Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0677275FA4E5204314C0665FA6E0A8E3F6B0D09E.cer
File:                     0677275FA4E5204314C0665FA6E0A8E3F6B0D09E.cer (raw, json)
Hash identifier:          R/24sZ1kHks+lOWrPcyy76rGbthvtkHvl1FD8k5hBWY=
Subject key identifier:   06:77:27:5F:A4:E5:20:43:14:C0:66:5F:A6:E0:A8:E3:F6:B0:D0:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38AE11E8DC60945395A90FD5C710C07EF16A1009
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/0677275FA4E5204314C0665FA6E0A8E3F6B0D09E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jul 2023 15:00:55 +0000
Certificate not after:    Sat 20 Jul 2024 15:05:55 +0000
Subordinate resources:    AS: 265242
                          IP: 168.0.20.0/22
                          IP: 2804:2cc4::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ae:11:e8:dc:60:94:53:95:a9:0f:d5:c7:10:c0:7e:f1:6a:10:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 15:00:55 2023 GMT
            Not After : Jul 20 15:05:55 2024 GMT
        Subject: CN=0677275FA4E5204314C0665FA6E0A8E3F6B0D09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:37:57:55:5b:2f:68:8b:66:c5:a4:19:9f:
                    85:fd:8c:1d:19:c8:f7:e2:ed:76:77:1a:99:b5:a9:
                    7a:8a:b9:f5:c9:8f:52:ab:15:dd:77:e0:ff:91:8f:
                    53:3e:45:47:35:fd:5e:48:53:51:1f:9a:cf:3c:49:
                    d0:17:9b:89:7f:e1:1b:74:c8:1f:85:ce:e3:1f:b3:
                    64:f0:2f:46:20:1c:08:64:ba:c9:40:53:86:e7:c1:
                    e0:de:c4:1d:e2:26:5d:b9:ab:0f:e2:b4:3b:b1:01:
                    06:a4:2f:31:c5:07:b0:2d:39:e3:ea:3b:3c:d1:ee:
                    dd:ac:a2:50:93:53:3b:6e:a8:d1:c4:25:7a:0a:a9:
                    82:46:bd:a4:76:26:d6:18:16:9c:6d:66:f2:a0:c1:
                    d0:3a:75:b4:ed:1d:b8:fa:d6:27:dd:01:fd:00:0a:
                    36:de:f4:60:33:ca:6f:e7:cb:fd:f4:ef:15:e2:9f:
                    66:4e:2e:a0:23:40:40:5e:21:7c:81:4e:2d:9a:5b:
                    da:1e:f3:fa:95:bd:3e:b8:f9:74:8b:a6:6a:70:be:
                    46:dc:40:5e:8e:7b:92:c3:e7:a6:3c:0d:09:44:64:
                    38:7f:5d:e0:3d:a4:2d:99:32:5e:a7:f8:25:92:d2:
                    78:58:72:01:e1:60:44:db:f2:13:6c:ea:10:d0:13:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:77:27:5F:A4:E5:20:43:14:C0:66:5F:A6:E0:A8:E3:F6:B0:D0:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/0677275FA4E5204314C0665FA6E0A8E3F6B0D09E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.20.0/22
                IPv6:
                  2804:2cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265242

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:85:c0:13:cd:e6:1e:fe:33:0e:69:2e:9b:14:82:01:0e:
         00:0a:f0:4b:7c:ec:d3:a8:ec:93:38:69:ab:9d:91:c3:44:60:
         d0:55:2b:1f:b5:b1:e6:c8:2a:e4:04:46:82:18:96:f1:fb:83:
         1e:aa:ce:19:1d:d0:3f:b3:22:ca:18:e8:5d:db:9f:41:66:cd:
         65:32:d5:5d:4a:b6:c6:7a:62:44:d3:42:da:d8:6b:33:b4:eb:
         43:03:50:35:08:4e:46:35:45:48:7d:58:ae:ee:4c:6e:8a:44:
         9f:af:b3:28:39:8f:29:09:38:a9:1f:f5:78:b0:b6:b9:79:1e:
         41:36:af:48:56:7f:2a:5d:6b:01:90:f3:fb:c4:0d:60:ca:12:
         ad:2d:b9:7f:78:18:81:2e:05:65:f1:61:15:08:d6:3d:ab:9e:
         bb:75:ae:16:0b:48:23:db:64:4c:02:01:b4:56:3d:22:b8:de:
         70:88:e6:02:78:73:59:14:4e:dd:38:bf:9f:35:9a:93:ee:5a:
         d3:62:99:40:21:55:9c:32:9b:0f:48:18:e0:38:7d:db:f6:76:
         07:be:2a:db:7c:18:bf:e1:51:53:3e:42:79:76:f5:ef:72:36:
         ed:cf:77:51:d3:08:fa:50:fb:52:70:b1:55:11:06:44:1b:f2:
         56:f2:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----