Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD8BA24A93CF4AD25B87BFA030B24677130DE379.cer
File:                     BD8BA24A93CF4AD25B87BFA030B24677130DE379.cer (raw, json)
Hash identifier:          3NMnv9mW88E/4DdTUFpwJThmoDGr4knDi2pGkEn0lHo=
Subject key identifier:   BD:8B:A2:4A:93:CF:4A:D2:5B:87:BF:A0:30:B2:46:77:13:0D:E3:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       443F93ED7176E47772E644D5602353BB1D1BA4D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/1/BD8BA24A93CF4AD25B87BFA030B24677130DE379.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:45 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:45 +0000
Subordinate resources:    AS: 61792
                          IP: 170.247.236.0/22
                          IP: 201.55.196.0/22
                          IP: 2804:1964::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:93:ed:71:76:e4:77:72:e6:44:d5:60:23:53:bb:1d:1b:a4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:45 2024 GMT
            Not After : Apr  2 19:03:45 2025 GMT
        Subject: CN=BD8BA24A93CF4AD25B87BFA030B24677130DE379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:81:ae:80:a2:22:49:d2:f5:dd:ba:67:d2:f7:
                    a1:67:f9:cb:85:1b:0a:49:de:5c:bb:a1:b2:f5:e9:
                    89:8f:36:2a:7e:10:20:88:56:18:a5:94:38:8d:fb:
                    f8:2d:a4:13:29:1b:bd:55:b4:dc:50:49:c3:84:ea:
                    02:f0:63:1c:62:c8:7c:98:6e:dd:58:65:74:3f:5e:
                    e3:64:eb:88:3f:13:68:c5:e2:f1:94:8c:fd:2b:73:
                    2d:7d:60:ab:76:02:11:a0:dc:98:fd:a0:af:69:c2:
                    d5:bc:c9:86:00:34:2d:80:29:8d:00:bc:dd:26:f6:
                    7c:15:b7:e7:b7:85:a1:6e:56:62:82:ad:e0:18:ff:
                    a6:0c:fe:de:c8:98:99:30:f0:c9:39:07:f1:b6:50:
                    1a:be:2e:6d:b7:64:0b:67:75:2e:fd:b0:f0:2c:09:
                    87:0b:3a:aa:84:31:f2:79:f5:44:e1:28:e2:50:2d:
                    c3:fa:44:15:cc:f1:2e:f8:07:e8:13:ed:47:eb:68:
                    50:60:37:43:d4:b8:e7:68:de:39:13:3a:f7:e1:c7:
                    1f:3d:e1:a6:91:02:d0:a1:c3:c1:dd:9b:c9:aa:bb:
                    45:0f:e9:17:e4:f8:60:0c:06:b1:75:32:d2:ff:77:
                    bb:d3:91:c9:bc:04:30:2c:98:89:74:e6:26:22:61:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:8B:A2:4A:93:CF:4A:D2:5B:87:BF:A0:30:B2:46:77:13:0D:E3:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/1/BD8BA24A93CF4AD25B87BFA030B24677130DE379.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22
                  201.55.196.0/22
                IPv6:
                  2804:1964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61792

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:ad:f4:e4:aa:f3:39:be:f3:57:ef:3f:9a:9b:ea:c5:7a:
         1c:28:c7:c9:13:c6:0f:39:5c:fb:fb:ae:35:44:cc:77:8b:f4:
         57:26:8a:d5:92:40:6b:32:7e:fe:b1:d8:57:dd:7b:40:25:f6:
         2c:8a:a2:02:7a:85:de:53:85:e2:4a:36:3e:99:b4:75:85:86:
         24:80:2d:1d:9a:2b:71:df:6f:cc:3a:ef:9c:80:88:f8:63:dc:
         78:56:27:9f:3a:e7:9d:5d:c2:7f:06:09:60:11:d8:ed:0a:2a:
         c8:c9:ba:81:99:a3:3d:46:4e:38:9b:c2:4d:cf:75:15:85:37:
         fb:c9:de:ce:35:19:e1:a7:54:cb:e7:44:6d:14:67:1c:dc:a4:
         b1:17:e2:be:ab:45:e8:24:f4:70:c1:e4:12:af:e6:f4:37:c7:
         b4:85:60:c0:a2:63:af:64:0d:11:cd:93:b4:22:01:5b:f5:8a:
         71:19:66:17:e7:60:77:7f:98:fc:d8:f1:2d:ce:b7:3e:3d:0e:
         d2:81:08:5e:2a:e8:de:b4:e5:79:f9:16:90:82:44:64:4c:96:
         77:a9:2e:6b:9f:4a:a3:16:48:50:74:4c:a6:3f:f8:72:7f:ad:
         31:e1:ef:96:01:8d:7a:f9:fe:53:e5:63:13:34:ef:9f:b9:bc:
         8b:04:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org