Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BCB1EEB2BEC9F2738BD466A039E586D50D0B2591.cer
File:                     BCB1EEB2BEC9F2738BD466A039E586D50D0B2591.cer (raw, json)
Hash identifier:          ekwcQDo5GnGhMKrXRlY5q8ei8xAANlIi9ZFQgu/BPd4=
Subject key identifier:   BC:B1:EE:B2:BE:C9:F2:73:8B:D4:66:A0:39:E5:86:D5:0D:0B:25:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79E973619014D9838047B301A16DD5F1C212BF9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/1/BCB1EEB2BEC9F2738BD466A039E586D50D0B2591.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:11:17 +0000
Certificate not after:    Thu 03 Apr 2025 15:16:17 +0000
Subordinate resources:    AS: 269614
                          IP: 45.189.212.0/22
                          IP: 2804:6738::/32

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e9:73:61:90:14:d9:83:80:47:b3:01:a1:6d:d5:f1:c2:12:bf:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:11:17 2024 GMT
            Not After : Apr  3 15:16:17 2025 GMT
        Subject: CN=BCB1EEB2BEC9F2738BD466A039E586D50D0B2591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:0e:3b:6a:6f:e4:46:43:26:b9:11:ba:85:
                    45:01:2a:16:17:8d:1c:70:55:d8:6a:a6:2e:1e:7c:
                    c5:fe:d7:6f:18:a5:b9:19:b9:c6:ef:6f:07:2b:9d:
                    37:85:9a:d8:68:26:9c:fa:c5:ac:a5:43:75:55:e0:
                    5e:d0:b7:5a:c3:53:b6:78:62:b6:5c:0c:34:e4:5e:
                    f9:02:01:cd:f3:25:7f:01:53:7d:77:68:be:70:a7:
                    59:2d:c0:52:b3:07:63:1a:99:53:cd:e7:8f:0c:79:
                    b8:c9:11:9f:4f:3d:e6:b8:46:a8:98:ee:8a:e3:39:
                    50:ed:df:8b:86:f9:8e:ab:ad:a6:ef:1b:2f:b8:35:
                    43:9b:ee:e2:f5:26:e4:4c:a3:a4:39:4c:79:13:5f:
                    a2:a6:b5:6a:16:a7:a7:dc:d0:cc:8e:10:fc:c1:ec:
                    98:49:cd:5d:4e:fa:f8:9a:27:fb:5f:e4:1c:13:dc:
                    a9:70:fa:85:aa:40:82:a6:07:41:58:6b:be:47:01:
                    f3:af:5b:ab:f2:ac:5b:ac:3f:42:b3:12:5f:cd:e3:
                    5a:bc:60:f8:c5:e0:2c:59:67:6c:e8:75:68:44:1f:
                    41:d4:cb:b9:58:32:85:83:38:28:57:0e:1f:02:02:
                    29:57:8d:2b:99:f0:b3:8d:0b:75:30:f9:96:c8:bf:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:B1:EE:B2:BE:C9:F2:73:8B:D4:66:A0:39:E5:86:D5:0D:0B:25:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/1/BCB1EEB2BEC9F2738BD466A039E586D50D0B2591.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.212.0/22
                IPv6:
                  2804:6738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269614

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:ba:53:ab:06:07:ef:49:c3:d8:3d:65:eb:1f:3c:cb:dd:
         1d:c6:e3:2c:22:80:df:14:7b:f0:7f:07:ce:e0:00:71:e7:4e:
         32:6a:86:74:4d:18:53:1c:11:7b:d9:9c:67:4c:a8:4f:67:3a:
         6e:18:62:2d:83:e4:00:bd:e2:65:6e:24:a9:1f:a9:1b:fb:ce:
         8f:ff:55:6d:7b:e9:b6:41:ed:2d:b8:77:20:ae:f3:c0:80:20:
         ba:36:4d:d3:a9:c3:ba:5d:e0:23:2e:92:4e:b0:5d:76:71:f9:
         64:c1:3e:e3:35:7f:a9:e2:f0:3f:67:70:6d:33:5c:d0:96:4a:
         b9:e8:14:ae:a9:40:49:7c:6e:d0:8e:8f:c9:fa:d6:55:b7:31:
         3e:f6:aa:47:b7:23:a2:fa:85:db:eb:69:e9:cb:e6:17:d1:93:
         fb:c2:27:15:f5:ff:91:59:6b:8f:a4:f9:07:bd:a9:b0:90:64:
         db:c5:f1:df:fd:d2:cf:e2:d6:3d:88:11:eb:48:05:6d:9d:58:
         68:6b:6b:ac:a7:f2:1e:7b:54:2d:0b:c5:d8:3e:2c:ea:c2:a6:
         d7:06:6c:be:9a:b9:71:c2:e9:99:5a:73:90:27:b1:9d:a4:d1:
         5a:86:f3:60:e1:a0:b4:97:4f:9c:6b:82:b5:13:5e:34:76:14:
         7f:62:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 09:46:34 2024 by rpki-client on console-ams.rpki-client.org