jul 2025 19:50:14 +0000
Subordinate resources:    AS: 263024
                          IP: 186.249.80.0/20
                          IP: 2804:a20::/32

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 06:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dc:f1:15:6c:f7:e4:d0:7d:79:69:0f:53:f0:4e:40:5f:32:0a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 31 19:45:14 2024 GMT
            Not After : Jul 30 19:50:14 2025 GMT
        Subject: CN=B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:4a:f9:47:d5:b1:25:05:0e:40:c3:68:39:
                    0f:59:65:28:f8:bf:3f:10:02:a0:56:83:e2:ed:eb:
                    6d:33:94:af:55:0e:40:12:c6:bf:02:73:9b:72:04:
                    a5:14:70:d5:b2:c3:a4:57:b3:3b:a6:63:93:64:88:
                    e4:e2:29:41:c6:20:14:d9:93:7d:c2:f0:67:7a:aa:
                    c0:40:29:39:e7:9d:c2:5f:3a:65:35:e6:5e:67:97:
                    2d:48:a0:78:3d:07:36:c8:5e:92:35:b7:bb:cd:e0:
                    ed:49:bf:47:13:71:36:82:23:59:aa:e9:08:89:29:
                    ac:6c:31:3f:fb:78:29:16:85:ca:94:f3:d0:5d:f2:
                    2f:23:29:84:60:31:4c:f6:89:d5:5d:25:af:1e:b7:
                    e9:cb:86:a4:29:d3:97:36:5b:bb:7a:24:e1:77:4e:
                    12:4b:82:0d:ec:2b:66:29:f7:00:ce:c0:03:b2:e7:
                    18:d3:d3:1e:57:f0:37:a2:e7:14:65:a2:f2:e2:f0:
                    5c:60:1c:67:f6:d2:a6:a4:7e:ee:03:84:b1:e8:23:
                    6f:9d:e9:d0:de:17:fe:f8:b4:80:7a:f1:ec:e5:77:
                    47:32:0e:e6:76:4a:d6:c2:2b:1d:09:c3:9d:d9:a8:
                    d3:87:a2:03:da:e9:93:f3:d8:b3:f5:03:24:b9:a8:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:4E:D0:ED:F9:8C:0A:5C:FD:8F:E4:10:85:89:24:05:A1:FB:2D:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/1/B94ED0EDF98C0A5CFD8FE41085892405A1FB2D0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.80.0/20
                IPv6:
                  2804:a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263024

    Signature Algorithm: sha256WithRSAEncryption
         26:33:59:b5:d6:aa:a1:ec:27:0a:3e:e4:f0:43:0f:8a:86:01:
         ee:6e:f3:24:36:7b:16:e8:f6:56:10:c3:d4:9d:f4:d2:8b:01:
         a9:72:f9:ad:a8:4a:e1:4c:e4:4e:16:e2:83:dd:43:7b:87:62:
         c9:b7:db:ee:12:7e:60:7e:30:99:d1:56:48:09:2a:81:4b:de:
         54:2b:65:95:8c:35:d4:91:05:57:91:20:18:72:8a:0a:38:32:
         a4:f0:d8:6e:9f:f4:c9:e3:5d:03:41:f5:06:60:f7:eb:97:0f:
         30:15:f1:6b:37:8f:22:19:31:db:f8:f8:c7:ca:7e:5c:2e:a8:
         b7:4a:1a:51:ff:41:91:4b:7b:72:63:ee:48:2e:28:8e:65:cc:
         94:03:2f:33:b2:e0:94:b4:9a:7b:a2:6c:be:f3:5d:78:da:f8:
         0c:a3:06:13:67:c7:84:5d:2c:51:80:e3:ca:7c:d9:90:0c:86:
         1b:07:c5:8d:07:4f:89:58:b8:a7:7d:11:8b:ae:61:f0:1e:99:
         11:2e:99:44:74:90:6f:25:e1:56:2a:f9:db:9a:f0:28:ea:78:
         cc:16:1e:8c:21:26:a8:58:80:04:e0:15:0a:34:01:39:c8:30:
         c5:14:b2:a6:13:a1:2a:54:b6:c5:2d:dd:0a:2c:04:76:7d:f1:
         cc:4f:2a:fc
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURNzxFWz35NB9eWkPU/BOQF8yCpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MzExOTQ1MTRaFw0yNTA3MzAxOTUwMTRaMDMxMTAvBgNV
BAMTKEI5NEVEMEVERjk4QzBBNUNGRDhGRTQxMDg1ODkyNDA1QTFGQjJEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComEr5R9WxJQUOQMNoOQ9ZZSj4
vz8QAqBWg+Lt620zlK9VDkASxr8Cc5tyBKUUcNWyw6RXszumY5NkiOTiKUHGIBTZ
k33C8Gd6qsBAKTnnncJfOmU15l5nly1IoHg9BzbIXpI1t7vN4O1Jv0cTcTaCI1mq
6QiJKaxsMT/7eCkWhcqU89Bd8i8jKYRgMUz2idVdJa8et+nLhqQp05c2W7t6JOF3
ThJLgg3sK2Yp9wDOwAOy5xjT0x5X8Dei5xRlovLi8FxgHGf20qakfu4DhLHoI2+d
6dDeF/74tIB68ezld0cyDuZ2StbCKx0Jw53ZqNOHogPa6ZPz2LP1AyS5qK+FAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5TtDt+YwKXP2P
5BCFiSQFofstCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9H
ejJDZ1duQlVidGV3R1p3ZmRua2t0cGNUOEZ2VEJtVzd0cmNwRkMxZFovMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9H
ejJDZ1duQlVidGV3R1p3ZmRua2t0cGNUOEZ2VEJtVzd0cmNwRkMxZFovMS9COTRF
RDBFREY5OEMwQTVDRkQ4RkU0MTA4NTg5MjQwNUExRkIyRDBCLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAS6+VAwDQQCAAIwBwMFACgECiAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBANwMA0GCSqGSIb3DQEBCwUAA4IBAQAmM1m11qqh7CcKPuTw
Qw+KhgHubvMkNnsW6PZWEMPUnfTSiwGpcvmtqErhTOROFuKD3UN7h2LJt9vuEn5g
fjCZ0VZICSqBS95UK2WVjDXUkQVXkSAYcooKODKk8Nhun/TJ410DQfUGYPfrlw8w
FfFrN48iGTHb+PjHyn5cLqi3ShpR/0GRS3tyY+5ILiiOZcyUAy8zsuCUtJp7omy+
81142vgMowYTZ8eEXSxRgOPKfNmQDIYbB8WNB0+JWLinfRGLrmHwHpkRLplEdJBv
JeFWKvnbmvAo6njMFh6MISaoWIAE4BUKNAE5yDDFFLKmE6EqVLbFLd0KLAR2ffHM
Tyr8
-----END CERTIFICATE-----
Generated at Tue Nov 12 08:31:06 2024 by rpki-client on console-fra.rpki-client.org