Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C22434139FF6E8DC46C81978C6FCDEAB4E014AD9.cer
File:                     C22434139FF6E8DC46C81978C6FCDEAB4E014AD9.cer (raw, json)
Hash identifier:          nPd+rsIM01I+XNuCQk3/2pbbRdH/6piEt0m7s9j1WIQ=
Subject key identifier:   C2:24:34:13:9F:F6:E8:DC:46:C8:19:78:C6:FC:DE:AB:4E:01:4A:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       555D5B3E469F180FFE4F4FA94D6AA7DE67F0CA6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/C22434139FF6E8DC46C81978C6FCDEAB4E014AD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 18:55:08 +0000
Certificate not after:    Mon 12 Jan 2026 19:00:08 +0000
Subordinate resources:    AS: 264288
                          IP: 138.121.32.0/22
                          IP: 2804:2590::/32
Validation:               Failed, certificate revoked on Sun 16 Feb 2025 18:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5d:5b:3e:46:9f:18:0f:fe:4f:4f:a9:4d:6a:a7:de:67:f0:ca:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 18:55:08 2025 GMT
            Not After : Jan 12 19:00:08 2026 GMT
        Subject: CN=C22434139FF6E8DC46C81978C6FCDEAB4E014AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:96:af:de:12:53:c3:31:ce:52:2a:43:fa:
                    a3:7f:14:38:17:9c:7d:4c:1d:42:24:71:18:08:17:
                    f5:35:2f:29:be:4e:97:45:97:e9:19:65:30:ff:9c:
                    7f:95:93:9b:55:bb:70:5c:93:47:f2:cb:d6:dc:57:
                    84:63:d7:bf:0d:c8:a0:c6:c4:d1:f1:b5:b7:31:cd:
                    25:9f:5d:fd:12:df:b7:e7:ad:67:9f:33:8e:54:ba:
                    58:93:ec:ff:d2:34:22:1b:ac:72:00:92:11:ee:11:
                    a0:39:6f:0c:58:a3:cf:ed:58:5b:bb:a3:dc:74:2b:
                    74:88:9c:ba:fc:f0:67:aa:72:fd:1a:39:29:64:0f:
                    ba:36:e4:b5:34:63:47:1d:d7:d1:6e:d2:2c:82:a5:
                    87:54:66:0d:53:61:33:9f:26:ef:a7:aa:aa:13:e7:
                    dc:14:b3:d8:4e:9b:bd:c8:4f:77:a1:5f:fe:94:e4:
                    b3:3b:d6:0b:eb:0c:e0:35:3c:0b:fe:ef:96:b9:a2:
                    cf:4a:5c:c1:0b:c4:9f:d4:ec:82:77:5f:31:34:e2:
                    95:87:1c:f5:37:1d:7b:90:03:40:60:26:1c:df:bc:
                    d3:f8:b6:8a:c1:e6:3e:5e:08:f2:f0:6c:06:df:c9:
                    c6:fc:e8:83:4f:02:12:29:3d:d6:88:7a:fd:ff:1d:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:24:34:13:9F:F6:E8:DC:46:C8:19:78:C6:FC:DE:AB:4E:01:4A:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/C22434139FF6E8DC46C81978C6FCDEAB4E014AD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.32.0/22
                IPv6:
                  2804:2590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264288

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:f3:b8:db:ca:5b:7c:cf:61:c1:0d:83:d0:18:a7:35:96:
         66:55:db:9c:eb:e3:29:9b:83:3d:5a:d1:48:42:c1:54:7e:25:
         67:94:5a:e6:5c:d9:5c:05:ef:e3:0a:a5:7a:6e:b1:d8:a2:61:
         05:70:50:bc:57:bb:58:6c:d2:a0:a5:bd:9d:18:5e:6c:6e:f7:
         e2:c5:f2:66:d1:fc:d5:4c:9e:e0:81:4a:fc:22:a9:51:57:38:
         b1:3f:f9:86:f7:f6:fb:1c:43:98:1f:e4:7b:4d:1f:58:78:e7:
         ac:d8:fd:47:b7:c3:31:85:51:19:64:bf:96:32:93:64:92:fc:
         a3:e2:3e:2a:16:38:79:de:f4:61:72:33:49:82:72:bd:4d:05:
         92:f8:71:94:37:71:3e:71:7c:8b:d1:ba:a5:ad:40:8e:93:1f:
         34:c3:08:2d:ae:cf:1b:a0:43:c8:75:6c:9d:2f:3f:54:fe:5d:
         54:32:5f:8c:9d:be:db:69:ae:36:3d:b4:9e:3d:5f:db:1b:ce:
         24:22:c4:f4:5b:2e:02:86:c3:e6:d0:27:4d:f4:92:1e:b8:75:
         74:b1:fd:c1:f7:21:5f:89:d7:84:c7:e2:be:66:f1:58:59:9f:
         27:00:ab:35:9f:a0:81:c6:4b:b9:a1:d6:13:3e:79:96:88:68:
         a8:7c:ad:cf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVV1bPkafGA/+T0+pTWqn3mfwymswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMTMxODU1MDhaFw0yNjAxMTIxOTAwMDhaMDMxMTAvBgNV
BAMTKEMyMjQzNDEzOUZGNkU4REM0NkM4MTk3OEM2RkNERUFCNEUwMTRBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchZav3hJTwzHOUipD+qN/FDgX
nH1MHUIkcRgIF/U1Lym+TpdFl+kZZTD/nH+Vk5tVu3Bck0fyy9bcV4Rj178NyKDG
xNHxtbcxzSWfXf0S37fnrWefM45UuliT7P/SNCIbrHIAkhHuEaA5bwxYo8/tWFu7
o9x0K3SInLr88Geqcv0aOSlkD7o25LU0Y0cd19Fu0iyCpYdUZg1TYTOfJu+nqqoT
59wUs9hOm73IT3ehX/6U5LM71gvrDOA1PAv+75a5os9KXMELxJ/U7IJ3XzE04pWH
HPU3HXuQA0BgJhzfvNP4torB5j5eCPLwbAbfycb86INPAhIpPdaIev3/HWpJAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCJDQTn/bo3EbI
GXjG/N6rTgFK2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1k0
eUxtTnZaS3BORnlzRXVnd2ZXYnlIMzJ0Nlh2ZmFNRExvUEtVYllHMVUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dZ
NHlMbU52WktwTkZ5c0V1Z3dmV2J5SDMydDZYdmZhTURMb1BLVWJZRzFVLzAvQzIy
NDM0MTM5RkY2RThEQzQ2QzgxOTc4QzZGQ0RFQUI0RTAxNEFEOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCinkgMA0EAgACMAcDBQAoBCWQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQIYDANBgkqhkiG9w0BAQsFAAOCAQEADS7zuNvKW3zPYcEN
g9AYpzWWZlXbnOvjKZuDPVrRSELBVH4lZ5Ra5lzZXAXv4wqlem6x2KJhBXBQvFe7
WGzSoKW9nRhebG734sXyZtH81Uye4IFK/CKpUVc4sT/5hvf2+xxDmB/ke00fWHjn
rNj9R7fDMYVRGWS/ljKTZJL8o+I+KhY4ed70YXIzSYJyvU0FkvhxlDdxPnF8i9G6
pa1AjpMfNMMILa7PG6BDyHVsnS8/VP5dVDJfjJ2+22muNj20nj1f2xvOJCLE9Fsu
AobD5tAnTfSSHrh1dLH9wfchX4nXhMfivmbxWFmfJwCrNZ+ggcZLuaHWEz55loho
qHytzw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:36:02 2025 by rpki-client