Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
File:                     22CBA337E0370365B681D563898357F37A7D4D97.cer (raw, json)
Hash identifier:          ZJaJk2Y5J6oEGQ7nrW0/k8ZNBcYLEjwIOjsgFlAoZDc=
Subject key identifier:   22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F633BB0BD6A81E92494D6899243F9B838DEEFA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Oct 2024 12:25:12 +0000
Certificate not after:    Thu 09 Oct 2025 12:30:12 +0000
Subordinate resources:    AS: 268207
                          IP: 45.235.52.0/22
                          IP: 200.225.112.0/22
                          IP: 2804:4d98::/32

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 05:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:63:3b:b0:bd:6a:81:e9:24:94:d6:89:92:43:f9:b8:38:de:ef:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 10 12:25:12 2024 GMT
            Not After : Oct  9 12:30:12 2025 GMT
        Subject: CN=22CBA337E0370365B681D563898357F37A7D4D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:f4:8e:75:c7:fe:c4:1f:80:cd:fa:5a:b5:
                    12:72:e7:ca:da:40:a9:99:82:5e:32:2c:af:71:d8:
                    22:5e:e1:ef:5d:b2:76:0d:ac:fd:5b:69:9b:9c:bf:
                    0e:70:fe:e4:e2:4a:56:f5:fa:19:3d:96:68:f5:cc:
                    5a:82:f3:1b:e6:63:81:df:29:0e:31:da:c3:5c:00:
                    d0:5b:6a:a8:91:1e:ab:ac:a3:cb:be:f2:09:f1:24:
                    ac:49:78:36:9a:70:d1:c7:34:b9:90:98:a5:e7:f8:
                    f8:ed:2b:97:39:1b:1a:da:0b:0f:07:58:44:7c:c3:
                    43:5a:68:4e:df:9b:00:3a:42:6c:84:a8:74:d8:2f:
                    97:cb:ea:5d:c6:4e:7c:0e:3d:16:c4:89:97:17:38:
                    1c:a3:82:1b:05:7b:65:58:e7:d1:45:51:a5:da:d5:
                    a4:34:e6:11:a3:76:95:2a:bf:20:4f:5e:13:b8:18:
                    70:c1:dd:43:bb:91:e6:ee:6b:1a:13:ab:ec:03:72:
                    25:db:00:d0:ef:d9:70:b4:9b:f2:a5:53:b7:c3:73:
                    2f:80:68:d8:5f:18:f2:21:72:7e:16:cb:2f:5a:7a:
                    37:19:66:bc:e8:4b:86:1b:3c:96:ab:e5:82:db:cb:
                    2a:43:e4:96:3c:9b:9f:0d:2f:4f:2b:84:77:48:56:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22
                  200.225.112.0/22
                IPv6:
                  2804:4d98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268207

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:86:ab:59:5b:35:ae:33:d3:4b:e7:bb:b3:21:f8:75:c9:
         8c:d7:db:6a:8d:a8:8d:2a:14:f2:53:bd:90:70:25:0e:ba:22:
         79:a3:0e:ee:fa:0d:8b:e3:6f:3f:76:3c:07:95:5e:5a:c7:14:
         17:18:3f:c3:9b:ac:c6:70:54:42:71:51:e8:e7:ca:51:f5:2e:
         3a:a3:97:4f:66:21:5e:6e:90:92:82:e9:9e:93:4b:09:57:ba:
         d3:9f:26:8c:86:fd:7d:68:6c:b2:46:29:48:e8:42:c4:b5:dd:
         32:fa:0a:92:66:03:3f:b5:20:04:2f:b3:65:b7:53:05:f0:ba:
         ad:50:07:d9:56:70:33:af:0b:12:fd:ef:f5:9c:74:26:7d:f9:
         4f:d5:12:d2:7f:49:5b:76:73:56:45:c7:44:5d:e0:79:c5:95:
         96:b8:cf:9c:0d:e3:1b:9f:43:54:f9:ff:57:7f:e3:bf:15:c0:
         69:8a:bb:69:54:a5:86:fc:e2:43:07:12:5c:4a:a9:ed:6b:15:
         9e:c5:21:c5:ee:2f:30:95:ef:5c:e3:6a:63:33:4c:83:89:0f:
         1f:85:11:3c:e2:d3:a9:6c:6e:6e:69:17:cf:01:b4:5c:cc:0f:
         36:11:1b:5d:21:df:24:1d:e3:f3:2a:ac:c1:9a:ff:5d:70:45:
         4f:66:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:29:38 2024 by rpki-client on console-fra.rpki-client.org