Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.cer
File:                     BEC984CE218702B30AEF83CAEF626A9CB903EAE8.cer (raw, json)
Hash identifier:          qVIEDc9L5+iw+wQXpBHdlzS9+tFIoDSUig35lOL2pE4=
Subject key identifier:   BE:C9:84:CE:21:87:02:B3:0A:EF:83:CA:EF:62:6A:9C:B9:03:EA:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77D6CFEDB8D7AA32BFB179109ED537FD4C89A1C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:28:44 +0000
Certificate not after:    Wed 02 Apr 2025 23:33:44 +0000
Subordinate resources:    AS: 270848
                          IP: 179.43.24.0/22
                          IP: 2804:7258::/32

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 10:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:cf:ed:b8:d7:aa:32:bf:b1:79:10:9e:d5:37:fd:4c:89:a1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:28:44 2024 GMT
            Not After : Apr  2 23:33:44 2025 GMT
        Subject: CN=BEC984CE218702B30AEF83CAEF626A9CB903EAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:ca:08:0a:f4:89:0b:02:97:2b:93:01:b7:
                    33:06:e4:4e:17:b1:83:cb:89:09:54:34:82:e0:7e:
                    a6:56:6b:75:a9:e6:f8:7d:40:b6:ad:81:fe:82:27:
                    23:67:4b:11:d4:61:5e:7d:16:5f:4e:c7:1e:d6:f6:
                    cf:1b:46:bb:06:76:5c:43:41:0e:1d:58:e6:bb:c9:
                    d7:96:f3:e6:a1:1c:c3:01:9f:26:5b:65:dc:a0:dc:
                    f3:88:28:49:4a:58:74:9e:34:c5:25:bf:86:5a:a1:
                    c9:91:28:f9:2f:a0:06:c3:3f:e4:ae:31:2a:bf:8f:
                    45:8b:c4:58:cd:08:09:10:35:e5:d5:7d:24:fa:e8:
                    2d:4b:7d:7e:91:08:43:98:90:0d:28:82:9b:5a:5a:
                    cb:e6:a8:41:74:bb:15:b5:0c:cb:a2:d2:a4:69:9e:
                    c9:68:f4:2a:1f:b5:1b:00:a4:fb:12:6c:92:77:18:
                    ce:69:51:f8:35:e5:35:52:51:ac:36:ac:57:9c:95:
                    2c:3f:35:dd:42:7e:a6:b2:70:9b:2b:6c:34:79:ae:
                    31:12:99:f6:7b:da:0a:b4:b6:2f:cc:1f:07:96:b2:
                    a5:b1:87:9a:d7:06:b2:ae:77:fd:42:1f:98:4b:4c:
                    6e:c8:8c:ff:50:cb:76:e8:27:5f:8f:36:59:bb:ce:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:C9:84:CE:21:87:02:B3:0A:EF:83:CA:EF:62:6A:9C:B9:03:EA:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.24.0/22
                IPv6:
                  2804:7258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270848

    Signature Algorithm: sha256WithRSAEncryption
         d5:3b:e4:a8:a5:a5:f5:15:ed:41:87:00:42:b6:e8:c1:a8:31:
         f7:00:48:76:67:f2:b2:8d:59:1c:72:43:a9:1f:1c:10:f8:6a:
         28:c9:ac:03:a3:29:2e:6b:05:7b:3b:41:a7:f2:ab:11:e7:63:
         a9:ec:4a:ac:13:34:c6:e8:dd:c1:20:8a:a5:ba:71:e8:58:f4:
         89:5d:ce:49:26:1d:cc:ba:86:a3:ab:f8:0d:ff:bf:05:fb:d0:
         1f:e7:51:92:41:7d:19:90:30:4c:b7:84:cd:52:39:9c:b7:be:
         38:56:bd:fa:c9:10:78:31:f5:85:89:b9:be:fe:e9:e9:14:a7:
         f6:14:b2:f1:bd:57:c7:60:07:d0:5e:4f:d7:53:a1:a9:64:85:
         00:46:74:05:15:14:e1:b3:e6:3b:1c:cd:5e:4a:43:8c:2a:a5:
         a6:64:f4:98:cc:bb:21:7f:ab:4c:44:1d:b1:f0:c7:80:b5:5b:
         bf:cc:b2:2a:a9:23:c4:7c:0d:8a:c4:cf:3f:59:6a:0e:2f:fe:
         0b:0f:57:e8:43:21:eb:67:40:d2:be:b1:d4:3d:c5:f1:bd:70:
         1c:0d:67:ed:24:3b:b0:46:dd:9b:9e:1d:9d:a4:b1:d3:5b:63:
         c7:df:d5:c3:b1:4e:0d:90:0e:f1:78:0f:2d:e7:d9:c9:88:05:
         a5:63:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 13:15:27 2024 by rpki-client on console-fra.rpki-client.org