Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C8290CF1608874A54A795F2E5F37F0AE0861D69.cer
File:                     3C8290CF1608874A54A795F2E5F37F0AE0861D69.cer (raw, json)
Hash identifier:          656DCRck1weRsPqI0g1mKNVVGl3nDnfqRr4/DUCtsfg=
Subject key identifier:   3C:82:90:CF:16:08:87:4A:54:A7:95:F2:E5:F3:7F:0A:E0:86:1D:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24A19DDF81A6FC40F9F195434AA096ED440B0227
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/3C8290CF1608874A54A795F2E5F37F0AE0861D69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 18:07:58 +0000
Certificate not after:    Tue 24 Jun 2025 18:12:58 +0000
Subordinate resources:    AS: 272624
                          IP: 2804:8624::/32

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 04:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a1:9d:df:81:a6:fc:40:f9:f1:95:43:4a:a0:96:ed:44:0b:02:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 18:07:58 2024 GMT
            Not After : Jun 24 18:12:58 2025 GMT
        Subject: CN=3C8290CF1608874A54A795F2E5F37F0AE0861D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:02:20:76:bd:0e:71:43:fc:40:33:75:f7:
                    22:98:43:ff:5f:43:46:35:7d:04:9e:62:c5:25:a5:
                    2c:c0:60:d6:e9:da:c6:7b:27:41:6e:69:d0:fc:b4:
                    00:94:f8:df:13:f0:c9:aa:9e:07:1f:5e:aa:98:ee:
                    99:89:c6:b8:25:26:09:24:ac:3a:43:92:a4:8d:50:
                    7d:78:84:c8:f9:88:87:cf:ac:1f:89:8a:13:aa:0b:
                    40:d1:6d:7e:04:a6:2c:86:1e:5e:17:0b:dc:5d:06:
                    7e:89:39:53:74:14:68:d7:59:66:28:5e:4a:50:55:
                    1b:d8:df:43:f5:c6:f0:8d:41:da:4f:31:c4:df:bf:
                    fc:a8:05:41:8d:13:a6:b7:5f:89:27:65:c8:6a:23:
                    e0:3b:d0:95:e0:73:75:33:ba:77:23:6a:d3:ba:59:
                    a7:d7:2b:33:f8:60:6d:98:2a:af:49:51:b0:bd:1d:
                    8e:56:d5:df:3e:da:d4:93:2b:14:49:84:3a:34:cb:
                    04:d8:29:36:12:f3:c6:0b:00:b9:b1:37:32:c5:89:
                    a4:12:5d:14:d8:a3:53:13:5d:b7:f9:a6:c4:46:10:
                    90:db:9c:fd:a6:7a:64:b0:86:dc:f6:e2:bc:0e:4a:
                    c2:ff:6c:9b:fa:19:74:2d:10:e4:bb:9e:3f:1a:79:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:82:90:CF:16:08:87:4A:54:A7:95:F2:E5:F3:7F:0A:E0:86:1D:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/3C8290CF1608874A54A795F2E5F37F0AE0861D69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272624

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:b5:d8:2e:ad:e5:8c:fe:95:c7:77:00:f7:e1:71:43:43:
         c6:e0:52:13:b5:f1:b9:96:e5:97:96:7f:2c:97:48:0c:e7:7a:
         8b:89:7f:b7:f9:57:e9:02:19:c4:b3:2d:14:2d:b0:08:ab:45:
         ed:6e:b9:4c:44:45:86:36:86:7a:7a:2b:48:52:66:cc:73:7b:
         c7:f9:35:a7:ad:59:17:d1:7d:87:5d:4d:0b:45:31:f3:5e:bc:
         8a:26:8b:23:6c:4d:7f:4b:1b:de:13:97:8a:20:8b:71:28:65:
         4d:a9:8d:97:70:7d:b4:d3:d0:8b:f0:50:02:93:10:d7:97:8f:
         b8:3b:80:72:67:ab:47:ec:34:92:80:c3:7b:37:a9:97:18:40:
         4a:fc:49:be:ff:72:11:c9:e4:6d:0d:08:ed:5c:2e:e8:27:ba:
         dc:cc:2d:c6:c4:ad:61:8d:0e:c7:b3:85:73:e4:91:3a:d9:9a:
         d6:6a:1f:e0:b8:07:2d:91:8c:6c:11:29:b4:c7:93:fe:d1:cc:
         19:9d:a8:90:40:fb:94:be:ea:57:ad:17:7d:3e:9c:76:24:19:
         d2:1b:06:b3:74:31:6c:31:3b:f9:37:67:46:36:83:5b:11:4a:
         0c:83:26:ef:87:c6:73:a8:fb:75:2e:0c:43:42:fc:8f:32:8b:
         e6:c6:8b:30
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUJKGd34Gm/ED58ZVDSqCW7UQLAicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA2MjUxODA3NThaFw0yNTA2MjQxODEyNThaMDMxMTAvBgNV
BAMTKDNDODI5MENGMTYwODg3NEE1NEE3OTVGMkU1RjM3RjBBRTA4NjFENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfgIgdr0OcUP8QDN19yKYQ/9f
Q0Y1fQSeYsUlpSzAYNbp2sZ7J0FuadD8tACU+N8T8MmqngcfXqqY7pmJxrglJgkk
rDpDkqSNUH14hMj5iIfPrB+JihOqC0DRbX4EpiyGHl4XC9xdBn6JOVN0FGjXWWYo
XkpQVRvY30P1xvCNQdpPMcTfv/yoBUGNE6a3X4knZchqI+A70JXgc3UzuncjatO6
WafXKzP4YG2YKq9JUbC9HY5W1d8+2tSTKxRJhDo0ywTYKTYS88YLALmxNzLFiaQS
XRTYo1MTXbf5psRGEJDbnP2memSwhtz24rwOSsL/bJv6GXQtEOS7nj8aeQgBAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8gpDPFgiHSlSn
lfLl838K4IYdaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlRo
dThvVFhRZmt0R1JkQVdKVVRIeG45VDI5a25Xd1I3M21EQnkxekZ2QUwvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZU
aHU4b1RYUWZrdEdSZEFXSlVUSHhuOVQyOWtuV3dSNzNtREJ5MXpGdkFMLzAvM0M4
MjkwQ0YxNjA4ODc0QTU0QTc5NUYyRTVGMzdGMEFFMDg2MUQ2OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASGJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
KPAwDQYJKoZIhvcNAQELBQADggEBAFS8tdgureWM/pXHdwD34XFDQ8bgUhO18bmW
5ZeWfyyXSAzneouJf7f5V+kCGcSzLRQtsAirRe1uuUxERYY2hnp6K0hSZsxze8f5
NaetWRfRfYddTQtFMfNevIomiyNsTX9LG94Tl4ogi3EoZU2pjZdwfbTT0IvwUAKT
ENeXj7g7gHJnq0fsNJKAw3s3qZcYQEr8Sb7/chHJ5G0NCO1cLugnutzMLcbErWGN
DsezhXPkkTrZmtZqH+C4By2RjGwRKbTHk/7RzBmdqJBA+5S+6letF30+nHYkGdIb
BrN0MWwxO/k3Z0Y2g1sRSgyDJu+HxnOo+3UuDENC/I8yi+bGizA=
-----END CERTIFICATE-----
Generated at Sun Nov 10 10:18:56 2024 by rpki-client on console-ams.rpki-client.org