Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.cer
File:                     42256CAB31D7ACE6896E4C40675451BAB7B82CB8.cer (raw, json)
Hash identifier:          yPf9MEasxlzYib1WlcG1BAOjzn9gV2V2bgjb7I4CBh4=
Subject key identifier:   42:25:6C:AB:31:D7:AC:E6:89:6E:4C:40:67:54:51:BA:B7:B8:2C:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       199DE9F30DCBDF6754E02CA09FFEF15A09BEF2B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 18:04:22 +0000
Certificate not after:    Mon 04 Mar 2024 18:09:22 +0000
Subordinate resources:    AS: 267946
                          IP: 45.166.64.0/22
                          IP: 2804:55a0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9d:e9:f3:0d:cb:df:67:54:e0:2c:a0:9f:fe:f1:5a:09:be:f2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 18:04:22 2023 GMT
            Not After : Mar  4 18:09:22 2024 GMT
        Subject: CN=42256CAB31D7ACE6896E4C40675451BAB7B82CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:f1:e9:e2:37:c8:ed:75:81:17:22:51:1f:
                    32:a8:50:1e:11:1a:b5:94:1e:3f:6f:2f:e8:15:e6:
                    56:48:8b:67:e0:b4:e1:e5:98:26:d0:37:49:2d:b7:
                    5b:cc:da:de:70:51:6d:9d:05:95:41:48:ed:2c:72:
                    b3:5a:ef:44:bc:a3:cc:84:a1:a1:84:1f:01:14:cb:
                    ac:aa:ef:4f:05:dd:9c:af:19:15:67:91:19:a9:e3:
                    ba:8e:47:43:7d:4a:3a:1f:ea:fd:01:8f:ed:53:13:
                    ad:f8:c1:78:10:16:b6:45:f1:24:8e:ee:21:b6:bd:
                    59:ce:f0:47:6c:b6:93:72:48:01:6d:43:c7:af:67:
                    e6:e1:a0:a7:90:74:08:4f:4e:04:ff:e5:1a:7b:60:
                    49:73:51:29:f6:f1:55:8d:2a:e8:09:28:3f:dd:e8:
                    12:f5:0c:68:99:9d:5e:9f:16:77:b9:4b:23:d9:b2:
                    6f:a6:5b:a1:a7:d7:97:7f:c2:8e:e1:01:40:a8:c3:
                    68:dc:26:2d:d7:81:21:8b:57:14:7f:2c:c2:e0:c7:
                    1f:16:cf:ea:70:5c:ff:e5:8c:22:c6:a6:d5:fb:b3:
                    62:4f:6c:ad:03:e3:ee:2d:24:20:d4:7b:90:46:08:
                    7c:10:7a:39:fb:c0:42:dc:49:a1:10:24:c1:4a:d1:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:25:6C:AB:31:D7:AC:E6:89:6E:4C:40:67:54:51:BA:B7:B8:2C:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22
                IPv6:
                  2804:55a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267946

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:b6:2b:da:8d:33:04:60:41:21:af:1f:a2:f9:7d:a2:61:
         74:b2:f8:97:8d:b6:6e:13:8a:51:7f:6b:c1:c2:15:da:69:f1:
         52:9c:d5:45:31:49:7c:6f:59:7f:f5:c6:53:11:a7:bf:cb:8b:
         48:88:31:7c:6a:35:8d:79:c7:35:01:31:ea:dc:af:c6:78:5a:
         3c:5d:98:5b:8d:9f:29:c6:4b:10:0f:6a:a3:15:70:37:91:9f:
         67:db:cf:8a:66:56:ef:e2:f7:86:38:56:1b:b0:70:87:3d:ea:
         1e:ae:48:b2:24:c2:6a:1f:a5:65:9b:94:87:f3:76:14:2a:c1:
         9c:96:5d:28:4b:7d:35:08:b5:ff:d0:0b:91:28:43:23:ab:bd:
         34:e6:86:e0:a2:7d:31:d8:cb:53:b8:4e:e1:df:9d:b9:63:0d:
         69:22:e4:9e:8a:6b:ea:bc:29:97:ce:bc:d7:62:cb:37:67:9d:
         7e:9b:74:44:8b:3c:ab:86:c4:09:21:ae:e8:e1:6b:97:01:5c:
         a5:ef:65:d8:5e:3f:90:75:20:db:42:1b:33:e1:71:6a:40:3d:
         4a:e7:a3:b4:4f:97:36:6a:90:45:50:2a:b3:9e:56:c9:aa:48:
         ee:26:90:ab:30:18:c6:74:a6:e9:25:34:83:2d:6a:44:6e:10:
         c1:7b:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----