Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.cer
File:                     07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.cer (raw, json)
Hash identifier:          1TU1u5LDZ7eX31ZPX3t416OVJg0+j5TQw2WGVAfXQZs=
Subject key identifier:   07:C1:E5:D4:D7:A2:FE:F7:AB:C3:80:98:00:24:FA:8E:5F:36:67:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E05E31BEB950107B8EDECDD2AB77C267F0FBCF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 11:48:32 +0000
Certificate not after:    Tue 25 Jun 2024 11:53:32 +0000
Subordinate resources:    AS: 61638
                          IP: 131.100.136.0/22
                          IP: 2804:1c1c::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:05:e3:1b:eb:95:01:07:b8:ed:ec:dd:2a:b7:7c:26:7f:0f:bc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 11:48:32 2023 GMT
            Not After : Jun 25 11:53:32 2024 GMT
        Subject: CN=07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:d2:a9:d2:20:dd:0d:45:81:e8:ef:24:a6:
                    f9:18:42:f4:c8:c1:b9:60:75:f9:ad:2c:a2:61:1c:
                    f2:24:b9:d2:8f:72:1f:86:20:0c:ce:d1:93:69:20:
                    b9:21:af:b2:8f:a4:3b:27:54:61:65:1e:b7:57:5a:
                    6d:02:4d:3c:61:71:2f:8e:df:1e:74:18:95:8f:5c:
                    bb:a5:71:44:fb:40:67:6b:76:a4:c6:6f:9c:60:e7:
                    e2:8a:18:f2:73:14:e6:8a:68:0b:4d:73:4e:df:e8:
                    b3:ce:b6:7d:c0:f7:e8:62:eb:33:16:87:d8:e0:96:
                    9f:45:7a:1c:90:97:4a:fe:d9:c9:8c:98:58:96:15:
                    78:69:11:e3:90:c4:10:d1:c3:b0:70:0a:d1:81:c8:
                    88:79:b7:28:25:33:78:8e:c6:5d:47:75:8b:71:ee:
                    c2:55:d2:ea:c5:fc:d8:f5:0e:e9:81:0c:02:74:f1:
                    48:8b:bc:c2:23:d4:34:ba:be:5f:62:ff:7e:24:e0:
                    80:3a:89:1a:c9:c1:e8:59:91:f3:35:20:95:0b:43:
                    66:8c:ac:13:9d:bb:f5:e7:de:ba:7b:2d:c0:28:f8:
                    78:d9:03:6f:d7:61:9c:a0:89:af:c8:a9:33:1f:a9:
                    87:c7:f3:a1:32:54:c5:b0:3e:c8:7e:00:01:d4:82:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:C1:E5:D4:D7:A2:FE:F7:AB:C3:80:98:00:24:FA:8E:5F:36:67:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.136.0/22
                IPv6:
                  2804:1c1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61638

    Signature Algorithm: sha256WithRSAEncryption
         26:77:bc:fe:ad:1a:37:7e:e5:b6:4b:74:f0:d3:42:65:16:24:
         d3:58:db:36:63:7f:e3:7c:7f:83:d2:69:da:92:ea:b3:cc:83:
         80:84:8f:ec:2e:fa:03:36:a1:78:b1:5c:58:8f:12:cf:7c:33:
         3a:32:b3:58:07:88:ef:ad:f5:05:4f:ab:ca:3b:08:9a:dd:2c:
         83:28:5b:79:a9:ac:81:34:e8:7f:33:fc:aa:2c:54:e1:e1:24:
         0f:ea:f6:8a:f6:b9:23:ca:85:55:a6:b4:10:fd:f7:6b:e6:32:
         97:75:a8:f1:b0:9a:aa:86:d6:f3:21:34:37:ad:ee:12:f0:e8:
         32:55:b7:c9:d1:ae:d2:d9:2b:1d:33:b3:f7:83:99:b7:3f:42:
         4f:71:f1:70:66:4f:76:f6:13:a8:eb:ee:49:cf:13:8d:96:86:
         3d:c1:ec:ec:cf:1f:b8:a5:67:23:cb:12:1e:77:b1:b7:13:f0:
         2c:40:d7:82:d8:5b:25:9f:4b:7e:3d:5c:1d:88:9f:8a:eb:93:
         ff:c5:13:2c:ac:f0:65:93:8c:c6:b1:9a:4a:e4:20:31:4b:ee:
         f4:32:ba:e7:37:42:cb:52:91:72:41:e2:73:13:50:1d:0a:66:
         5c:e2:5f:c9:0e:22:f5:7b:9d:f9:24:57:c3:cd:8b:c4:76:28:
         ce:04:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----