Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.cer
File:                     BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.cer (raw, json)
Hash identifier:          qHr9mGjcBxZjCzRNRvcNTRHYpmUKdvje6SvpYN/14EY=
Subject key identifier:   BE:F4:90:EE:CD:B1:D2:A3:F8:49:9B:87:82:FF:BF:15:EE:18:15:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       36E4924D6D0D2B0F879525AC9516BDB8D49AB5AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jun 2024 07:06:31 +0000
Certificate not after:    Fri 13 Jun 2025 07:11:31 +0000
Subordinate resources:    AS: 267343
                          IP: 45.234.44.0/22
                          IP: 2804:4c04::/32

Validation:               Failed, certificate revoked on Sun 13 Oct 2024 10:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:92:4d:6d:0d:2b:0f:87:95:25:ac:95:16:bd:b8:d4:9a:b5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 14 07:06:31 2024 GMT
            Not After : Jun 13 07:11:31 2025 GMT
        Subject: CN=BEF490EECDB1D2A3F8499B8782FFBF15EE18159B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:66:43:61:31:93:be:84:cf:74:87:79:30:
                    f4:d6:fc:2a:ef:e9:07:90:ae:a2:9c:dd:28:7c:14:
                    15:14:3b:77:40:39:00:44:f4:c2:7f:61:cd:76:16:
                    64:d2:53:b1:92:b9:78:c1:15:a6:74:41:47:a0:af:
                    b8:6a:9d:cb:bf:a5:13:f6:05:83:df:27:39:05:dc:
                    ac:90:26:90:96:5d:65:d6:59:80:be:ee:73:42:cc:
                    6f:70:d3:76:5f:bd:46:ce:08:17:6d:3e:74:64:34:
                    a2:78:04:56:59:e5:8e:74:e5:fd:cc:bd:ef:1e:f7:
                    75:88:3a:14:d8:a0:7f:09:f1:95:16:35:55:62:4c:
                    4d:42:5d:05:43:85:b6:5f:b9:3b:bc:ce:be:3a:ae:
                    0e:28:82:cb:65:f8:72:93:a6:3a:6a:9b:f6:96:58:
                    d4:c7:2a:9d:63:8b:db:7c:4f:d2:30:a6:c9:31:f8:
                    56:3d:5c:b9:95:d7:0f:5d:26:57:86:aa:97:08:16:
                    61:77:29:5c:17:59:56:b3:ae:74:57:aa:60:3c:aa:
                    79:9b:3f:69:2b:1c:b0:63:ca:40:83:97:04:7f:9c:
                    cf:68:e5:89:54:a2:09:07:69:b4:7d:bf:34:9a:3c:
                    26:88:29:37:15:54:b2:dc:79:be:77:85:d3:50:76:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:F4:90:EE:CD:B1:D2:A3:F8:49:9B:87:82:FF:BF:15:EE:18:15:9B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.44.0/22
                IPv6:
                  2804:4c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267343

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:d4:83:22:a3:53:cb:19:0f:c5:a5:fd:52:4d:26:84:dd:
         c1:b4:1b:50:a1:1b:e8:bc:53:1f:7b:f7:b6:ab:c2:13:df:2f:
         6e:aa:7e:eb:c2:bf:38:65:ac:3f:0e:10:a9:4f:21:c8:19:d5:
         d1:f8:12:84:5c:73:e3:4d:65:da:67:0e:60:e5:20:a0:bb:be:
         d8:61:da:cb:f1:32:49:56:72:28:1e:71:64:a3:0b:31:97:72:
         2c:92:4f:86:8d:12:4f:bc:3d:b2:a1:3e:0b:8f:12:bb:a5:61:
         f2:9c:32:bc:fe:63:1b:89:76:c4:56:05:e5:d0:d5:c8:4c:54:
         41:15:d5:6c:c7:44:81:4d:e4:39:be:29:4f:ea:b2:97:3a:bb:
         1c:5c:06:62:78:b7:7f:ae:d4:6c:f0:7a:8c:f8:e8:37:6d:a8:
         37:58:03:30:d2:60:70:f8:14:39:a2:e8:c4:d9:2d:3f:46:b5:
         67:df:b5:00:ee:dd:3b:db:55:18:f4:c4:69:4d:cd:fe:3b:6b:
         af:0f:ba:5b:7d:89:73:72:39:bf:4f:31:5c:1c:ed:c0:4f:1e:
         53:39:52:92:7f:4b:4b:63:93:a4:60:62:02:a0:ec:a6:64:ce:
         bc:d6:1a:a1:ee:47:7b:fa:36:0f:1e:8d:f9:e5:6c:4a:fd:cb:
         a7:df:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 13:48:44 2024 by rpki-client on console-fra.rpki-client.org