Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.cer
File:                     1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.cer (raw, json)
Hash identifier:          lRxCMmKpqXVrXnYpR8x6wEHJYIITD6q+0AquWRveMbA=
Subject key identifier:   1E:11:B0:62:30:9C:19:EC:7D:C7:23:F0:54:F8:C8:DD:AF:3A:4B:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       230FEDC35DE68BD22DA059C31CAC576C901B9A35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 13:46:54 +0000
Certificate not after:    Fri 24 May 2024 13:51:54 +0000
Subordinate resources:    AS: 265246
                          IP: 167.250.128.0/22
                          IP: 2804:2cd4::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:ed:c3:5d:e6:8b:d2:2d:a0:59:c3:1c:ac:57:6c:90:1b:9a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 13:46:54 2023 GMT
            Not After : May 24 13:51:54 2024 GMT
        Subject: CN=1E11B062309C19EC7DC723F054F8C8DDAF3A4B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:7f:2b:4a:3e:58:b3:8a:6c:bd:c7:0d:f2:
                    75:f5:43:1d:97:20:cb:9f:a3:da:91:2a:2c:01:ce:
                    bb:7b:1e:67:5c:86:5c:6e:e2:16:c2:28:e2:f4:24:
                    de:6e:ce:18:0c:99:76:d1:14:4e:6c:93:82:e9:37:
                    88:18:18:b8:78:c7:7e:58:b9:80:9c:11:48:81:b3:
                    6e:b1:eb:c3:00:5c:6a:14:85:23:44:dd:7c:9a:c2:
                    d9:3b:e6:a0:71:fb:17:66:6a:39:0b:04:0a:5f:3f:
                    85:33:24:20:86:9a:82:c2:db:5a:36:c0:aa:a3:74:
                    32:e5:cb:ff:06:dc:d6:63:d5:b8:73:d9:3a:47:79:
                    5c:13:d6:c7:61:e7:84:f7:f8:cd:95:e6:71:4f:29:
                    c0:28:30:e1:b6:98:f0:af:ae:1c:c1:4f:df:ac:3b:
                    c3:17:85:d9:12:14:61:0a:8e:cf:c5:37:17:52:39:
                    8f:e8:bd:80:cd:e2:b3:ef:90:79:cc:99:08:d0:33:
                    7f:8b:03:d3:7b:e5:26:40:95:08:70:d9:9a:b9:6b:
                    95:23:e4:87:08:a4:c6:61:32:ca:aa:36:01:d6:2f:
                    de:be:19:fe:06:6d:15:ce:47:44:ab:27:34:63:d4:
                    13:87:2d:e0:c5:0b:e8:d2:1e:a2:dd:d2:4a:50:3f:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:11:B0:62:30:9C:19:EC:7D:C7:23:F0:54:F8:C8:DD:AF:3A:4B:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.128.0/22
                IPv6:
                  2804:2cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265246

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:df:ca:b4:68:46:11:09:76:5d:a2:a0:3e:8e:a8:ff:e8:
         f9:c3:f1:f5:42:69:ee:b4:b1:9e:4f:b2:e3:50:9b:d0:b6:fb:
         46:25:52:c1:0f:33:3e:a9:6b:6e:c4:1d:58:65:af:6d:41:8f:
         40:a9:df:b6:66:a1:1b:09:af:4d:ef:bd:03:00:02:93:c4:66:
         59:ab:f5:a8:e0:01:3a:43:b0:93:f8:24:5c:3e:79:88:20:c6:
         2d:04:a3:0b:27:f2:7f:5f:2f:ef:b6:0e:89:72:3b:43:57:63:
         2b:72:13:3b:23:62:f9:97:f4:39:6b:5c:0c:fa:b4:58:45:fc:
         1e:87:cc:65:26:20:67:c6:8f:32:ff:a9:b6:ce:7a:07:31:c3:
         f4:ab:f7:bc:c3:77:69:57:34:ef:b0:cc:e1:37:8f:5f:ba:66:
         d2:d4:8d:54:76:a8:53:e7:3e:49:7b:94:0b:7b:5e:57:71:93:
         b2:06:04:3a:b0:cd:90:73:30:2e:16:f6:63:69:28:25:e4:d4:
         3d:ad:6a:02:c6:12:d5:39:4e:b2:00:20:97:1c:fd:32:0a:a3:
         00:d1:d8:bd:6c:50:85:90:14:2a:c5:5a:88:e0:3d:88:bb:a7:
         94:f0:32:3e:a3:a6:8c:44:6f:20:a8:61:ea:21:45:08:16:6f:
         b9:c6:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----