Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.cer
File:                     BF234AB2322E7E5B16EF5E5FE90EFF330E062728.cer (raw, json)
Hash identifier:          BuR25Hk3XQArBiWQOQ/P5y+ZSGADRXrRYP7SayR9lug=
Subject key identifier:   BF:23:4A:B2:32:2E:7E:5B:16:EF:5E:5F:E9:0E:FF:33:0E:06:27:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56AFBC14538D2526C4A4146915CE178EBF5A3EC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 May 2024 14:18:53 +0000
Certificate not after:    Tue 06 May 2025 14:23:53 +0000
Subordinate resources:    AS: 269311
                          IP: 45.184.44.0/22
                          IP: 2804:62ac::/32

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 16:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:af:bc:14:53:8d:25:26:c4:a4:14:69:15:ce:17:8e:bf:5a:3e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  7 14:18:53 2024 GMT
            Not After : May  6 14:23:53 2025 GMT
        Subject: CN=BF234AB2322E7E5B16EF5E5FE90EFF330E062728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:92:4d:35:e4:ed:64:39:5f:cd:0e:8c:7b:
                    72:40:2a:87:80:0f:8c:ad:14:9c:15:85:eb:87:f0:
                    52:98:23:8c:c2:c7:2c:3e:4f:ea:b5:6e:0f:5e:43:
                    c6:a6:9c:1f:3e:81:db:c9:8e:3e:d7:3f:e9:fd:dd:
                    5c:fe:8f:14:d2:7e:64:dc:10:5b:95:65:45:45:e8:
                    9f:2a:8d:07:cc:af:2a:f4:dd:d8:c9:6e:52:81:96:
                    2d:a7:d6:82:91:0a:6d:4f:82:89:5f:bf:48:66:82:
                    28:f1:54:b6:ba:77:34:a5:24:f5:fe:d2:a7:ba:3c:
                    2c:46:69:bc:0a:fc:0b:80:14:79:e8:94:60:2c:21:
                    43:a5:58:cc:b1:e0:e4:24:9e:0b:7e:ed:d0:1d:e7:
                    ec:7d:c1:f4:4b:a9:e3:cb:fc:be:a1:24:84:6d:30:
                    2d:42:e3:2b:aa:d7:b0:eb:65:b4:d6:18:9b:2d:1a:
                    2a:f8:d2:ce:88:15:28:1f:9a:75:8e:1e:35:3b:38:
                    d7:f4:a1:b7:17:31:2b:34:71:06:e5:f9:97:b2:69:
                    17:d9:45:14:b9:37:c8:4b:da:98:bf:58:48:78:e6:
                    5b:38:39:38:48:f2:1c:1d:42:4c:ca:2a:2a:0e:45:
                    7e:78:3f:35:93:ac:61:a8:5b:e5:b0:8d:88:1d:a3:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:23:4A:B2:32:2E:7E:5B:16:EF:5E:5F:E9:0E:FF:33:0E:06:27:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.44.0/22
                IPv6:
                  2804:62ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269311

    Signature Algorithm: sha256WithRSAEncryption
         7c:bd:1a:2d:9d:03:a3:ac:36:ab:48:3d:d9:f5:b8:7c:61:00:
         86:6d:62:81:d4:12:ca:48:4c:d2:86:e5:38:a9:89:49:2e:ab:
         16:a3:08:5f:3e:e7:c8:6a:67:a0:75:93:48:1e:51:db:5d:5a:
         3f:2d:f0:d2:3a:b5:0a:11:16:9b:b4:57:4b:ce:86:1e:35:65:
         68:a0:3e:4b:c4:ac:b4:bf:df:7a:1e:ad:08:1e:57:b5:8e:93:
         ca:77:bb:8b:10:e1:a0:4a:8e:e5:40:2c:c0:55:6e:93:ff:1e:
         19:53:eb:45:3a:be:40:93:04:e7:7b:96:92:df:ea:62:76:52:
         52:fa:0a:2c:ab:e3:60:b0:b2:59:b6:d7:d5:a4:5b:9c:8f:bb:
         1c:1b:e9:cc:d1:54:75:51:f9:c6:23:ef:8b:c0:51:b8:0c:83:
         8a:4b:3f:1c:cb:b1:6f:a4:c1:59:cc:80:4d:d4:4c:8b:f8:fd:
         8f:e4:7c:ad:2a:5d:43:7e:d7:ec:24:6d:b2:2e:52:4b:14:e2:
         69:c0:d8:22:ba:cd:5d:59:58:6a:a3:e2:0e:d8:17:e2:cd:ec:
         f8:5c:0e:d1:ec:40:43:03:c3:ff:96:19:3c:64:85:f9:e9:2a:
         c4:21:cc:3c:c0:71:ca:1e:b8:4a:53:8a:a8:8c:f1:46:26:05:
         54:29:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 20:37:31 2024 by rpki-client on console-fra.rpki-client.org