Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF48FB072691CCAA107E9165D2E14327DFBE547B.cer
File:                     BF48FB072691CCAA107E9165D2E14327DFBE547B.cer (raw, json)
Hash identifier:          emGZ6L9rx37j//mE+ZPTEa4x5iRlncNDfn2vUwx3A2w=
Subject key identifier:   BF:48:FB:07:26:91:CC:AA:10:7E:91:65:D2:E1:43:27:DF:BE:54:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3656B19DEC0BE30C7C15B7D212A645DDEF91141A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/1/BF48FB072691CCAA107E9165D2E14327DFBE547B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:59:32 +0000
Certificate not after:    Wed 02 Apr 2025 19:04:32 +0000
Subordinate resources:    AS: 269298
                          IP: 45.183.188.0/22
                          IP: 2804:6274::/32

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 21:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:56:b1:9d:ec:0b:e3:0c:7c:15:b7:d2:12:a6:45:dd:ef:91:14:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:59:32 2024 GMT
            Not After : Apr  2 19:04:32 2025 GMT
        Subject: CN=BF48FB072691CCAA107E9165D2E14327DFBE547B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ea:6e:e1:f7:5e:4c:7e:f1:b9:13:cf:08:50:
                    8c:1d:4e:02:23:8e:46:08:ce:c6:fa:4d:70:85:d9:
                    74:f9:2d:60:e0:f2:16:76:6d:e9:e3:86:fb:5f:d6:
                    bc:6e:aa:bf:9e:d8:36:97:02:f1:90:92:12:c9:ce:
                    f2:21:d0:2b:b8:02:47:00:f2:ac:03:a0:5b:87:19:
                    11:8c:54:4b:73:d1:e5:34:f5:e0:0c:82:f2:5c:59:
                    00:87:29:a5:c3:7b:a8:a6:a8:be:73:8d:f5:84:fe:
                    eb:31:1e:21:f3:e7:64:9c:e9:7e:2e:ec:78:d4:f1:
                    75:d6:fd:f1:6c:73:bf:7f:4c:d1:e7:56:a8:41:80:
                    dc:a0:19:88:d8:63:f1:d4:68:36:e7:6e:61:37:20:
                    9a:aa:98:54:4a:79:63:6d:2b:86:d8:67:42:c0:7e:
                    a3:8b:b6:1a:f9:00:9b:67:ed:cc:8f:2a:8c:b3:4f:
                    4d:12:a4:51:e3:9e:76:f8:27:e0:0b:60:61:1f:2c:
                    a1:0d:fd:1e:7e:cc:57:fe:bc:df:6a:40:64:74:b5:
                    f0:ff:60:3b:c0:02:6a:df:13:4e:00:51:72:11:9b:
                    36:a2:9c:2a:6c:55:db:3e:ec:29:29:82:bd:a3:e2:
                    19:69:b3:b8:04:e7:41:6a:6d:ab:a2:c3:34:3f:e3:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:48:FB:07:26:91:CC:AA:10:7E:91:65:D2:E1:43:27:DF:BE:54:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/1/BF48FB072691CCAA107E9165D2E14327DFBE547B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.188.0/22
                IPv6:
                  2804:6274::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269298

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:c8:2e:6d:20:b3:c2:51:a9:7d:18:22:3d:c6:bd:bc:56:
         31:25:cb:bb:02:43:0f:3c:e6:34:24:fd:97:d6:45:6a:cf:8b:
         ed:22:16:53:e0:b6:a3:76:f7:10:03:b4:e2:f7:12:d9:83:71:
         99:e6:36:f6:45:03:24:50:31:67:75:4b:11:73:9c:64:9c:d0:
         9b:05:b8:49:8a:03:9e:ad:81:31:f3:74:ee:bf:f2:91:6e:ea:
         99:dc:e4:bc:bf:9a:00:4b:c9:14:cd:37:21:02:bb:10:51:fd:
         72:25:bb:f4:22:cb:b1:95:61:32:cd:f2:d3:82:7d:a0:8f:26:
         44:38:4f:10:2e:9a:03:a3:f5:4e:cf:42:b1:da:96:cf:c0:09:
         0e:97:67:40:c2:c4:e3:50:db:14:00:b6:51:ac:1a:94:51:a4:
         be:3e:4d:4d:b6:e6:0a:fa:c6:d0:8a:54:a9:46:93:e0:1d:95:
         7b:22:3d:fe:bd:2b:59:23:46:bb:ca:fd:42:bb:66:32:77:74:
         c4:50:b0:2e:86:0f:6e:32:bc:a1:fb:71:dd:98:a6:46:42:f5:
         d2:89:42:e4:f2:1a:ce:16:c1:fc:20:0e:ce:55:97:c4:dd:af:
         78:15:74:eb:12:1d:f6:62:0c:5b:4b:94:3d:fc:ff:7b:25:7d:
         c9:9e:e3:d1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNlaxnewL4wx8FbfSEqZF3e+RFBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODU5MzJaFw0yNTA0MDIxOTA0MzJaMDMxMTAvBgNV
BAMTKEJGNDhGQjA3MjY5MUNDQUExMDdFOTE2NUQyRTE0MzI3REZCRTU0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6m7h915MfvG5E88IUIwdTgIj
jkYIzsb6TXCF2XT5LWDg8hZ2benjhvtf1rxuqr+e2DaXAvGQkhLJzvIh0Cu4AkcA
8qwDoFuHGRGMVEtz0eU09eAMgvJcWQCHKaXDe6imqL5zjfWE/usxHiHz52Sc6X4u
7HjU8XXW/fFsc79/TNHnVqhBgNygGYjYY/HUaDbnbmE3IJqqmFRKeWNtK4bYZ0LA
fqOLthr5AJtn7cyPKoyzT00SpFHjnnb4J+ALYGEfLKEN/R5+zFf+vN9qQGR0tfD/
YDvAAmrfE04AUXIRmzainCpsVds+7Ckpgr2j4hlps7gE50FqbauiwzQ/41sTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/SPsHJpHMqhB+
kWXS4UMn375UezAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkZk
WW9Db2tnbXBGdERUb2loRm9zRm5hOEZDdmRiQ2U4bm84UlF1NmllRzgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJG
ZFlvQ29rZ21wRnREVG9paEZvc0ZuYThGQ3ZkYkNlOG5vOFJRdTZpZUc4LzEvQkY0
OEZCMDcyNjkxQ0NBQTEwN0U5MTY1RDJFMTQzMjdERkJFNTQ3Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbe8MA0EAgACMAcDBQAoBGJ0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQb8jANBgkqhkiG9w0BAQsFAAOCAQEAMavILm0gs8JRqX0Y
Ij3GvbxWMSXLuwJDDzzmNCT9l9ZFas+L7SIWU+C2o3b3EAO04vcS2YNxmeY29kUD
JFAxZ3VLEXOcZJzQmwW4SYoDnq2BMfN07r/ykW7qmdzkvL+aAEvJFM03IQK7EFH9
ciW79CLLsZVhMs3y04J9oI8mRDhPEC6aA6P1Ts9CsdqWz8AJDpdnQMLE41DbFAC2
UawalFGkvj5NTbbmCvrG0IpUqUaT4B2VeyI9/r0rWSNGu8r9QrtmMnd0xFCwLoYP
bjK8oftx3ZimRkL10olC5PIazhbB/CAOzlWXxN2veBV06xId9mIMW0uUPfz/eyV9
yZ7j0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org