Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer
File:                     BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer (raw, json)
Hash identifier:          gpIK2rGD02qQlShLnv+ZIMKnE52CpBeni8J95YVp8Z4=
Subject key identifier:   BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       238E7D0B34B17FAC7F44EBD74A919CA2756551A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:54:34 +0000
Certificate not after:    Wed 02 Apr 2025 18:59:34 +0000
Subordinate resources:    AS: 267423
                          IP: 181.191.116.0/22
                          IP: 2804:4140::/32

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 18:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:7d:0b:34:b1:7f:ac:7f:44:eb:d7:4a:91:9c:a2:75:65:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:54:34 2024 GMT
            Not After : Apr  2 18:59:34 2025 GMT
        Subject: CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:65:ca:76:bd:db:51:b6:5c:13:db:d4:3b:
                    2e:6e:fb:b5:03:5e:d1:51:37:63:8b:aa:1f:03:ec:
                    ae:f6:81:ed:e5:f3:22:de:06:e6:cd:f0:c8:f7:2d:
                    95:e3:47:aa:ea:94:92:18:ff:12:12:0f:90:bc:e6:
                    bd:21:83:56:8d:cc:68:73:5b:4f:e0:70:90:38:a1:
                    f2:d1:b7:66:a2:d7:bc:b1:03:60:70:31:7a:e9:9e:
                    cb:40:94:4b:36:67:c0:ab:45:a8:86:df:96:83:8d:
                    2d:ab:de:af:f0:ea:9f:d6:0e:0b:f8:c9:60:1e:78:
                    9e:58:54:73:e3:20:e2:ae:25:80:63:4f:c6:62:e7:
                    fc:43:fa:4e:b3:df:3e:a9:2e:b8:37:bf:5f:d7:67:
                    3a:c1:e0:85:15:97:98:53:49:7e:11:d8:fe:b9:b2:
                    4a:af:20:95:6d:25:47:80:08:60:ba:69:cd:80:3f:
                    1e:1d:53:04:00:75:02:91:28:a7:15:dd:49:bf:be:
                    64:38:cf:42:72:56:d6:81:90:2f:85:75:7c:c1:9b:
                    9f:76:d0:b3:a5:b8:47:ef:42:00:96:2a:0b:43:4d:
                    88:93:79:b6:ae:e4:3e:7f:0c:98:8c:3b:0d:43:ec:
                    1a:ef:6b:12:58:41:b1:46:c9:f4:4a:0e:42:27:0e:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.116.0/22
                IPv6:
                  2804:4140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267423

    Signature Algorithm: sha256WithRSAEncryption
         bd:cb:07:bc:e5:7e:19:7a:3c:43:e8:8e:16:5c:f6:3a:ab:34:
         0a:5a:c5:26:58:5a:b7:9d:a1:45:fc:6a:d2:62:ac:18:fd:c8:
         31:e3:8d:9c:09:e3:01:3e:cf:ac:49:5e:5d:42:45:d2:4f:4b:
         19:bd:be:26:a9:a4:3b:47:68:c0:7f:32:58:a6:67:ec:5a:7b:
         3a:8a:58:ca:d8:3f:95:26:48:bf:3f:7b:24:e3:a2:bd:00:b7:
         0d:0b:94:a8:2f:89:a9:83:90:10:e3:b7:f4:39:91:69:20:d9:
         bf:9d:36:59:eb:3f:2f:8f:50:98:96:4f:5b:7d:b5:f2:82:12:
         c5:e7:f6:55:6a:c1:b8:af:82:c2:63:b2:5b:dc:c0:19:46:cd:
         2e:4c:0f:32:c2:d3:20:6c:1a:cb:68:44:6d:90:0a:33:e5:bc:
         e1:8e:2c:57:5a:29:63:f6:fb:c4:44:16:ae:41:8c:64:47:3a:
         b7:ec:d4:15:b2:82:9b:16:06:a9:f3:69:32:08:8e:91:5a:8a:
         0b:87:79:27:94:13:ff:d5:b2:71:35:7d:78:d6:b7:ec:bb:d5:
         09:51:1d:41:2a:8f:4c:95:2a:2d:b5:d7:30:81:fc:48:4c:d9:
         b5:bb:04:73:15:77:0f:aa:df:90:fd:73:5c:95:76:7a:a6:a9:
         1a:3b:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org