Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer
File:                     BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer (raw, json)
Hash identifier:          6eH+rE7KVTztk3bqrrkRKPbDIGZvXDAxAeWcE0rSgk0=
Subject key identifier:   BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CE36B6DF3270EBB737ADE04889377FE9DEE7D26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:42:00 +0000
Certificate not after:    Thu 03 Apr 2025 22:47:00 +0000
Subordinate resources:    AS: 267395
                          IP: 45.233.196.0/22
                          IP: 2804:4cd4::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 05:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e3:6b:6d:f3:27:0e:bb:73:7a:de:04:88:93:77:fe:9d:ee:7d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:42:00 2024 GMT
            Not After : Apr  3 22:47:00 2025 GMT
        Subject: CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:d6:fe:c3:38:dd:a6:01:14:c0:7d:a1:7c:
                    43:f7:de:85:c0:7c:d0:70:12:5f:99:dc:f7:48:2e:
                    d7:f1:cc:6e:f7:2c:3c:fc:ee:af:de:c3:30:f7:88:
                    63:b6:89:c0:83:47:38:cc:3c:c9:c3:90:20:9a:eb:
                    d5:5c:0c:91:80:ca:96:b1:be:6a:96:10:6d:8c:3f:
                    41:22:28:06:ac:f9:d8:fa:04:5d:87:df:a1:d4:d3:
                    8d:82:3a:fc:52:49:57:bc:bc:6f:2f:a5:8c:75:50:
                    13:75:3d:38:ad:0d:fa:2d:b8:a5:8a:2f:c3:ef:70:
                    41:ad:56:f1:4a:51:92:f4:b9:90:fc:8c:13:ca:8e:
                    f3:79:31:b4:90:79:9d:30:7e:b6:a8:46:85:26:31:
                    1c:d4:61:d3:a8:25:bb:4a:92:05:df:f4:b2:63:18:
                    f2:a2:0a:c4:09:87:f3:45:10:26:85:fa:06:be:ac:
                    81:db:f8:c0:db:62:06:fb:91:f4:bd:e1:32:13:94:
                    30:79:3d:cc:6e:f8:15:6c:5d:e2:65:d0:20:21:cd:
                    04:31:cb:c9:3a:24:fb:ba:7a:db:df:9b:d4:93:67:
                    21:61:dd:22:c2:44:d4:5f:81:23:3b:ac:3d:f3:ef:
                    26:51:dc:e1:f3:b3:0a:e5:5e:ba:62:f7:95:2a:5b:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22
                IPv6:
                  2804:4cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267395

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:b7:b8:ef:c5:b2:f1:39:09:16:96:f8:c0:71:e0:5a:ac:
         50:d5:c1:d8:6c:00:e5:99:1b:ec:6c:b7:90:0c:ce:db:ca:1b:
         96:6c:15:5d:dd:3c:2f:38:9f:92:46:92:db:7c:30:a1:5f:15:
         a4:c5:4d:d0:fa:ee:be:56:5a:25:3b:79:e5:2c:eb:eb:fc:09:
         89:df:14:2c:1d:c4:ae:04:8e:6b:3e:d7:58:7f:14:0b:e1:6e:
         97:62:66:2f:9e:37:38:a6:5e:2e:77:70:a2:36:62:29:16:7a:
         df:53:ab:47:c3:e4:e7:44:be:f7:40:a0:30:9b:b0:50:58:b9:
         2a:b3:08:30:d0:58:3f:76:80:53:a9:df:cb:41:b8:38:d1:58:
         81:5d:d5:7b:86:8c:4d:36:c7:5e:bf:5a:04:6e:bd:67:2e:fc:
         6a:45:9a:fd:e4:99:90:48:f4:39:ff:7c:4d:7b:62:3c:1e:82:
         ba:44:bc:01:bd:0c:eb:46:59:af:43:b6:c1:5a:fd:bb:6c:89:
         cd:ac:da:1b:d3:cf:bc:0f:89:40:66:81:2a:e9:4c:a6:4b:1c:
         f3:10:3c:2e:78:11:f5:a4:72:27:d0:c1:73:68:d1:2c:59:ed:
         04:d5:0b:67:2c:e4:34:b2:ce:47:ef:09:63:5a:62:0f:4d:7f:
         11:fc:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 07:22:21 2024 by rpki-client on console-ams.rpki-client.org