Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/443E21C62A8E1533E5B198731851D602D172BAD2.cer
File:                     443E21C62A8E1533E5B198731851D602D172BAD2.cer (raw, json)
Hash identifier:          1Cxd6YoMqTTMCZNFRfIyXoo7LV/HXYi16lH4u0xCvcw=
Subject key identifier:   44:3E:21:C6:2A:8E:15:33:E5:B1:98:73:18:51:D6:02:D1:72:BA:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22A70B73B83F9A21668D3884786E31D2FB83F226
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/443E21C62A8E1533E5B198731851D602D172BAD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 12:23:59 +0000
Certificate not after:    Thu 23 May 2024 12:28:59 +0000
Subordinate resources:    AS: 263267
                          IP: 179.108.24.0/21
                          IP: 2804:1618::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a7:0b:73:b8:3f:9a:21:66:8d:38:84:78:6e:31:d2:fb:83:f2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 12:23:59 2023 GMT
            Not After : May 23 12:28:59 2024 GMT
        Subject: CN=443E21C62A8E1533E5B198731851D602D172BAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:e8:f6:b4:52:eb:ea:29:71:92:d1:2c:2c:
                    f2:6d:a3:90:00:1f:4d:de:12:6e:5c:4e:9b:5d:05:
                    af:24:df:12:12:3e:55:bc:4c:4f:d9:6e:e8:55:b5:
                    a6:99:42:ac:0d:29:31:6f:6a:63:30:50:81:52:c8:
                    9f:ce:e7:61:6c:19:7f:12:33:57:2e:18:ba:96:3d:
                    55:8b:cf:b1:4b:5b:e2:47:d0:17:6b:c2:66:b9:d2:
                    c5:5b:48:84:65:42:89:6d:8a:9b:dc:fa:17:45:4c:
                    34:0a:86:cc:8a:18:d4:32:76:6b:36:58:28:22:49:
                    ae:e1:b7:b8:82:34:30:a2:ca:c9:fa:48:02:7d:ad:
                    61:e0:64:b4:56:b5:6e:cb:0a:fd:88:98:f6:08:41:
                    08:50:22:14:b5:b3:be:8d:5c:c6:ce:99:92:d6:ad:
                    ec:a8:c7:d7:8d:34:7a:62:c3:f0:a9:c8:4b:3d:10:
                    6a:54:f3:c9:64:f5:e0:7a:1e:16:47:48:c5:12:38:
                    a4:12:b6:20:39:3b:3a:39:06:09:8b:1f:56:17:55:
                    3d:6c:11:98:bd:92:0f:2c:93:ba:d3:b5:be:dc:a4:
                    b8:b7:25:c1:8e:69:d2:3c:fd:ae:de:69:81:11:0e:
                    5e:84:55:3d:83:b4:8a:c5:da:38:90:f1:78:c6:0c:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:3E:21:C6:2A:8E:15:33:E5:B1:98:73:18:51:D6:02:D1:72:BA:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/443E21C62A8E1533E5B198731851D602D172BAD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.24.0/21
                IPv6:
                  2804:1618::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263267

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:f1:0b:5f:05:f5:61:52:da:27:a9:ab:35:ec:ee:63:bc:
         84:c6:86:23:62:c7:31:b0:9a:d9:d1:33:90:5a:8e:9f:f6:02:
         b0:5d:a8:04:b7:66:f6:b4:6a:ce:63:01:03:01:b8:00:a0:c7:
         91:d5:ae:8d:7d:5e:0b:5e:2c:c3:3a:d7:ab:f3:e5:42:9f:60:
         e0:cf:33:e9:36:2f:8a:df:3a:ef:c1:ea:b3:dd:93:1b:b6:c9:
         06:96:21:dd:37:95:f5:56:e2:4c:4c:6e:06:0c:3b:8b:d7:3e:
         49:3c:f7:b8:d2:2b:a3:37:80:92:06:a7:a3:74:6b:ed:9d:cf:
         f3:c9:73:73:b8:3d:6a:10:dd:d4:ed:7b:d5:1d:4d:d2:2f:2f:
         3a:20:9b:ef:af:40:61:33:8a:64:71:a3:14:49:5a:51:ce:6e:
         7d:73:f6:19:b5:e5:48:db:c7:63:9f:51:2b:93:21:31:1f:09:
         51:d7:ed:73:0f:4c:af:ca:f2:85:7d:3a:2e:9e:03:81:24:01:
         cd:a3:bd:f3:df:85:ef:26:81:46:42:b7:23:21:51:ab:56:3a:
         6a:a2:65:5b:7d:80:48:37:1e:7a:bf:a1:ba:29:bb:a7:c7:76:
         a7:5a:df:1e:4b:e7:1f:b1:0c:68:18:78:17:c2:d9:13:b5:7a:
         48:82:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----