Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.cer
File:                     38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.cer (raw, json)
Hash identifier:          onozmRzRH/3pRf9VaqWW8ZXP/LjoDN5Juiyf64gxPh8=
Subject key identifier:   38:15:8A:DC:15:C8:E1:41:35:80:D6:5A:3E:48:E9:0E:F3:B7:DC:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       140C1C70C4CC092EB87898A0CBEBC285D37C5498
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 11:58:54 +0000
Certificate not after:    Tue 16 Apr 2024 12:03:54 +0000
Subordinate resources:    AS: 52685
                          IP: 177.73.24.0/21
                          IP: 177.136.208.0/21
                          IP: 2804:c38::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0c:1c:70:c4:cc:09:2e:b8:78:98:a0:cb:eb:c2:85:d3:7c:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 11:58:54 2023 GMT
            Not After : Apr 16 12:03:54 2024 GMT
        Subject: CN=38158ADC15C8E1413580D65A3E48E90EF3B7DC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:f7:2f:9a:90:10:bc:cd:40:a0:6a:f0:21:
                    57:5b:74:3b:15:a5:ec:9a:ec:cc:13:36:d6:03:b2:
                    b9:53:f7:78:92:49:eb:6c:ef:35:b0:d0:c4:e6:6a:
                    56:60:86:75:21:80:f9:45:c8:9e:4e:ea:4d:9b:03:
                    07:8d:53:94:c3:d2:38:a8:b3:29:03:62:38:76:19:
                    a1:ce:4d:18:43:3f:a9:e3:57:c1:92:17:77:b3:1d:
                    4b:cd:28:0e:92:94:21:85:ba:44:bd:95:5b:59:fd:
                    25:a9:13:4c:41:e7:6f:6a:9e:c1:75:85:45:0c:2d:
                    61:e5:b9:d3:55:53:c4:a7:81:df:e9:aa:8e:6f:c7:
                    4f:b4:17:9e:dd:97:dd:e9:25:9e:3b:fd:f9:ec:13:
                    e0:96:03:64:a0:02:5c:83:88:a6:b5:19:e1:70:f1:
                    12:4e:88:60:98:02:25:27:22:48:48:0f:87:c6:3a:
                    25:6e:ab:56:38:e3:ae:81:b0:64:64:d3:99:0d:b9:
                    70:5c:1f:59:7d:c1:37:61:8f:c9:44:16:32:6a:66:
                    14:a4:c2:29:89:50:d8:7a:7e:fa:26:8d:70:74:90:
                    c7:2b:44:07:26:c2:f7:d7:65:6e:94:fd:00:ad:c0:
                    2a:85:98:5e:20:63:db:f1:9d:e4:b0:ef:40:c9:3c:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:15:8A:DC:15:C8:E1:41:35:80:D6:5A:3E:48:E9:0E:F3:B7:DC:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/21
                  177.136.208.0/21
                IPv6:
                  2804:c38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52685

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:68:81:ff:b1:e2:5b:d2:57:8e:3f:4e:4f:9c:4f:af:81:
         bf:8f:6a:97:cf:88:3c:54:0e:27:73:00:c0:4d:3b:c0:7b:df:
         a1:35:e5:24:47:86:d2:1b:3e:8b:7d:88:2d:10:ca:30:64:54:
         58:6d:af:be:f7:f0:85:b4:56:9f:97:17:30:f6:f0:ed:a2:c1:
         74:40:43:33:63:da:8f:59:01:3c:dc:e1:71:42:66:ae:65:9f:
         43:94:22:5b:53:ec:32:74:79:90:b5:2b:85:21:db:91:f3:f3:
         b0:2a:14:07:c3:40:c5:25:17:11:af:63:c2:04:ed:d4:ca:9e:
         94:7f:32:d9:dc:cc:88:29:d3:41:53:9c:ba:c9:20:db:86:6d:
         83:08:cf:fb:36:de:65:38:18:3d:0f:d0:f7:f1:52:8b:5e:4b:
         95:7b:dc:ef:b3:d2:63:ad:25:9c:d3:b8:e4:93:c8:c1:08:81:
         d6:66:53:d8:bc:65:fb:76:ca:85:f1:d3:99:1a:1d:5e:13:17:
         63:db:aa:ee:65:3b:2d:3f:96:b7:e3:50:04:f4:cb:a0:b9:1f:
         6c:d9:0f:bf:54:9d:61:c3:c6:ae:07:09:fe:63:ab:1b:75:ac:
         12:b4:c9:c9:50:b6:14:2c:2f:4b:51:57:b3:c8:e9:6a:e8:3c:
         68:dc:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----