Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF52085FE63E2CCA183BD4198BBF05566824B3E0.cer
File:                     BF52085FE63E2CCA183BD4198BBF05566824B3E0.cer (raw, json)
Hash identifier:          NKHPpC0CiD4Nl2gMJIHsxD+IRlkkRdK8Iq/xG/IMj9E=
Subject key identifier:   BF:52:08:5F:E6:3E:2C:CA:18:3B:D4:19:8B:BF:05:56:68:24:B3:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F36C4F02607E3D3FC540FA6C557C5D21D32C9F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/BF52085FE63E2CCA183BD4198BBF05566824B3E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 18:22:04 +0000
Certificate not after:    Mon 26 Aug 2024 18:27:04 +0000
Subordinate resources:    AS: 61678
                          IP: 131.108.164.0/22
                          IP: 138.122.140.0/22
                          IP: 168.90.0.0/22
                          IP: 170.246.236.0/22
                          IP: 181.191.200.0/22
                          IP: 2804:1cd4::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:c4:f0:26:07:e3:d3:fc:54:0f:a6:c5:57:c5:d2:1d:32:c9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 28 18:22:04 2023 GMT
            Not After : Aug 26 18:27:04 2024 GMT
        Subject: CN=BF52085FE63E2CCA183BD4198BBF05566824B3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:08:af:05:48:42:a9:fc:74:c7:cd:5a:a5:
                    d0:46:5b:a6:5d:fb:5a:c4:e5:2e:47:5c:90:bf:33:
                    c3:e2:c6:d0:79:41:8a:50:e5:1c:b6:bf:e4:ac:24:
                    07:20:4f:82:87:c4:6f:05:1b:23:de:00:ff:65:28:
                    59:53:19:6f:88:6c:d6:b3:2d:19:3b:85:45:b4:b4:
                    6f:1c:32:af:27:ae:6e:72:1d:b1:53:e4:a1:69:23:
                    95:03:af:c2:f1:e9:52:d2:e9:39:dc:5f:3d:08:a6:
                    d8:10:c7:ea:15:19:d2:c9:1b:88:b9:71:67:79:89:
                    f6:ea:46:3c:3c:7d:0a:53:a3:ea:7a:f4:ec:b2:80:
                    1d:75:75:01:2b:f9:6e:86:5c:b7:f7:1d:c8:cc:ff:
                    91:89:94:c9:e5:bd:23:de:c6:68:f0:6b:4b:99:d0:
                    13:a5:c0:2d:ee:36:92:85:04:be:4d:c2:f1:fb:a0:
                    20:e3:be:5b:08:62:da:5e:7c:bd:ea:3d:a9:0e:31:
                    aa:24:b7:da:ae:a9:46:d3:ac:e9:7e:ec:53:0c:db:
                    75:59:41:41:04:f3:6b:1c:10:01:d7:34:02:10:c8:
                    3c:6d:59:a6:98:7a:6c:df:01:10:a9:f0:08:ca:ff:
                    27:de:f7:13:db:f2:7f:be:40:99:40:95:b3:a0:c7:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:52:08:5F:E6:3E:2C:CA:18:3B:D4:19:8B:BF:05:56:68:24:B3:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/BF52085FE63E2CCA183BD4198BBF05566824B3E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.164.0/22
                  138.122.140.0/22
                  168.90.0.0/22
                  170.246.236.0/22
                  181.191.200.0/22
                IPv6:
                  2804:1cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61678

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:3e:4d:5c:aa:e1:0a:ce:b1:11:2f:94:b6:1c:49:4d:08:
         26:9f:09:c8:d1:66:a5:0f:9d:91:ce:f2:54:10:90:13:4d:b1:
         c5:af:c6:ac:bd:9b:05:ea:14:6e:7c:77:a8:74:8d:15:b5:3b:
         9e:23:bf:72:88:8e:4d:c7:b7:26:a0:ab:d6:4b:d0:53:97:b5:
         47:f4:26:2c:10:10:0d:8f:79:a1:13:a9:6f:9c:f0:63:bc:ae:
         77:04:b2:8f:13:fd:01:5f:e9:ad:35:88:d0:ab:81:eb:01:95:
         83:92:eb:3b:69:4f:08:96:5b:4a:25:c4:3d:67:cc:65:61:ec:
         87:56:19:fc:36:17:2b:98:27:a0:0a:a4:41:04:99:8a:35:38:
         c0:6e:48:36:82:8b:e6:79:36:71:b7:40:0e:d7:e2:68:6d:84:
         5d:cb:36:b3:c4:13:c5:13:95:da:03:38:4f:84:fe:1f:05:73:
         71:8e:50:67:7f:42:dd:b2:c4:a3:64:51:29:3a:2f:9d:56:98:
         58:8b:a1:fe:e8:39:c7:15:22:67:7b:2b:8f:47:09:4a:a1:6b:
         bc:12:ac:cf:f7:ea:b3:74:46:99:27:e9:d1:6b:a9:05:50:43:
         8e:db:a0:40:3a:47:89:61:aa:e0:18:c9:85:c4:55:35:55:00:
         b8:d3:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:07 2023 by rpki-client on console.sobornost.net