Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAAB4A91FAB131E4E8E5937E4E853FBD64D6708E.cer
File:                     BAAB4A91FAB131E4E8E5937E4E853FBD64D6708E.cer (raw, json)
Hash identifier:          nRNt20Toil+FfVLImiTBdcxZyoBrQHiBBlHgqWlarao=
Subject key identifier:   BA:AB:4A:91:FA:B1:31:E4:E8:E5:93:7E:4E:85:3F:BD:64:D6:70:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       028135474A2D7E7C7B97186E744E5596B58E260F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/BAAB4A91FAB131E4E8E5937E4E853FBD64D6708E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 22:57:57 +0000
Certificate not after:    Thu 10 Apr 2025 23:02:57 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32
Validation:               Failed, certificate revoked on Fri 26 Apr 2024 22:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:81:35:47:4a:2d:7e:7c:7b:97:18:6e:74:4e:55:96:b5:8e:26:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 11 22:57:57 2024 GMT
            Not After : Apr 10 23:02:57 2025 GMT
        Subject: CN=BAAB4A91FAB131E4E8E5937E4E853FBD64D6708E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:41:d7:08:b4:32:55:c1:a1:fa:3d:f1:ed:
                    cb:72:c0:92:b2:c1:a4:37:9e:69:3d:bc:22:42:05:
                    f1:d2:28:12:7a:09:4b:0b:7a:87:3e:e2:a3:5d:b2:
                    5e:ee:d2:fd:d1:29:c1:26:36:ff:ff:03:e7:4f:d9:
                    92:5a:ae:8b:8f:ed:04:67:6b:fd:18:79:11:a0:27:
                    96:39:e7:e9:f4:4f:00:06:81:fa:d6:d9:b4:2e:1d:
                    5f:37:7b:ba:b3:94:0d:cc:64:98:f6:8b:58:30:0c:
                    14:98:c0:c2:01:91:c1:6e:36:0a:bf:35:83:7b:ff:
                    df:95:ea:eb:85:ba:8a:44:d1:bb:d0:bb:d2:d6:5a:
                    c2:fb:24:ee:b4:27:ae:d0:88:7b:1a:58:ec:21:9a:
                    29:7f:a9:8a:67:10:85:bb:a6:07:6e:33:5f:4f:93:
                    f8:cc:aa:73:2f:71:53:7f:ef:00:5d:35:90:3c:0c:
                    7c:10:b6:04:21:2d:ba:39:a5:3c:c9:9f:33:62:7a:
                    f8:79:a8:6b:4f:e6:57:8c:f7:d4:66:7b:7c:6d:47:
                    1a:ca:ce:c5:de:79:c4:f2:e7:10:e9:14:ae:5c:bf:
                    c2:75:58:6c:c2:86:d7:73:5b:e7:80:57:f8:80:d7:
                    38:04:36:95:eb:60:b7:0d:ea:59:7b:25:c6:13:76:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:AB:4A:91:FA:B1:31:E4:E8:E5:93:7E:4E:85:3F:BD:64:D6:70:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/BAAB4A91FAB131E4E8E5937E4E853FBD64D6708E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:ec:0a:e5:93:cf:ea:36:51:38:81:ad:f2:ea:89:fe:66:
         b3:06:9c:65:18:9b:68:42:16:d7:82:2e:5c:21:8d:6f:4b:cf:
         3d:35:da:41:18:f7:fb:d5:a6:e0:1f:e3:5f:aa:ce:24:cf:a6:
         b4:c9:67:ac:29:29:5c:1a:f6:90:bd:08:2f:3f:c8:f4:03:85:
         6d:60:2d:ad:46:11:fa:32:b7:8e:91:96:62:b2:0d:3d:78:80:
         d9:8c:d4:9a:a3:bc:85:04:57:b9:9d:17:05:cd:93:14:9b:d1:
         8b:00:82:d3:64:ec:de:ee:55:ee:8a:00:b7:16:62:68:93:60:
         07:24:bc:b2:cf:21:0c:07:d4:c0:ca:bd:dd:ca:b7:ee:23:06:
         34:a3:f1:f8:9a:34:1f:2f:c4:b2:04:95:d2:35:0b:84:85:d8:
         e8:44:4b:91:d5:28:40:db:07:32:03:62:79:ce:7c:8a:6b:52:
         66:17:21:28:53:65:0d:66:fc:e8:75:29:07:00:37:ce:ec:11:
         ca:ff:95:00:00:57:7b:34:10:c3:db:14:1f:20:be:59:3b:4a:
         6e:c8:be:4a:ca:93:19:36:d5:15:0c:35:ca:04:d2:50:32:43:
         5c:a3:d0:cc:84:61:dc:f6:cb:f4:cd:34:df:dc:58:d8:f9:8b:
         95:98:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:07:08 2025 by rpki-client