Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.cer
File:                     BAC1653FD3B269C09E87C96B345F41B8CBC4483A.cer (raw, json)
Hash identifier:          C9p/J9Tv0GJ7FRouBLvK9kVX00h7c/EEWy9o+lU4/yM=
Subject key identifier:   BA:C1:65:3F:D3:B2:69:C0:9E:87:C9:6B:34:5F:41:B8:CB:C4:48:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C106987A7536BD5A70ECA4B207DD38340F89A35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:07:17 +0000
Certificate not after:    Wed 02 Apr 2025 23:12:17 +0000
Subordinate resources:    AS: 273470
                          IP: 45.173.156.0/24
                          IP: 2804:8f24::/32

Validation:               Failed, certificate revoked on Fri 31 May 2024 18:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:69:87:a7:53:6b:d5:a7:0e:ca:4b:20:7d:d3:83:40:f8:9a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:07:17 2024 GMT
            Not After : Apr  2 23:12:17 2025 GMT
        Subject: CN=BAC1653FD3B269C09E87C96B345F41B8CBC4483A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:e9:d8:50:51:5b:9b:43:9d:8a:10:be:7a:
                    7a:37:40:3f:83:65:5f:3a:7e:2f:97:b1:f2:6a:bf:
                    aa:23:7a:ef:f2:42:94:0e:81:1e:73:a9:f6:cc:aa:
                    da:3e:35:7e:8a:fe:91:97:84:e1:5f:e1:a3:83:ba:
                    f1:3b:bd:28:26:56:c6:23:2e:0f:1d:3c:90:31:92:
                    0a:5a:48:04:a8:a0:48:d4:64:fa:76:9c:ad:10:82:
                    45:39:ee:1d:2d:c6:0d:62:62:b6:b0:12:00:a6:9e:
                    09:c2:5a:64:83:6d:15:0b:7b:29:14:6e:93:52:07:
                    8f:5b:f1:48:d2:6b:2d:67:7f:1e:e9:ed:54:6e:7b:
                    9f:65:1b:05:83:03:73:af:96:f5:eb:97:c3:31:8f:
                    9a:4c:cd:e2:a5:3a:9d:83:d2:7b:cc:f1:d8:1f:52:
                    34:29:01:b2:0f:5d:a6:7e:79:25:05:2b:59:66:89:
                    88:55:05:b7:c8:46:87:10:29:89:85:e0:e5:df:0c:
                    ef:91:dd:8c:27:a5:56:86:f1:7e:86:65:77:52:28:
                    cb:fa:da:22:22:42:94:82:06:b5:6f:0a:81:45:df:
                    d7:26:60:09:63:34:0e:07:7a:94:b5:06:79:96:1c:
                    ed:b8:3a:8e:c8:dc:b1:f2:97:e9:00:48:ec:6c:42:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:C1:65:3F:D3:B2:69:C0:9E:87:C9:6B:34:5F:41:B8:CB:C4:48:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.156.0/24
                IPv6:
                  2804:8f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273470

    Signature Algorithm: sha256WithRSAEncryption
         b6:85:ed:dc:d3:1c:fd:dd:ec:8c:02:1d:1c:53:38:06:88:11:
         3f:ee:e0:31:17:f8:67:9e:ed:af:9f:b9:1e:3b:29:76:6b:24:
         31:89:c4:23:0e:6a:1c:53:5f:30:b5:14:5e:40:4f:10:d3:bd:
         9a:82:d3:d7:5d:aa:6c:4f:ff:db:48:96:c5:3d:c4:1c:ed:25:
         4b:26:17:7b:4a:33:30:07:e5:7c:25:13:64:95:b6:cc:f2:1a:
         9f:42:03:20:f8:7e:7c:a8:64:52:d6:21:f1:5b:97:7c:30:fe:
         fd:1f:9b:11:12:9c:74:3c:c2:4a:c3:e7:55:f7:35:db:86:a0:
         4d:64:25:25:63:a3:22:5e:f8:24:96:9d:b9:5f:9e:24:32:94:
         7c:f4:cf:44:75:a2:17:10:dc:d9:20:a0:c9:16:c5:14:ee:6a:
         02:12:c8:c0:77:40:88:91:8a:9d:0a:b5:cb:02:e4:0f:8d:d7:
         0e:52:72:35:3a:94:c9:02:17:50:f0:88:ce:85:bd:41:fb:73:
         03:2f:e5:ee:29:2b:e6:24:5b:21:9a:7c:60:93:86:be:16:0f:
         62:f2:e3:8f:cd:d7:be:eb:13:c2:94:b3:37:42:50:e8:db:fb:
         ae:ae:b6:21:85:9b:c5:4a:9e:92:4e:97:69:28:e8:2e:8b:ce:
         07:f3:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org