Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
File:                     BD3C6F3B1223FA6345D28272334E1F496EA34741.cer (raw, json)
Hash identifier:          HLhKIMzJzfpsIxFTg73n4MNx6axr9LArfPaC4tfHZdc=
Subject key identifier:   BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2807342B9783FFFBEF7A8D537380916D665036CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2024 19:29:35 +0000
Certificate not after:    Fri 29 Aug 2025 19:34:35 +0000
Subordinate resources:    AS: 268213
                          IP: 45.236.8.0/22
                          IP: 2804:4db0::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:07:34:2b:97:83:ff:fb:ef:7a:8d:53:73:80:91:6d:66:50:36:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 30 19:29:35 2024 GMT
            Not After : Aug 29 19:34:35 2025 GMT
        Subject: CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:da:a5:11:83:82:c3:26:86:d6:c9:1e:ec:
                    c6:7b:8f:51:25:3a:ca:7e:00:92:96:63:50:a6:99:
                    1b:0f:f9:1c:c6:21:c7:62:b2:bf:9c:fd:62:00:bc:
                    71:96:67:12:18:c2:7a:96:05:52:e5:93:09:89:1d:
                    bf:11:16:a6:79:ed:a7:0d:fb:24:17:2b:60:1f:77:
                    5d:6c:af:7b:8d:7a:9d:a5:19:9f:81:2f:a2:f2:16:
                    1d:b2:78:33:25:f1:d2:9f:1f:b2:fa:b1:1b:51:37:
                    ae:2c:a4:9f:05:3e:76:8e:50:4e:ed:81:9e:5c:73:
                    c2:1f:a7:2c:da:24:0f:4c:60:4b:50:da:ee:43:47:
                    8e:9b:05:02:fc:9b:e2:05:b7:c7:8f:d6:7c:77:84:
                    1f:53:4c:2d:0b:50:ec:03:bd:f6:0e:98:82:87:27:
                    7b:12:65:e1:41:39:9e:7c:62:42:d6:6f:d4:81:01:
                    2e:8c:96:d3:a2:b6:29:ee:07:39:80:2d:d8:1f:b3:
                    bf:2c:f9:99:c1:2b:32:e2:a2:da:84:29:cc:01:7c:
                    03:2c:97:35:1e:ac:e8:c9:0c:11:1e:b4:01:93:53:
                    d2:a7:f3:83:0c:58:d8:f9:50:80:84:cb:aa:3a:dc:
                    35:d2:8e:d8:92:9f:e1:25:a0:ff:f3:88:4a:a2:9e:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/22
                IPv6:
                  2804:4db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268213

    Signature Algorithm: sha256WithRSAEncryption
         c3:66:3d:16:bd:a1:15:84:6c:7c:d8:15:63:df:67:25:78:ca:
         20:82:41:75:81:96:78:ba:57:09:0c:0f:6e:fa:0d:9f:20:0c:
         16:2f:d3:02:98:5b:1e:4a:36:a7:fc:59:22:9b:81:28:42:87:
         1c:46:61:3a:d4:5f:e6:9b:fa:f7:39:96:b6:07:51:2f:4e:e3:
         69:26:ae:34:ae:f0:64:1d:b4:16:e6:cf:fa:de:88:62:46:33:
         52:50:a6:e6:05:a0:7a:5a:45:4b:48:dc:bb:35:56:57:c2:aa:
         62:52:95:91:9e:40:84:73:4a:c5:a8:2c:47:d1:40:bf:bf:cc:
         9f:bc:fb:f6:21:9b:c7:c2:b3:3a:f1:8d:0c:78:33:0e:25:7d:
         7a:c0:e6:e9:0a:e9:01:c1:74:34:f7:94:fb:fb:1c:c5:80:e3:
         48:e9:a0:e0:7a:11:97:5a:0b:88:47:a7:a2:81:29:75:a9:a1:
         8d:a6:d2:81:e5:21:4a:67:64:14:32:1b:fc:8c:c1:6f:e3:8c:
         fd:94:f4:a9:1e:d0:a9:b0:55:ed:1e:6f:07:88:b7:b0:7c:e9:
         f8:7f:95:7e:fa:63:c6:04:84:42:11:31:16:7e:73:79:69:76:
         ff:0e:21:44:c7:9c:db:28:9b:3b:b6:5c:0d:9c:36:94:0e:b8:
         9b:17:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----