Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F2402E6D745C5F5173AB936101C9561DADB03D2.cer
File:                     3F2402E6D745C5F5173AB936101C9561DADB03D2.cer (raw, json)
Hash identifier:          L332Klu+bvk1OXTOTIP8apZdHUpX1oJZOji3luEKPXE=
Subject key identifier:   3F:24:02:E6:D7:45:C5:F5:17:3A:B9:36:10:1C:95:61:DA:DB:03:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BCAF8FDD14C63C83C8A0A12EDA0F69B616BBA17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/3F2402E6D745C5F5173AB936101C9561DADB03D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 13:41:00 +0000
Certificate not after:    Fri 27 Sep 2024 13:46:00 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ca:f8:fd:d1:4c:63:c8:3c:8a:0a:12:ed:a0:f6:9b:61:6b:ba:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 13:41:00 2023 GMT
            Not After : Sep 27 13:46:00 2024 GMT
        Subject: CN=3F2402E6D745C5F5173AB936101C9561DADB03D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:9c:5a:50:f1:b0:b5:03:68:4a:7e:46:ee:
                    45:35:a2:63:be:40:20:32:30:ff:3d:69:d5:1b:f3:
                    99:d0:d6:fd:bc:8a:a6:00:08:ac:48:ca:ad:0d:09:
                    60:a0:97:4a:1c:b6:b4:1e:43:be:08:cb:a5:da:42:
                    58:39:90:43:bb:bb:e0:01:1f:02:e5:09:9c:d6:18:
                    21:1c:9f:cf:c8:a6:2b:a3:08:42:cb:c0:1e:df:52:
                    cc:55:b8:f0:98:c0:9a:c0:5b:72:90:01:a4:dc:ce:
                    c2:2f:5f:9d:50:61:dd:08:17:c8:30:aa:de:1d:2a:
                    67:e1:c8:61:3d:8c:43:30:1d:b8:4a:90:ce:e4:30:
                    98:f4:97:57:e5:f6:b2:c1:77:22:4e:54:0d:47:4f:
                    eb:61:b5:e5:a0:6b:a8:79:51:b2:e2:10:7f:80:1a:
                    ad:ae:ae:ad:fe:ac:12:0b:e9:ad:98:33:19:80:e2:
                    ae:7a:a6:c8:b7:59:71:cf:ca:97:d4:ac:79:78:54:
                    5d:77:67:ee:ba:87:53:e0:b8:ea:17:4e:1c:0b:05:
                    1d:19:b4:63:8f:44:1f:0c:8b:39:c5:a3:89:4a:8c:
                    7c:92:5f:01:90:e4:73:0e:b5:9f:ce:85:ce:dc:33:
                    74:8f:b9:2a:ac:a2:2f:55:ca:d1:fa:07:ec:49:c4:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:24:02:E6:D7:45:C5:F5:17:3A:B9:36:10:1C:95:61:DA:DB:03:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/3F2402E6D745C5F5173AB936101C9561DADB03D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:a7:a5:0f:c9:9a:07:45:a8:65:54:bd:0f:50:49:30:fa:
         d2:81:06:5c:ce:ce:99:71:f4:ba:01:fc:a9:c3:69:f3:ed:1e:
         3f:e2:b7:e2:5b:f6:f4:73:23:63:2b:24:cb:5c:d2:5a:82:7d:
         8a:59:8c:d9:d9:3d:b1:e5:d3:57:e7:45:cb:d2:23:58:31:08:
         76:90:bd:34:97:16:db:c7:90:1c:0c:c9:7d:a2:a1:60:ef:8d:
         07:a8:82:1d:c8:2d:15:e1:27:cb:e6:0f:11:73:ca:fc:86:91:
         fe:61:1b:27:c9:8e:25:8a:9e:9a:90:3f:d6:69:eb:8e:f5:a1:
         4a:71:e0:5b:85:d8:40:2c:19:ed:1f:09:f8:3d:36:c4:66:ea:
         d2:7e:58:c3:68:c9:34:e2:f8:f1:a4:3a:4d:7e:36:ab:96:11:
         c0:7b:bf:c4:38:49:54:b2:d4:7c:5c:06:70:c5:f3:5c:39:9e:
         3e:ac:3b:ab:7b:b0:bd:18:4b:f2:2f:97:4e:3d:14:6e:81:91:
         48:55:50:1d:05:48:89:03:87:ac:01:39:05:ed:6f:64:fb:b8:
         86:07:39:17:74:4a:e7:ae:7d:40:88:f9:34:f2:04:4c:b2:9e:
         7f:02:1d:67:38:28:40:f8:61:2a:fb:1a:89:8f:e0:46:7e:4f:
         14:b1:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----