Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.cer
File:                     3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.cer (raw, json)
Hash identifier:          lx+xZc+BigRRQ/F1mhd02HShuvGq8AuZL8XSgp6GaAc=
Subject key identifier:   3C:11:FB:D4:37:AE:F0:FF:AD:58:F5:B8:97:F0:AD:37:BE:3D:DA:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C323F5E915353B9271EB13CC8440B0A1D17B180
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jun 2024 16:20:07 +0000
Certificate not after:    Tue 03 Jun 2025 16:25:07 +0000
Subordinate resources:    AS: 268471
                          IP: 45.160.192.0/22
                          IP: 2804:51b4::/32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:32:3f:5e:91:53:53:b9:27:1e:b1:3c:c8:44:0b:0a:1d:17:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  4 16:20:07 2024 GMT
            Not After : Jun  3 16:25:07 2025 GMT
        Subject: CN=3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:1d:9c:e1:b8:08:20:b2:78:7f:80:7e:39:
                    c2:0c:fb:2c:e7:8e:0c:50:cc:29:e5:4a:e8:15:e0:
                    64:18:42:ce:fe:5f:75:6f:44:c2:19:0b:3f:d5:8b:
                    f8:54:43:2a:30:61:1e:17:9e:81:16:19:18:95:0b:
                    54:4f:c3:61:c9:7c:8f:54:75:4c:3b:8a:29:61:46:
                    ad:2a:82:53:a1:a1:04:3a:a1:6a:b2:dd:ee:98:7d:
                    7a:e9:3c:f1:96:fd:3b:82:a2:ee:80:38:64:55:91:
                    25:7b:8f:f1:51:f1:62:2e:10:5a:f2:25:f6:7f:94:
                    09:76:e7:04:86:45:7e:e3:57:67:98:5b:9a:c1:83:
                    d1:73:14:18:39:56:3e:07:c8:76:33:06:1c:7e:20:
                    5e:94:70:19:00:70:df:da:b6:fd:d7:d9:9d:90:fe:
                    ee:a5:08:90:59:30:67:3f:c9:c8:f6:1d:9a:a5:e8:
                    ce:71:c1:f6:11:ff:46:6f:1d:39:e9:06:a0:50:9a:
                    26:f2:9d:d8:5f:a8:e7:62:b8:ea:fb:ab:a9:22:11:
                    6d:b0:3e:16:26:4d:7b:0b:1f:c9:67:08:da:ab:13:
                    37:a8:7f:cc:c0:ab:2a:cc:ad:dd:55:f5:99:2c:03:
                    4a:7e:7b:13:c3:9c:b1:43:8d:01:c2:c5:d3:5f:76:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:11:FB:D4:37:AE:F0:FF:AD:58:F5:B8:97:F0:AD:37:BE:3D:DA:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.192.0/22
                IPv6:
                  2804:51b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268471

    Signature Algorithm: sha256WithRSAEncryption
         d6:7c:af:07:93:cd:6b:d2:97:78:8d:bc:51:fb:14:9a:0e:0e:
         15:03:87:9a:75:1a:22:52:40:fc:ea:60:80:52:07:6a:ee:9b:
         9e:e1:bb:62:51:a0:d1:2f:b4:c3:e8:52:93:54:3f:eb:37:93:
         87:98:04:e3:96:e5:0e:be:23:03:3d:10:dc:cf:ba:80:b2:ef:
         e5:a8:79:a9:0f:f1:71:fd:8c:f2:7b:a9:6e:83:a5:76:9a:58:
         36:30:6a:83:e1:59:8f:be:69:e4:55:ce:88:af:94:e9:7a:f7:
         04:c4:68:e7:a1:0d:6e:d0:46:a5:90:37:52:3a:2a:4b:3e:64:
         9a:34:65:9c:bd:3b:53:1a:01:e3:2f:14:fb:f3:13:ed:ab:e3:
         67:c1:ac:c1:cf:cc:92:0e:58:23:f3:67:e9:0f:58:2a:99:ba:
         36:ae:1b:dc:42:a5:13:ae:01:03:bc:03:71:8b:15:c2:31:98:
         46:3e:2a:0a:78:ab:44:1e:41:da:50:31:18:73:46:8e:c6:65:
         45:6f:3f:7a:12:4d:da:ad:7e:40:8c:f9:71:0b:e0:81:01:41:
         50:c2:bb:6d:b2:7a:07:4b:e1:f8:fb:ad:a0:b6:84:f9:ac:29:
         dd:b4:3e:f3:81:5b:7c:be:49:58:38:b9:ca:00:cc:0c:49:e1:
         df:10:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 03:38:12 2024 by rpki-client on console-fra.rpki-client.org