Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.cer
File:                     3F7AF10210F724DD9B28A89A927CB9923D7A3C52.cer (raw, json)
Hash identifier:          ZNNlZ+e3phFdcn1/rFdKH6EEjLSQpFXPIXMtQDyVIK0=
Subject key identifier:   3F:7A:F1:02:10:F7:24:DD:9B:28:A8:9A:92:7C:B9:92:3D:7A:3C:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11E739BC17A8E2D25327B40535D91B244577C9E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Feb 2023 14:13:11 +0000
Certificate not after:    Mon 19 Feb 2024 14:18:11 +0000
Subordinate resources:    AS: 270582
                          IP: 177.8.136.0/22
                          IP: 2804:6e34::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e7:39:bc:17:a8:e2:d2:53:27:b4:05:35:d9:1b:24:45:77:c9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 14:13:11 2023 GMT
            Not After : Feb 19 14:18:11 2024 GMT
        Subject: CN=3F7AF10210F724DD9B28A89A927CB9923D7A3C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:de:ce:a6:bf:f0:28:cf:68:8c:6f:db:71:
                    35:85:d4:b8:51:85:f8:58:20:f0:65:d7:4d:be:f7:
                    16:37:78:27:85:e8:35:73:a4:e1:7a:f0:9c:3d:31:
                    6b:f1:64:77:c6:98:c7:d2:ae:07:e0:c1:1d:b1:23:
                    ca:50:f8:08:4d:a1:cd:1d:bd:d0:b2:7c:4d:4c:c4:
                    15:30:13:f3:b8:83:fe:c3:08:cd:0c:5f:7b:a7:62:
                    28:e2:ae:01:e4:99:6a:e6:37:91:20:cf:6f:ad:4e:
                    2a:34:c5:7f:e5:56:e5:21:a5:31:75:41:4d:41:4c:
                    5e:01:de:cc:69:e1:3a:6b:40:a4:e7:15:a6:45:07:
                    86:c7:fc:a9:af:71:03:f0:3a:5f:df:e8:8b:1a:6f:
                    61:63:c7:f0:66:8d:52:1e:a4:f3:45:8b:44:b6:e8:
                    3e:33:67:9f:e7:fc:54:55:6c:93:86:df:30:ee:f9:
                    45:e0:56:8f:94:71:03:17:74:f5:ad:8c:43:c0:ea:
                    81:7d:57:10:f5:8b:f1:59:b9:8e:99:13:87:db:d4:
                    8e:7e:59:b7:2d:62:a7:b5:59:cc:7d:bd:f5:63:87:
                    e2:ee:7c:41:3b:75:20:55:fe:ae:27:ea:c7:d8:7b:
                    48:8f:53:d1:bd:16:2e:58:80:e0:b5:9f:b1:30:3c:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:7A:F1:02:10:F7:24:DD:9B:28:A8:9A:92:7C:B9:92:3D:7A:3C:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.136.0/22
                IPv6:
                  2804:6e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270582

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:3e:38:df:05:be:f5:4b:4a:93:83:67:18:a4:09:9e:5f:
         d6:a8:ab:05:7f:2d:ad:77:71:f5:de:54:49:83:09:a8:af:4a:
         ab:e6:c7:e1:8f:89:0d:5d:75:b6:a6:b9:7d:6a:29:fe:9c:5c:
         87:af:a9:9d:03:fe:d8:53:8c:95:9f:46:ef:16:f3:f7:53:e6:
         66:60:a3:f9:11:73:2d:54:46:e3:80:1a:ac:4d:77:25:b2:9f:
         be:81:5d:4b:13:5b:00:f1:a4:6e:e3:9b:0b:82:68:3b:9f:da:
         c1:95:8f:e2:54:27:86:28:a9:05:a2:fe:8d:84:db:82:69:ca:
         a3:47:f6:1e:96:2a:e6:70:a5:f5:f5:36:0c:db:d2:a9:e8:34:
         8b:c8:08:fc:e0:e1:57:75:e7:9f:fe:07:b5:af:de:ff:80:f8:
         22:ce:9a:59:59:f5:63:77:3c:fb:12:34:17:6b:9b:83:e6:ab:
         cb:8b:b3:e5:ec:22:a8:e2:ca:eb:f7:71:57:7a:5d:6a:1d:55:
         9f:60:ec:05:bd:09:05:2e:2d:c8:86:bc:8e:ef:4f:33:c1:97:
         e8:9b:cd:69:fe:3b:72:9b:ac:a3:33:c8:32:88:ac:35:b8:f6:
         28:56:20:b2:7b:70:34:ad:a8:b6:9c:92:97:aa:0f:5a:d1:3e:
         69:e1:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----