Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.cer
File:                     11011CC8EDF8300F25FD6897A34101AC3CFDFB17.cer (raw, json)
Hash identifier:          hkKZebVc7y9I9upqwXCF7s5gn1xhHihqakMLT9lhNf0=
Subject key identifier:   11:01:1C:C8:ED:F8:30:0F:25:FD:68:97:A3:41:01:AC:3C:FD:FB:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F2332763A9BD5B79B6573A8BBD6C3B776A15400
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 20:12:49 +0000
Certificate not after:    Fri 19 Jul 2024 20:17:49 +0000
Subordinate resources:    AS: 268876
                          IP: 45.171.122.0/23
                          IP: 2804:5be8::/32

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 01:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:32:76:3a:9b:d5:b7:9b:65:73:a8:bb:d6:c3:b7:76:a1:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 20:12:49 2023 GMT
            Not After : Jul 19 20:17:49 2024 GMT
        Subject: CN=11011CC8EDF8300F25FD6897A34101AC3CFDFB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:b6:c2:55:3f:5a:7d:87:ae:e6:ff:33:0e:
                    92:8f:aa:87:9b:b5:16:cd:df:c4:97:df:ca:ad:39:
                    4a:51:e4:20:0b:3b:b5:2d:93:53:f8:e1:18:15:5f:
                    0e:b0:18:5a:6c:d1:fa:4d:64:d9:6b:69:84:99:55:
                    67:0c:8a:12:e0:cf:03:ac:8d:8c:20:57:55:d8:76:
                    5b:3a:15:db:55:15:78:5d:b3:5f:1d:79:df:8b:bc:
                    5d:1b:d4:49:7b:01:a9:a8:da:33:d5:73:61:66:95:
                    b4:f1:85:0a:66:f7:f8:88:dd:06:cf:d5:29:7e:d8:
                    3a:9a:03:9d:1a:d3:ed:a4:31:71:fe:26:1c:1a:2a:
                    76:27:2c:1d:c5:fb:7a:d3:7c:f9:92:01:42:6d:ab:
                    a2:b6:e5:e7:21:8b:4c:ab:6c:e8:dd:e8:24:24:ff:
                    1a:ba:ce:fd:e5:f0:9f:67:81:17:de:cf:1c:ce:3f:
                    f0:22:a2:f6:10:89:98:7f:3e:8d:f2:0c:f7:5f:e8:
                    fc:03:28:9f:1f:7e:fe:f1:29:7d:7e:24:8d:96:6f:
                    b3:2a:e7:9e:4e:25:e8:2d:98:f4:c2:d7:16:ae:a2:
                    46:4a:8d:e3:09:3c:05:16:ca:28:90:5f:c6:70:fc:
                    13:bd:ec:98:59:bd:34:ed:2b:83:ec:36:88:ed:80:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:01:1C:C8:ED:F8:30:0F:25:FD:68:97:A3:41:01:AC:3C:FD:FB:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/11011CC8EDF8300F25FD6897A34101AC3CFDFB17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23
                IPv6:
                  2804:5be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268876

    Signature Algorithm: sha256WithRSAEncryption
         38:30:a2:ee:4f:15:17:5c:7c:93:86:54:7a:33:3f:fe:60:d9:
         9c:b3:78:bb:b3:72:1a:40:47:07:0e:04:0a:33:0e:03:e0:c6:
         1b:48:51:3f:91:2a:b7:d5:a3:c7:6d:9c:c8:de:dd:61:9b:4d:
         3e:8b:89:05:e5:62:b5:83:2e:16:2b:d1:d1:d5:d0:5b:d0:cf:
         06:19:eb:46:a7:04:50:1d:58:4b:9e:c6:5b:03:1c:02:33:03:
         22:f4:a8:b3:4c:72:53:2e:70:5f:9f:c3:d7:70:32:92:d3:c6:
         84:d7:88:41:83:51:fe:b9:f2:5a:9e:4f:4e:22:f0:66:2e:27:
         6b:9d:2a:41:57:3e:1b:e5:2a:bc:eb:30:10:bd:a5:9b:fd:79:
         db:16:09:64:56:d9:4e:5b:a8:69:9f:09:72:e6:11:d1:26:bd:
         a7:55:2f:98:87:43:4d:ce:e0:7a:9b:03:c8:ae:49:2e:77:6b:
         69:97:7e:6b:0e:01:b3:86:04:de:cc:2d:af:d1:82:f5:db:23:
         91:e2:58:70:f2:6f:76:00:b7:57:cb:19:87:46:ce:29:2d:08:
         f2:07:07:6e:7b:49:ce:55:2f:ef:02:47:3b:7c:12:6e:2b:50:
         9b:95:86:a4:d3:8d:ef:4f:12:1a:ab:0c:74:1c:54:4b:97:96:
         50:d0:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----