Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.cer
File:                     22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.cer (raw, json)
Hash identifier:          AG1WaQYCtmG5xw8ArGwAF3/JgPgmmKKq31DOK0qe8TA=
Subject key identifier:   22:DF:D4:1F:37:2A:44:E5:97:D3:8C:D4:0E:1D:FA:D6:B8:9E:CF:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       508B8A504A1198E7FE5D64F772F503CCD751A5D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Apr 2024 16:34:46 +0000
Certificate not after:    Tue 29 Apr 2025 16:39:46 +0000
Subordinate resources:    AS: 271578
                          IP: 2804:7db8::/32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 22:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8b:8a:50:4a:11:98:e7:fe:5d:64:f7:72:f5:03:cc:d7:51:a5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 16:34:46 2024 GMT
            Not After : Apr 29 16:39:46 2025 GMT
        Subject: CN=22DFD41F372A44E597D38CD40E1DFAD6B89ECF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:46:69:78:34:61:fb:71:bc:44:68:e6:d9:
                    f2:e4:e5:24:aa:35:4e:a0:9b:5e:4f:e2:88:4e:67:
                    7a:4c:27:c6:09:c1:ca:49:44:87:f3:1b:bd:56:1b:
                    13:a2:9f:ac:a7:61:83:22:99:85:2b:f7:e1:a6:94:
                    c8:5b:bc:f5:75:de:b9:45:fa:07:c1:d8:a9:38:74:
                    f7:6d:31:af:46:ed:07:6d:da:23:f9:2f:00:bb:43:
                    2d:81:19:db:db:b0:6c:74:19:d7:f0:ef:af:74:02:
                    68:7b:27:44:bb:2a:78:d2:00:1b:b5:bb:b7:a1:46:
                    d1:50:ca:19:17:c9:c2:ff:34:f8:1a:e1:6b:84:f8:
                    c7:19:86:d7:91:b2:41:0d:04:60:bf:6d:b1:a6:1a:
                    ec:ed:89:44:22:22:f9:92:f6:27:9f:60:29:b8:15:
                    43:e1:28:21:44:50:27:8a:91:84:e9:cd:61:95:77:
                    99:f7:69:a4:64:85:ad:9c:a9:80:57:be:a9:ab:0b:
                    a5:67:2f:77:eb:8b:a6:36:8e:cf:07:65:b7:da:ab:
                    fe:a9:c2:66:0d:50:c9:86:f4:ef:aa:2d:e8:0a:9a:
                    be:6f:bb:10:e7:7d:7a:a8:e3:20:9b:ab:db:e7:1a:
                    b5:36:68:a9:1f:d2:b7:26:c4:66:59:59:2e:87:79:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:DF:D4:1F:37:2A:44:E5:97:D3:8C:D4:0E:1D:FA:D6:B8:9E:CF:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271578

    Signature Algorithm: sha256WithRSAEncryption
         64:c3:15:99:c2:35:b8:d4:25:01:06:57:d1:51:13:f5:24:70:
         76:f5:4a:9b:82:cc:94:b8:dc:f7:84:14:fc:de:ec:04:99:d2:
         c9:72:3a:10:e7:aa:f6:b0:fc:88:d0:1a:ec:d2:a1:61:27:7b:
         44:8d:a4:b1:52:09:2f:e7:0d:3d:81:77:b2:7a:7d:ce:75:2f:
         8d:e8:ab:cf:ea:4a:14:41:2f:05:5b:78:d8:b0:c8:34:51:e4:
         1f:85:2e:81:64:fb:a9:f4:93:35:ed:67:d8:67:7d:53:c4:37:
         d1:26:8c:bb:5e:c1:73:d9:b9:29:98:ac:f5:b2:01:b2:31:be:
         c7:b3:e9:30:74:13:09:8e:62:fd:b3:8c:51:b5:0e:9e:f8:aa:
         70:63:1a:76:35:e6:b5:ce:53:ed:69:dd:e3:98:b5:07:f9:15:
         0f:31:56:54:20:6c:4c:12:c5:c5:76:f5:58:67:00:7a:4e:38:
         26:0b:1b:d2:4d:48:5a:66:cb:f8:1d:1c:84:9c:ad:14:fe:64:
         f1:62:d2:2f:0e:42:89:da:ca:78:f1:50:8b:38:a5:88:a5:93:
         28:ff:fa:ab:70:fe:5b:47:b2:85:83:eb:55:df:d4:b7:e3:1e:
         3b:73:94:2d:a1:9a:0f:2a:1b:59:6f:1d:a0:89:21:0e:23:5b:
         05:ea:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 00:50:57 2024 by rpki-client on console-fra.rpki-client.org