Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD19803DF8A7181DA82A6B073FC90304116C06E1.cer
File:                     BD19803DF8A7181DA82A6B073FC90304116C06E1.cer (raw, json)
Hash identifier:          SnjzvcA1x9dVmEklCmOVWtRQ/5NzrH6atKlo5Fn4MZ4=
Subject key identifier:   BD:19:80:3D:F8:A7:18:1D:A8:2A:6B:07:3F:C9:03:04:11:6C:06:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D4869B0FBF5651DAAF9113C46ECC448FD480CC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/BD19803DF8A7181DA82A6B073FC90304116C06E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Oct 2024 16:02:22 +0000
Certificate not after:    Wed 15 Oct 2025 16:07:22 +0000
Subordinate resources:    AS: 269567
                          IP: 45.188.12.0/22
                          IP: 2804:668c::/32

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 06:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:69:b0:fb:f5:65:1d:aa:f9:11:3c:46:ec:c4:48:fd:48:0c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 16 16:02:22 2024 GMT
            Not After : Oct 15 16:07:22 2025 GMT
        Subject: CN=BD19803DF8A7181DA82A6B073FC90304116C06E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:e3:c8:86:32:5e:49:0d:01:21:7c:dc:88:
                    58:0b:17:51:3d:6f:54:1e:cf:38:6b:df:5f:05:4a:
                    d7:47:ed:f3:e5:15:75:3c:3f:7b:5d:2c:78:5a:db:
                    89:38:84:a6:d0:24:f4:de:e8:b0:44:7c:f1:cb:5b:
                    1d:49:36:15:5b:51:69:f8:70:b6:da:ba:2b:89:94:
                    de:36:18:8d:be:3d:b3:47:2a:32:4f:a1:1c:5c:5d:
                    84:e0:ba:ba:86:29:8e:65:90:1e:9f:02:d8:ca:1d:
                    0e:c8:4d:4d:fe:d0:5c:aa:6f:5d:7e:a8:fd:ea:09:
                    4a:5e:27:66:46:0a:99:e6:a0:0e:0a:37:bf:0a:fb:
                    48:a5:7d:82:68:2c:c3:3c:17:a0:4d:95:ba:fc:61:
                    aa:9f:04:b4:19:78:70:13:a4:17:86:22:a5:4f:17:
                    4f:65:eb:09:63:f3:cf:38:76:da:69:75:7b:4b:05:
                    d7:ab:73:93:e4:d0:36:e8:e1:34:c7:b4:06:d5:7e:
                    c4:f7:96:13:54:95:93:8f:f8:71:27:22:53:79:1d:
                    56:be:6e:8a:00:ec:f3:60:2e:38:b1:ed:b7:fd:f2:
                    af:32:dc:92:44:91:88:71:1d:a3:19:38:f2:ed:86:
                    d3:ed:2f:7c:a0:12:bf:fd:ef:24:a2:a9:68:48:68:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:19:80:3D:F8:A7:18:1D:A8:2A:6B:07:3F:C9:03:04:11:6C:06:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/BD19803DF8A7181DA82A6B073FC90304116C06E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.12.0/22
                IPv6:
                  2804:668c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269567

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:4d:44:28:14:df:82:fc:32:45:d9:12:d2:9f:5d:9b:ea:
         2b:56:5e:bd:70:7d:ca:26:bc:5a:99:c4:af:77:23:89:59:a6:
         fc:27:57:21:84:18:4d:fc:ad:5a:dd:20:fa:aa:39:b7:08:9a:
         05:6e:74:49:16:0a:88:4b:cb:75:82:00:de:73:64:40:dc:fc:
         1e:bc:03:c0:11:fd:6a:ce:53:2e:15:84:1a:1f:03:71:ff:44:
         2f:f0:a1:7e:0f:e0:ab:6c:09:91:52:68:88:f4:87:6d:32:ed:
         fe:aa:15:75:df:b7:f9:75:c6:b9:f6:3b:57:14:89:c9:db:43:
         f9:5e:eb:e9:7d:83:af:ee:b3:62:bf:1b:56:d2:fe:00:49:04:
         9b:07:bf:36:f7:d7:eb:e4:f6:1f:52:e5:52:d8:04:e1:aa:b7:
         ed:e9:3b:d1:3a:9a:61:33:4b:28:40:68:7a:96:b1:d7:e6:7e:
         ea:ea:66:fb:41:8e:31:04:31:5d:7d:ba:3f:e0:28:37:89:0d:
         7b:a5:aa:e2:24:db:23:50:69:54:0f:8a:b8:91:91:cd:97:ce:
         f3:c1:a9:53:05:3f:0f:33:a5:16:e1:31:95:18:75:f0:87:7e:
         c3:c2:30:df:39:7f:96:e5:28:09:30:20:5d:97:0d:dc:4e:a0:
         f5:88:25:07
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULUhpsPv1ZR2q+RE8RuzESP1IDMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMTYxNjAyMjJaFw0yNTEwMTUxNjA3MjJaMDMxMTAvBgNV
BAMTKEJEMTk4MDNERjhBNzE4MURBODJBNkIwNzNGQzkwMzA0MTE2QzA2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQAOPIhjJeSQ0BIXzciFgLF1E9
b1Qezzhr318FStdH7fPlFXU8P3tdLHha24k4hKbQJPTe6LBEfPHLWx1JNhVbUWn4
cLbauiuJlN42GI2+PbNHKjJPoRxcXYTgurqGKY5lkB6fAtjKHQ7ITU3+0Fyqb11+
qP3qCUpeJ2ZGCpnmoA4KN78K+0ilfYJoLMM8F6BNlbr8YaqfBLQZeHATpBeGIqVP
F09l6wlj8884dtppdXtLBderc5Pk0Dbo4TTHtAbVfsT3lhNUlZOP+HEnIlN5HVa+
booA7PNgLjix7bf98q8y3JJEkYhxHaMZOPLthtPtL3ygEr/97ySiqWhIaENPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9GYA9+KcYHagq
awc/yQMEEWwG4TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVVD
MXNIdDNycXpiWWdDRURZaXdWWW5SVmhpaUtadFJZbjlXN2RQTnBpbkovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVV
QzFzSHQzcnF6YllnQ0VEWWl3VlluUlZoaWlLWnRSWW45VzdkUE5waW5KLzAvQkQx
OTgwM0RGOEE3MTgxREE4MkE2QjA3M0ZDOTAzMDQxMTZDMDZFMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbwMMA0EAgACMAcDBQAoBGaMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQc/zANBgkqhkiG9w0BAQsFAAOCAQEAJMlNRCgU34L8MkXZ
EtKfXZvqK1ZevXB9yia8WpnEr3cjiVmm/CdXIYQYTfytWt0g+qo5twiaBW50SRYK
iEvLdYIA3nNkQNz8HrwDwBH9as5TLhWEGh8Dcf9EL/Chfg/gq2wJkVJoiPSHbTLt
/qoVdd+3+XXGufY7VxSJydtD+V7r6X2Dr+6zYr8bVtL+AEkEmwe/NvfX6+T2H1Ll
UtgE4aq37ek70TqaYTNLKEBoepax1+Z+6upm+0GOMQQxXX26P+AoN4kNe6Wq4iTb
I1BpVA+KuJGRzZfO88GpUwU/DzOlFuExlRh18Id+w8Iw3zl/luUoCTAgXZcN3E6g
9YglBw==
-----END CERTIFICATE-----