Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDBA2324901F2A5030A374708C6F757D963E42AA.cer
File:                     BDBA2324901F2A5030A374708C6F757D963E42AA.cer (raw, json)
Hash identifier:          iDLHyU3plglnTVt9K0bUs4r2vhm/dzJVWBZfZGJmz6Q=
Subject key identifier:   BD:BA:23:24:90:1F:2A:50:30:A3:74:70:8C:6F:75:7D:96:3E:42:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D8004D1CA6C9D5D97C5B699280B1BFF3ADF60C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/BDBA2324901F2A5030A374708C6F757D963E42AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jan 2025 19:09:28 +0000
Certificate not after:    Tue 27 Jan 2026 19:14:28 +0000
Subordinate resources:    AS: 274663
                          IP: 2804:91c4::/32
Validation:               Failed, certificate revoked on Wed 05 Mar 2025 13:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:80:04:d1:ca:6c:9d:5d:97:c5:b6:99:28:0b:1b:ff:3a:df:60:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 28 19:09:28 2025 GMT
            Not After : Jan 27 19:14:28 2026 GMT
        Subject: CN=BDBA2324901F2A5030A374708C6F757D963E42AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:5f:36:3a:fe:02:6f:67:e1:2e:5f:f8:01:
                    9e:47:ff:13:c9:13:db:50:79:4f:ce:cd:dd:5e:c6:
                    ad:12:13:8d:46:f2:a6:7d:98:5b:d0:35:85:79:30:
                    24:93:62:06:e9:cc:aa:6a:1a:85:97:0f:34:d0:c7:
                    9e:5b:57:01:c6:7c:3d:ce:55:99:04:3c:11:95:32:
                    8a:f5:47:e5:3e:7c:92:4d:f3:49:0a:e8:70:48:9b:
                    40:a7:71:b2:ec:be:39:3a:4b:91:8c:05:d5:fa:b0:
                    c9:25:4d:e0:ad:e9:9c:2a:18:ba:a4:6d:6a:63:74:
                    90:0c:89:06:41:8e:79:f2:2d:f4:77:98:a8:f0:91:
                    63:cf:83:7d:34:2f:b5:0f:2e:00:b1:02:a1:cd:99:
                    a8:df:f1:8a:79:87:d5:e7:f4:1a:6f:d2:39:32:1f:
                    a9:17:bc:ca:5c:1f:99:a7:aa:3d:96:31:21:df:86:
                    73:f2:cc:a8:c8:56:0b:b7:b9:8e:83:a4:77:66:da:
                    b6:f6:af:6d:36:c9:80:ac:7c:1e:4d:1a:ee:61:5f:
                    2b:03:ae:1a:06:f7:43:a3:f9:c6:90:52:09:8d:80:
                    68:6a:6c:9a:87:f5:39:ec:66:55:af:0d:6d:99:1c:
                    f9:e4:a2:ae:9a:66:1f:2a:0b:6f:8b:db:26:d4:1e:
                    74:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:BA:23:24:90:1F:2A:50:30:A3:74:70:8C:6F:75:7D:96:3E:42:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/BDBA2324901F2A5030A374708C6F757D963E42AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274663

    Signature Algorithm: sha256WithRSAEncryption
         8b:58:b1:3c:39:19:3a:df:52:31:c0:af:15:59:b2:90:03:5a:
         72:be:b7:20:63:c3:c5:51:67:a3:11:e7:0a:37:26:02:4d:ef:
         ec:35:8e:00:2c:51:cf:41:86:7f:f4:01:aa:0a:24:81:c7:50:
         74:71:80:1e:67:46:0f:a2:0b:93:66:75:0c:e3:4f:db:1e:f3:
         62:9e:4e:0d:ee:b7:85:cc:84:af:08:59:1f:d5:3b:97:a9:eb:
         0c:d9:3a:ca:b8:0c:8d:75:27:89:62:b9:a3:0a:6e:83:c1:45:
         b1:2e:7e:72:2f:cd:f2:e7:0a:7e:6b:fe:65:93:f6:1e:25:64:
         70:11:9d:05:10:ef:c6:53:d9:40:72:a9:f9:52:a0:d2:6c:17:
         f5:b3:5c:c4:34:0c:ce:97:a4:0f:a0:ee:c8:a7:1c:24:97:fe:
         a5:9a:34:6a:be:7d:0c:f1:0b:77:a8:4c:6d:10:c9:f7:d5:e6:
         00:e0:dd:fe:15:d9:59:fc:b7:d4:89:ea:7b:b7:5c:4c:94:14:
         d2:09:4b:44:4f:ca:4b:88:a3:aa:d9:a9:c7:00:e4:fc:ae:d9:
         05:e0:93:04:0a:cc:d4:9b:03:fd:e1:1a:1b:a4:78:b1:30:f7:
         ef:76:bb:66:9f:c3:26:8f:04:74:6b:8d:51:07:18:f9:14:3c:
         e7:ed:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:56:30 2025 by rpki-client