Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE4C3DB02CD664403F029B8F111C09FD3C164CE1.cer
File:                     BE4C3DB02CD664403F029B8F111C09FD3C164CE1.cer (raw, json)
Hash identifier:          WrlhTKP+gJFseUBdV+5rLtWvBZIPT6WyMukgm9NHpJ4=
Subject key identifier:   BE:4C:3D:B0:2C:D6:64:40:3F:02:9B:8F:11:1C:09:FD:3C:16:4C:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04E6CDAF6F7380703D1B13490BFA6C41ECD09FEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BE4C3DB02CD664403F029B8F111C09FD3C164CE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 10:10:28 +0000
Certificate not after:    Thu 06 Nov 2025 10:15:28 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 19:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e6:cd:af:6f:73:80:70:3d:1b:13:49:0b:fa:6c:41:ec:d0:9f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 10:10:28 2024 GMT
            Not After : Nov  6 10:15:28 2025 GMT
        Subject: CN=BE4C3DB02CD664403F029B8F111C09FD3C164CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:1a:d8:18:60:49:a2:a1:c7:66:82:1b:47:
                    06:7d:89:69:40:78:74:07:82:43:d6:e3:14:d2:a1:
                    00:0d:0d:8c:33:40:e0:79:30:18:2c:60:9b:a4:8b:
                    1c:c6:83:c5:79:71:bb:1e:9f:ba:59:68:0a:52:c4:
                    15:a3:fd:05:80:da:bb:64:8a:dd:5b:b0:64:44:bb:
                    8f:79:cf:44:ae:54:d2:2d:5f:bf:b1:b5:76:e8:aa:
                    0e:43:62:3e:7d:0c:82:a4:71:0a:43:77:81:0b:b9:
                    08:19:0c:ce:fc:d1:83:60:9a:43:14:f2:57:71:63:
                    5d:75:3e:d3:a2:b0:24:28:38:0c:f6:91:38:24:51:
                    16:47:6a:44:c1:bd:bc:d7:75:46:6f:13:2f:2c:d7:
                    5f:84:2b:bb:3c:d6:18:cb:02:52:aa:61:7b:c2:cc:
                    01:7d:63:66:1e:34:e4:da:02:a6:93:6e:90:90:38:
                    52:28:5a:31:fe:5f:8e:26:9b:00:54:da:8f:b1:47:
                    6f:92:1a:de:91:8c:3b:0e:a6:6b:a9:9f:1c:52:67:
                    1f:83:70:25:a3:7f:4d:af:fc:73:10:b2:ad:12:51:
                    0d:13:1b:bb:58:4a:b1:10:cc:eb:28:34:17:d3:fc:
                    1b:6a:65:d5:dd:13:70:2f:dc:73:49:5f:d6:d2:bd:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:4C:3D:B0:2C:D6:64:40:3F:02:9B:8F:11:1C:09:FD:3C:16:4C:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BE4C3DB02CD664403F029B8F111C09FD3C164CE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:c4:66:ae:fa:d7:ac:69:ea:50:7e:d1:94:1a:e1:ec:e1:
         a9:08:41:2c:c5:72:08:e4:32:ec:1a:86:ed:8a:73:34:e3:02:
         77:6e:2a:8c:88:d0:65:3e:9d:3d:be:a2:7d:e9:75:ff:54:25:
         eb:bd:18:e2:e3:b0:08:4b:85:9a:21:82:68:27:29:2e:dc:69:
         c2:92:ce:08:e8:b7:03:bb:8e:78:0c:d2:0b:13:9e:ef:0f:54:
         3f:01:ac:64:ca:12:9e:fe:bc:43:13:99:fe:5e:f8:23:10:fb:
         1a:39:e0:95:ba:6c:fe:4b:58:37:88:61:9f:4d:49:0b:ff:c3:
         d3:f7:cf:0d:ce:75:92:80:42:c9:13:6e:e4:b2:9e:b9:be:1a:
         3c:73:18:57:2a:39:a9:e3:37:b9:9c:b3:08:84:a9:6c:12:1c:
         71:4b:89:5f:e6:02:9d:74:dc:77:bc:fd:1d:bc:d0:41:f1:31:
         f7:c1:18:9b:29:3a:a2:49:80:86:69:f8:b7:20:bd:43:ac:cb:
         83:5b:40:df:bd:22:24:7d:d5:3f:ae:b6:e8:b8:92:11:04:ae:
         8a:40:45:c8:aa:74:64:7a:a7:a6:c5:5b:6f:e1:77:4c:d2:21:
         90:72:e6:b1:a3:08:81:ad:6b:e1:37:f9:bd:a6:8f:94:36:c1:
         2c:74:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org