Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22B70459584D64C53F12ECAD393AF1413376F21C.cer
File:                     22B70459584D64C53F12ECAD393AF1413376F21C.cer (raw, json)
Hash identifier:          iMDmXWQOKxoFeCJ77NC3AIVE7NsFfGRr/dSjlD166co=
Subject key identifier:   22:B7:04:59:58:4D:64:C5:3F:12:EC:AD:39:3A:F1:41:33:76:F2:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71AEDD84686A46740D68FF3414FD31C45D8F5AB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/22B70459584D64C53F12ECAD393AF1413376F21C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 00:30:26 +0000
Certificate not after:    Tue 22 Jul 2025 00:35:26 +0000
Subordinate resources:    AS: 262577
                          IP: 177.84.24.0/22

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 12:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ae:dd:84:68:6a:46:74:0d:68:ff:34:14:fd:31:c4:5d:8f:5a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 00:30:26 2024 GMT
            Not After : Jul 22 00:35:26 2025 GMT
        Subject: CN=22B70459584D64C53F12ECAD393AF1413376F21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:5b:b6:eb:2b:da:b0:03:51:ce:1d:9a:f4:
                    9c:12:f1:19:b2:46:fc:d4:5a:f4:27:36:4e:12:28:
                    96:2d:ca:04:9a:27:7f:9a:76:62:90:2e:ff:1a:b7:
                    14:aa:a9:a5:eb:01:03:73:40:15:60:ba:a7:1b:af:
                    e9:30:43:aa:cf:bd:c5:37:de:88:b3:9a:c8:5d:fb:
                    d2:7c:a6:f7:82:28:46:81:b6:a0:b0:2f:71:30:7a:
                    e3:a4:14:02:78:0c:57:ef:8d:e4:a5:67:27:8a:33:
                    43:c5:1e:4c:41:ab:89:d2:06:05:76:45:bd:ad:99:
                    e6:26:ba:f2:fb:e1:ef:0e:b8:08:7f:2e:a7:1f:91:
                    52:19:85:95:7f:32:11:69:ea:ab:b5:15:b3:96:5b:
                    14:8f:ae:ad:ca:b4:49:8b:81:0a:b8:fe:14:c8:22:
                    09:b8:d9:0c:c4:d7:90:3c:20:dc:f8:5e:33:c8:56:
                    fc:23:82:8c:ae:85:58:ee:f3:ad:49:82:43:4b:3d:
                    e3:71:f6:75:87:ba:05:90:04:06:6c:37:15:05:e9:
                    52:f8:05:13:86:df:05:a7:d3:2e:a7:38:51:5c:90:
                    fd:f7:da:78:ad:5f:82:70:2c:d8:3c:a7:fd:0d:58:
                    d1:8c:d0:9c:46:d4:60:2e:c5:cc:22:02:4a:2e:1b:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:B7:04:59:58:4D:64:C5:3F:12:EC:AD:39:3A:F1:41:33:76:F2:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/22B70459584D64C53F12ECAD393AF1413376F21C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.24.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262577

    Signature Algorithm: sha256WithRSAEncryption
         c9:28:cf:4a:12:71:6c:9c:88:31:c1:ff:12:ae:4b:81:ac:de:
         47:24:46:87:86:3e:d7:83:86:58:28:15:11:65:17:70:0d:59:
         7f:f1:5b:5b:05:e3:47:20:03:89:87:ce:db:89:e5:78:a0:44:
         fe:2c:dd:41:78:32:32:c0:46:15:29:45:08:65:7c:fb:89:97:
         ee:74:25:f8:da:07:db:f1:63:fd:56:a1:33:33:97:ed:b2:d6:
         60:bd:d3:db:53:74:51:90:d4:55:4e:7e:a7:29:d8:52:89:7f:
         a2:f5:46:3a:f4:24:c5:84:b6:2b:2c:25:a1:bc:2d:95:bb:9b:
         18:04:59:58:5d:45:72:5d:24:0b:77:a2:fd:9c:55:75:5d:55:
         70:77:a3:83:1a:9e:25:ea:19:b3:c6:f5:c1:48:6d:c0:a9:80:
         25:59:22:a5:1d:14:f7:29:22:c3:84:b6:24:13:76:3c:82:cf:
         3e:27:a4:60:9f:95:c2:6d:01:a1:2c:99:ed:5c:ae:4f:e0:a3:
         72:9f:7e:05:ee:1d:5f:6e:d8:47:3d:5b:fc:29:78:3d:e4:e9:
         6c:fd:ea:fb:19:0d:35:ee:6e:9b:28:29:e4:88:25:a8:f8:fc:
         7a:86:b7:68:f6:c4:a9:d6:3e:20:60:56:8b:5d:e1:18:6c:a4:
         3f:84:db:e6
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIUca7dhGhqRnQNaP80FP0xxF2PWrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjMwMDMwMjZaFw0yNTA3MjIwMDM1MjZaMDMxMTAvBgNV
BAMTKDIyQjcwNDU5NTg0RDY0QzUzRjEyRUNBRDM5M0FGMTQxMzM3NkYyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0D1u26yvasANRzh2a9JwS8Rmy
RvzUWvQnNk4SKJYtygSaJ3+admKQLv8atxSqqaXrAQNzQBVguqcbr+kwQ6rPvcU3
3oizmshd+9J8pveCKEaBtqCwL3EweuOkFAJ4DFfvjeSlZyeKM0PFHkxBq4nSBgV2
Rb2tmeYmuvL74e8OuAh/LqcfkVIZhZV/MhFp6qu1FbOWWxSPrq3KtEmLgQq4/hTI
Igm42QzE15A8INz4XjPIVvwjgoyuhVju861JgkNLPeNx9nWHugWQBAZsNxUF6VL4
BROG3wWn0y6nOFFckP332nitX4JwLNg8p/0NWNGM0JxG1GAuxcwiAkouG+0xAgMB
AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQitwRZWE1kxT8S
7K05OvFBM3byHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkZR
VWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JG
UVVpNVZRWjQ2N0ZWb01qSGVNMkpLTFNSQUNMSDNUa2hlWTh4SFBUVkZ6LzAvMjJC
NzA0NTk1ODRENjRDNTNGMTJFQ0FEMzkzQUYxNDEzMzc2RjIxQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVQYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQB
sTANBgkqhkiG9w0BAQsFAAOCAQEAySjPShJxbJyIMcH/Eq5LgazeRyRGh4Y+14OG
WCgVEWUXcA1Zf/FbWwXjRyADiYfO24nleKBE/izdQXgyMsBGFSlFCGV8+4mX7nQl
+NoH2/Fj/VahMzOX7bLWYL3T21N0UZDUVU5+pynYUol/ovVGOvQkxYS2Kywlobwt
lbubGARZWF1Fcl0kC3ei/ZxVdV1VcHejgxqeJeoZs8b1wUhtwKmAJVkipR0U9yki
w4S2JBN2PILPPiekYJ+Vwm0BoSyZ7VyuT+Cjcp9+Be4dX27YRz1b/Cl4PeTpbP3q
+xkNNe5umygp5IglqPj8eoa3aPbEqdY+IGBWi13hGGykP4Tb5g==
-----END CERTIFICATE-----
Generated at Wed Nov 13 14:36:38 2024 by rpki-client on console-fra.rpki-client.org