Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer
File:                     BD822F759E542679706513A49206DC4783B35F84.cer (raw, json)
Hash identifier:          2PF58XqGBRXuXftGCDQZJzck6jjugogF/tdTFrzpdGM=
Subject key identifier:   BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6141CA9781A8CD1A4858165606ECCDCDD4D4BAB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/BD822F759E542679706513A49206DC4783B35F84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 Aug 2024 00:28:42 +0000
Certificate not after:    Sun 03 Aug 2025 00:33:42 +0000
Subordinate resources:    AS: 266924
                          IP: 45.224.32.0/22
                          IP: 2804:4568::/32

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 00:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:41:ca:97:81:a8:cd:1a:48:58:16:56:06:ec:cd:cd:d4:d4:ba:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  4 00:28:42 2024 GMT
            Not After : Aug  3 00:33:42 2025 GMT
        Subject: CN=BD822F759E542679706513A49206DC4783B35F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:c3:db:30:37:f0:ce:b0:51:1b:de:d1:6f:
                    24:20:35:7a:f1:65:6c:d0:9a:22:c6:ef:68:66:31:
                    1d:84:60:5e:02:1d:5f:03:3c:46:13:dd:f5:c5:c6:
                    02:3b:36:8e:2e:2a:44:30:79:29:ed:f5:05:ca:31:
                    91:0a:f9:1d:d4:06:91:92:0d:94:99:ce:bd:0d:11:
                    c9:03:2a:48:d8:4a:32:54:b3:42:4d:76:ac:16:39:
                    f4:e1:e7:2c:6f:28:2b:6e:2b:a3:4f:34:17:b8:c3:
                    79:e8:0f:86:a6:49:73:7c:63:01:fc:0f:15:81:95:
                    47:02:8a:a1:75:5b:b2:aa:2e:0b:73:5e:33:65:fe:
                    9f:d8:ad:e5:7f:71:ac:e4:55:09:05:50:05:e4:e1:
                    da:5d:11:9a:92:28:9a:7e:46:ea:01:dc:d6:1f:f7:
                    b8:2c:dc:a6:ff:a9:89:7d:b6:14:56:3e:4d:69:d2:
                    23:a9:58:27:a6:66:99:62:af:2d:27:cc:52:43:33:
                    19:85:b5:e4:61:80:8b:8f:61:3f:41:c1:7d:fa:74:
                    64:09:e7:9f:c1:f1:87:50:65:cc:00:3b:f2:6a:27:
                    13:83:60:d9:08:15:e7:f7:74:4f:46:82:e8:4e:42:
                    b8:ce:eb:6b:9f:05:14:8f:7d:e2:c7:df:9e:d2:69:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/BD822F759E542679706513A49206DC4783B35F84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/22
                IPv6:
                  2804:4568::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266924

    Signature Algorithm: sha256WithRSAEncryption
         9b:93:39:72:cc:e4:e5:18:48:d1:b0:57:ba:46:0d:ba:cf:65:
         83:c1:0e:71:24:f0:3c:dc:c3:c0:72:d9:13:8b:7d:ee:77:f0:
         58:45:a0:02:8a:8a:6f:89:f2:c1:6f:41:3d:9a:d7:7d:1b:10:
         dd:ef:fb:5e:78:50:bf:88:4c:8f:17:81:2f:91:ba:af:56:2d:
         b3:5e:78:83:0a:31:5d:7c:45:33:78:c4:26:e5:fb:9d:bd:e1:
         53:31:0e:b8:3b:76:92:a9:b6:e8:57:5d:c2:96:8d:cd:af:55:
         50:49:80:0f:fc:da:46:7e:99:47:3d:ae:2c:66:56:2c:4a:3c:
         8e:c0:30:14:71:28:6c:9b:4b:ad:45:94:c8:50:d3:57:34:82:
         b6:22:47:c8:bd:b9:09:6e:e2:e5:3e:18:bc:30:9e:7c:03:a0:
         48:be:36:57:79:3c:87:6a:d2:e0:03:f2:48:86:b0:7b:d0:f3:
         60:eb:86:75:ec:9b:e3:c0:4f:5f:50:24:d4:a4:3b:cc:9b:c1:
         98:49:a8:8e:bb:4f:98:ff:57:2f:4c:54:c5:01:17:12:b8:c8:
         43:f4:ef:36:35:32:ed:07:4f:34:72:81:7b:8a:87:1a:21:75:
         55:32:c8:21:6b:7d:4d:4c:36:ca:ee:43:cf:34:c3:2b:e4:08:
         2c:0f:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 03:23:42 2024 by rpki-client on console-ams.rpki-client.org