Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
File:                     BD0B43860A0889125EAC647FBE9712DB5CD78027.cer (raw, json)
Hash identifier:          Fef1k1lHEsBrovQ3NN6DNGXITNdwzqCvPuaGrWEmRzE=
Subject key identifier:   BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F6109CD8DD3062AD37562E736A76449A69F0AC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 17:43:31 +0000
Certificate not after:    Tue 02 Dec 2025 17:48:31 +0000
Subordinate resources:    AS: 268131
                          IP: 45.169.188.0/22
                          IP: 2804:5878::/32
Validation:               Failed, certificate revoked on Mon 27 Jan 2025 20:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:61:09:cd:8d:d3:06:2a:d3:75:62:e7:36:a7:64:49:a6:9f:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 17:43:31 2024 GMT
            Not After : Dec  2 17:48:31 2025 GMT
        Subject: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:e4:36:b1:01:ea:db:33:49:05:1e:1a:f7:
                    6c:90:56:34:ae:bc:45:5e:f2:cc:80:c9:ff:5a:cb:
                    10:79:75:93:ce:6f:b3:2f:f9:e6:9a:77:80:24:b8:
                    97:22:a5:9a:57:99:3c:a2:22:eb:bf:22:81:43:8c:
                    93:5b:4c:de:62:b9:5d:c5:3c:72:00:16:7c:0c:fa:
                    2a:46:d2:1e:ab:df:a1:b8:09:5b:0b:85:80:22:c6:
                    b3:a4:32:13:7f:2b:51:cb:1e:38:7a:5e:cd:ba:b8:
                    d1:a1:32:6a:cf:34:22:ac:c9:e4:51:45:d3:17:62:
                    1d:6c:71:d0:a9:4c:75:8d:2e:a5:b8:79:79:2d:da:
                    c3:d2:62:1e:84:5c:84:6b:29:a1:c0:16:6e:18:1d:
                    18:f9:74:4d:bc:d5:29:61:d6:1e:e2:25:79:d3:b6:
                    3a:06:bb:42:6d:3b:b6:35:da:91:d5:03:07:cf:c5:
                    83:14:15:5f:ca:79:c8:49:8a:f2:0d:00:a9:53:5a:
                    2a:3c:15:4e:8e:64:3a:c4:89:f4:93:62:5d:86:13:
                    82:aa:7f:0a:41:dd:6d:8c:ed:84:99:51:5d:bb:ea:
                    95:14:16:ae:ac:c5:23:eb:7b:4a:21:d6:3d:6e:4b:
                    0c:c7:27:82:0e:74:0c:cd:a1:ec:43:ed:7a:56:89:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.188.0/22
                IPv6:
                  2804:5878::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268131

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:da:f0:6b:bc:ee:1f:46:2e:35:ca:3d:90:37:35:2b:aa:
         51:c8:33:59:26:2f:c4:84:c9:f6:66:7f:e0:70:85:f2:62:be:
         2d:74:43:62:52:7d:8b:24:05:93:51:b3:62:44:24:ff:f9:61:
         58:89:f8:f9:76:14:2b:8d:76:71:be:f7:31:50:be:50:5b:3e:
         f7:d1:74:b9:55:5b:3d:da:a2:83:94:55:b6:6a:29:1e:a2:6f:
         cf:b3:42:89:1c:3b:03:6b:e5:26:2d:79:1e:a9:8e:75:12:ee:
         65:b2:28:fb:8d:05:e8:fe:93:93:61:c7:6d:14:da:35:23:eb:
         12:0b:0e:a5:3b:bf:ff:cf:3d:9a:82:6f:3b:08:c9:ae:a7:72:
         84:e1:54:ae:b5:28:3d:65:da:45:c1:e7:84:a1:d9:cd:c9:45:
         48:1a:9e:93:3c:3d:cf:5f:fa:f0:0f:c9:1a:f9:6d:73:93:b8:
         42:6f:f1:51:6b:29:32:6f:eb:70:6c:b0:b8:ad:d8:71:60:fc:
         93:ab:d3:29:85:05:83:1e:bd:33:98:8d:69:fe:f4:75:70:81:
         b9:90:ea:73:c5:65:bd:60:80:35:da:95:ea:be:fd:be:93:e9:
         48:49:cf:97:95:0b:d4:20:be:b9:41:86:30:b0:c6:24:ee:f0:
         20:37:3e:a0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUL2EJzY3TBirTdWLnNqdkSaafCsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMDMxNzQzMzFaFw0yNTEyMDIxNzQ4MzFaMDMxMTAvBgNV
BAMTKEJEMEI0Mzg2MEEwODg5MTI1RUFDNjQ3RkJFOTcxMkRCNUNENzgwMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctOQ2sQHq2zNJBR4a92yQVjSu
vEVe8syAyf9ayxB5dZPOb7Mv+eaad4AkuJcipZpXmTyiIuu/IoFDjJNbTN5iuV3F
PHIAFnwM+ipG0h6r36G4CVsLhYAixrOkMhN/K1HLHjh6Xs26uNGhMmrPNCKsyeRR
RdMXYh1scdCpTHWNLqW4eXkt2sPSYh6EXIRrKaHAFm4YHRj5dE281Slh1h7iJXnT
tjoGu0JtO7Y12pHVAwfPxYMUFV/KechJivINAKlTWio8FU6OZDrEifSTYl2GE4Kq
fwpB3W2M7YSZUV276pUUFq6sxSPre0oh1j1uSwzHJ4IOdAzNoexD7XpWick/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9C0OGCgiJEl6s
ZH++lxLbXNeAJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Jl
N0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5GQkcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdi
ZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAvQkQw
QjQzODYwQTA4ODkxMjVFQUM2NDdGQkU5NzEyREI1Q0Q3ODAyNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLam8MA0EAgACMAcDBQAoBFh4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXYzANBgkqhkiG9w0BAQsFAAOCAQEAVvTa8Gu87h9GLjXK
PZA3NSuqUcgzWSYvxITJ9mZ/4HCF8mK+LXRDYlJ9iyQFk1GzYkQk//lhWIn4+XYU
K412cb73MVC+UFs+99F0uVVbPdqig5RVtmopHqJvz7NCiRw7A2vlJi15HqmOdRLu
ZbIo+40F6P6Tk2HHbRTaNSPrEgsOpTu//889moJvOwjJrqdyhOFUrrUoPWXaRcHn
hKHZzclFSBqekzw9z1/68A/JGvltc5O4Qm/xUWspMm/rcGywuK3YcWD8k6vTKYUF
gx69M5iNaf70dXCBuZDqc8VlvWCANdqV6r79vpPpSEnPl5UL1CC+uUGGMLDGJO7w
IDc+oA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:54 2025 by rpki-client