Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
File:                     BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer (raw, json)
Hash identifier:          yDZdc+/eTPuzUGmlWrbtDn+frxO2/tlm/5YUiOAH9uE=
Subject key identifier:   BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       338D21D65C0065B13F7103EC9BF5B1969043D513
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Dec 2024 22:50:47 +0000
Certificate not after:    Mon 01 Dec 2025 22:55:47 +0000
Subordinate resources:    AS: 268197
                          IP: 45.235.144.0/22
                          IP: 2804:4d74::/32
Validation:               Failed, certificate revoked on Mon 31 Mar 2025 03:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8d:21:d6:5c:00:65:b1:3f:71:03:ec:9b:f5:b1:96:90:43:d5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  2 22:50:47 2024 GMT
            Not After : Dec  1 22:55:47 2025 GMT
        Subject: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:7d:d1:a4:5d:f4:0e:55:2a:72:47:8d:20:
                    0b:8d:b2:12:b3:ea:de:31:02:1b:c7:d0:85:83:f0:
                    b2:d3:0b:48:75:16:ad:a6:93:c4:ec:cb:be:35:04:
                    df:d8:aa:f9:3f:38:4d:39:f1:00:fc:31:9d:80:a4:
                    24:5e:ba:03:46:36:dc:88:e4:d1:19:eb:56:44:7a:
                    77:6d:24:44:84:0a:17:48:45:4a:26:be:79:10:4f:
                    02:6c:25:2f:a4:37:71:52:c7:f2:bf:db:7a:14:66:
                    f8:b4:d8:b2:35:e8:8a:3b:ed:9c:8b:66:24:21:bc:
                    54:6e:e3:4b:b3:c2:23:58:3f:61:0e:70:54:b4:8c:
                    78:5c:03:c4:00:38:47:9a:3a:20:72:ef:27:ee:7f:
                    0b:25:76:35:b2:5a:2f:a8:50:86:02:07:6f:7e:c1:
                    80:2c:ad:e7:59:69:fe:00:f0:32:a6:36:1f:89:d6:
                    28:87:84:45:07:d4:6d:18:3b:fe:3c:33:11:b0:87:
                    61:c4:0d:93:ef:55:86:ae:33:02:bd:ba:df:96:0d:
                    c5:25:6b:24:4b:74:d0:15:8a:0f:a4:46:c7:28:c9:
                    4e:7b:64:c9:c6:cc:28:40:98:ed:43:6c:c6:df:62:
                    6c:c3:c4:59:6e:74:5e:b5:89:2b:7b:df:63:ee:e1:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.144.0/22
                IPv6:
                  2804:4d74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268197

    Signature Algorithm: sha256WithRSAEncryption
         99:dd:16:c3:00:f5:8b:00:53:17:d5:8d:a6:92:d7:62:7e:1c:
         5d:52:4c:4a:fc:2f:40:2e:a8:5e:f9:13:b7:23:97:55:2e:d6:
         12:d4:aa:e9:02:77:ae:92:e4:f9:7c:7f:33:a0:f9:57:09:77:
         cd:b8:47:e1:2f:ed:19:38:e1:ea:dd:60:76:b4:31:92:5e:6b:
         24:b2:93:93:aa:05:d5:66:0a:90:7e:6c:28:1f:3a:21:35:64:
         4f:f1:d7:05:ca:93:4d:7c:80:5c:02:6b:ea:dd:5f:a3:6b:61:
         5c:e8:34:f3:20:71:31:22:bf:ff:57:ad:1f:b3:ca:3b:4e:7d:
         4c:ff:67:43:e5:0b:9f:cc:d6:83:92:dd:69:c7:59:b8:6b:40:
         06:de:0b:bd:c5:f6:35:04:df:d4:02:d9:20:54:48:44:0a:85:
         5c:d7:c7:47:5d:87:4f:fe:ca:38:83:fa:5b:e0:38:a3:06:47:
         ee:3b:e2:58:f8:14:9e:a1:54:25:c1:de:ea:01:ed:94:96:fe:
         f9:97:8e:09:82:fc:2c:e7:23:d0:8c:3f:95:9b:cf:71:54:35:
         c9:67:7c:4e:9b:01:43:d1:d5:a5:2a:a5:0c:f5:b5:e8:0e:bf:
         eb:f5:da:14:b7:0c:e5:14:bc:61:9f:3d:35:37:fb:06:2f:74:
         b5:cc:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:29 2025 by rpki-client