Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/240CF2F9AAAA2AA84082AE34651C39B575156BFE.cer
File:                     240CF2F9AAAA2AA84082AE34651C39B575156BFE.cer (raw, json)
Hash identifier:          Fo3+vNXvXED9crgzQU00fZhO/LoDTvDXEDMDT1Aj6vU=
Subject key identifier:   24:0C:F2:F9:AA:AA:2A:A8:40:82:AE:34:65:1C:39:B5:75:15:6B:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E4162E81E715D6A598F2E16A06CC34B5FA4FCB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/240CF2F9AAAA2AA84082AE34651C39B575156BFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Mar 2023 17:49:20 +0000
Certificate not after:    Fri 29 Mar 2024 17:54:20 +0000
Subordinate resources:    AS: 265086
                          IP: 170.233.32.0/22
                          IP: 2804:3294::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:41:62:e8:1e:71:5d:6a:59:8f:2e:16:a0:6c:c3:4b:5f:a4:fc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 31 17:49:20 2023 GMT
            Not After : Mar 29 17:54:20 2024 GMT
        Subject: CN=240CF2F9AAAA2AA84082AE34651C39B575156BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:2b:80:a7:40:21:ea:78:2a:ad:e2:03:68:
                    b1:9d:0b:dc:b4:e0:f3:23:2d:0b:23:1a:62:c9:24:
                    73:24:86:6b:aa:5e:09:c6:7d:74:46:e3:ef:13:e5:
                    71:f2:41:f9:cb:fa:28:45:4f:40:72:6f:b8:c2:04:
                    31:80:58:3f:97:0b:39:c4:9c:86:28:9c:52:44:ab:
                    18:a5:ef:43:c1:e7:5b:6d:29:de:e3:2b:84:db:76:
                    0b:86:d4:2e:5c:fb:0a:96:a5:cd:04:65:a4:d5:c1:
                    c9:d7:55:b2:63:f7:76:3b:89:7d:b7:ec:84:27:ad:
                    93:26:6c:81:e8:68:82:39:e4:35:9a:33:16:46:ef:
                    3c:57:d6:c6:5f:3e:a0:41:1f:ac:ae:f1:40:51:43:
                    97:cf:4a:5f:f3:29:36:cc:80:95:86:79:43:cb:96:
                    61:91:d7:74:37:f5:65:18:c3:30:6c:af:d9:ce:71:
                    22:e6:02:c9:04:88:d6:11:14:23:39:80:1a:fe:db:
                    c1:8b:08:83:03:5e:e8:a0:11:e5:33:ff:5c:00:3e:
                    9d:a7:1e:ad:dc:be:e1:09:55:b5:c9:aa:b5:5b:3d:
                    53:e9:23:b5:33:74:b2:06:79:7f:b8:a8:c2:14:2f:
                    f7:74:cf:41:b4:e9:c1:b3:60:55:15:66:9e:82:0d:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:0C:F2:F9:AA:AA:2A:A8:40:82:AE:34:65:1C:39:B5:75:15:6B:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/240CF2F9AAAA2AA84082AE34651C39B575156BFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22
                IPv6:
                  2804:3294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265086

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:04:10:d7:d2:3f:56:f0:72:9e:58:40:6c:b8:79:26:c5:
         72:b6:61:79:61:a8:a3:dd:17:2b:3a:46:ce:9d:fc:c3:e2:ed:
         da:23:4b:18:7a:75:63:47:60:db:6e:98:aa:6d:79:0a:b5:32:
         60:0d:40:bd:fb:38:52:b1:45:e7:66:f5:39:06:ca:d5:32:bc:
         3e:f9:5c:43:a3:34:fa:31:9c:41:b0:fc:ed:2d:d8:32:cb:68:
         be:a3:be:53:29:87:d5:ce:6b:46:ee:47:d2:92:4a:83:d0:b7:
         3c:79:62:0a:92:c1:a4:97:bc:ac:34:b9:0a:26:6a:1b:22:71:
         9e:36:97:13:b6:35:79:04:17:ed:86:38:9e:78:be:fa:03:39:
         b5:a7:6e:9e:53:db:8f:41:cd:d1:2f:05:cc:a0:de:63:de:88:
         97:46:a2:4a:b7:ac:ed:a3:b3:52:f5:cb:bb:07:61:41:c6:23:
         09:99:bb:7f:18:6e:db:24:b3:28:e0:1e:67:26:5e:c6:3a:16:
         68:e8:3f:8c:af:48:33:6f:65:b3:ff:92:98:41:89:d3:cd:39:
         f8:85:8b:37:30:68:3c:b8:f0:a6:48:8f:e9:7b:86:ba:a3:f8:
         5d:71:2e:8c:34:9e:53:35:f9:fc:a0:1a:5e:d0:5d:0a:14:16:
         36:1d:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----