Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
File:                     BD69382F79BA3D9D9A32A984942029C4341AB167.cer (raw, json)
Hash identifier:          EW2Wj8RceNM6CvNWTp0X4cMTaY7/s4UwIiZldlzVORg=
Subject key identifier:   BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DD28674514EC7343437E59223D9C5B2BF876031
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:19:54 +0000
Certificate not after:    Thu 03 Apr 2025 20:24:54 +0000
Subordinate resources:    AS: 265919
                          IP: 131.196.196.0/22
                          IP: 2804:3fd8::/32

Validation:               Failed, certificate revoked on Thu 23 May 2024 17:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d2:86:74:51:4e:c7:34:34:37:e5:92:23:d9:c5:b2:bf:87:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:19:54 2024 GMT
            Not After : Apr  3 20:24:54 2025 GMT
        Subject: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:a1:5b:ef:a4:46:50:47:fe:af:4f:6b:9a:
                    8b:12:80:82:b9:1d:52:96:8a:a7:d8:e1:19:71:bf:
                    91:51:b9:1f:0e:45:29:9f:8c:c5:9f:03:76:17:c7:
                    7b:9d:55:35:da:23:06:42:e5:01:13:04:c1:ef:45:
                    14:d5:11:ef:6f:fe:62:d4:ab:0c:52:69:3c:be:95:
                    d8:d0:5d:05:08:d1:fa:17:ff:33:1d:36:28:40:81:
                    87:7e:73:bf:f7:9b:0d:b8:ef:31:37:03:b3:2e:8f:
                    29:d7:91:ac:c6:e9:aa:12:6e:d4:2d:a8:88:e0:8e:
                    ea:41:4f:5e:ee:7a:ea:5a:3d:62:af:ff:6c:e2:dd:
                    2e:c0:25:9b:ed:3a:59:79:39:58:bd:af:71:2e:2f:
                    9b:be:ab:03:88:ab:8c:69:9a:72:50:b4:19:63:77:
                    fd:cc:37:44:0f:96:7b:8d:1b:88:a7:d3:15:b5:2b:
                    5d:ec:f2:0a:b3:6b:2d:54:c6:46:15:9e:f4:7a:28:
                    f4:bf:c4:25:ec:b1:24:0e:2b:33:dc:c6:c5:41:0a:
                    a5:2f:70:71:59:d1:5c:95:4f:31:30:5b:c7:7a:c1:
                    33:2d:08:ab:b9:96:9d:7f:7a:1e:55:a3:cb:73:e1:
                    06:aa:91:57:97:53:8a:98:5f:a9:9e:ea:a6:8f:8c:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/22
                IPv6:
                  2804:3fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265919

    Signature Algorithm: sha256WithRSAEncryption
         ad:a5:02:5b:1a:53:e6:72:b5:f0:dc:e4:58:bc:ad:53:d9:d9:
         60:4e:92:01:0d:8c:e7:0d:b8:5d:c3:7e:24:34:97:1a:a1:5f:
         bd:2c:c0:9e:05:80:0b:24:55:af:b5:30:b2:67:22:7d:d9:9c:
         8b:ca:2a:e8:a8:db:3c:0a:45:55:7a:df:3f:c2:87:50:9b:c5:
         be:86:57:74:b6:30:62:ef:a5:67:ee:ce:e6:4d:9a:9d:b9:dc:
         01:ed:05:83:fc:d8:fb:00:df:ac:e3:c4:4c:92:97:61:5e:e8:
         24:a2:ff:f7:32:16:92:c5:d1:7f:77:5b:e9:ba:35:48:e5:04:
         43:da:fd:97:8d:a8:2c:92:ce:f6:ad:81:0a:ab:28:e2:cd:a7:
         ea:e5:f8:35:34:cc:34:e6:b9:8f:d3:5a:f6:44:43:a9:1f:5e:
         39:dc:1c:14:2d:8b:09:e1:20:3d:45:81:fb:aa:8f:0a:a3:87:
         56:86:98:68:23:e6:45:a5:3d:0b:e1:0b:3f:f5:03:b3:ba:b7:
         b0:3d:7c:77:ca:0d:2a:31:f9:e6:00:94:80:e3:50:2b:fb:b5:
         a1:6b:b3:0e:ad:0d:1e:f8:65:99:d6:76:6d:d1:78:9a:01:91:
         ed:46:dd:d3:5a:d9:ce:c9:b5:d4:41:ce:19:74:7d:d3:b9:ca:
         4f:cb:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org