Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46D57E2DC31E7B52E79E7BA4ADA325A30109961A.cer
File:                     46D57E2DC31E7B52E79E7BA4ADA325A30109961A.cer (raw, json)
Hash identifier:          fe0BpAIVVLEagr9YFDd9EMWBeQNydi0wMXC2sc639pk=
Subject key identifier:   46:D5:7E:2D:C3:1E:7B:52:E7:9E:7B:A4:AD:A3:25:A3:01:09:96:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EAEA8D8EA0D469BDA06638702B7F14F44077D17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/46D57E2DC31E7B52E79E7BA4ADA325A30109961A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 13:41:34 +0000
Certificate not after:    Mon 01 Apr 2024 13:46:34 +0000
Subordinate resources:    AS: 264297
                          IP: 138.121.136.0/22
                          IP: 168.197.220.0/22
                          IP: 2804:25b4::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ae:a8:d8:ea:0d:46:9b:da:06:63:87:02:b7:f1:4f:44:07:7d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 13:41:34 2023 GMT
            Not After : Apr  1 13:46:34 2024 GMT
        Subject: CN=46D57E2DC31E7B52E79E7BA4ADA325A30109961A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:41:6e:5b:3f:ff:6c:2a:7b:55:b7:47:b3:
                    39:c9:fd:37:22:d8:53:22:41:d2:1d:d6:98:e4:83:
                    cc:e0:e5:4f:ca:40:55:af:db:69:c9:a3:f6:e8:3a:
                    82:af:6b:c3:d2:e8:b1:de:cc:cf:da:ec:fa:b6:6a:
                    9f:92:12:d9:f0:22:57:98:57:b0:90:81:50:fa:08:
                    14:14:4c:57:62:63:c5:fc:43:7a:a4:13:12:fb:2a:
                    34:e6:11:09:5b:55:1d:65:88:91:77:e5:52:03:5e:
                    60:a0:55:4f:c0:f2:64:3c:87:b7:8d:8a:2e:57:0f:
                    e9:b3:7b:92:23:42:b9:ac:69:d4:76:59:b3:d8:f2:
                    2e:49:b3:44:15:34:57:92:50:ec:2c:bd:df:d3:06:
                    16:48:cd:42:c6:64:b6:5f:0e:5e:f6:26:91:02:3c:
                    e9:f1:61:6f:00:cf:e3:cd:42:3b:c8:4b:0e:25:49:
                    d8:f0:81:e4:5e:97:61:0c:b4:be:ba:b8:54:ad:ce:
                    3b:03:21:e8:66:ea:11:2d:a8:d3:4a:9b:2e:ce:67:
                    13:2c:6f:d2:65:c5:53:ab:5b:f7:3f:96:11:de:00:
                    5c:a6:42:f2:5f:e2:1a:77:81:19:e2:80:41:3b:f1:
                    56:91:c1:02:de:1f:ce:87:04:5c:f6:b8:77:64:30:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:D5:7E:2D:C3:1E:7B:52:E7:9E:7B:A4:AD:A3:25:A3:01:09:96:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/46D57E2DC31E7B52E79E7BA4ADA325A30109961A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22
                  168.197.220.0/22
                IPv6:
                  2804:25b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264297

    Signature Algorithm: sha256WithRSAEncryption
         71:b2:6c:cb:85:2e:d8:1b:79:77:8c:e4:8c:eb:54:f0:5f:56:
         42:6f:9a:95:b5:9c:4f:d2:ea:51:a0:a8:22:89:5d:8c:e4:d7:
         38:5b:1c:55:60:17:50:a2:f0:f0:c4:69:f7:37:61:a1:2a:31:
         f3:44:b2:af:8e:8b:69:db:84:e9:f5:49:7c:0e:cb:41:f8:d8:
         cd:28:9f:22:dd:3f:d2:8a:36:44:aa:60:bf:ad:e1:53:7b:00:
         03:ed:16:ad:d5:de:72:d4:1a:88:11:6b:de:84:27:86:c0:9e:
         45:a4:10:18:f8:3d:2e:67:f6:b1:f0:63:a3:28:2a:48:ab:83:
         b0:76:9b:50:dc:7e:f5:dc:7c:23:1c:8a:fa:d9:a3:9a:13:13:
         24:f8:12:1d:ba:ee:d0:66:1a:f0:ef:29:da:a4:1f:24:43:25:
         4b:ba:d6:67:ba:61:1b:88:95:8b:1f:05:b9:07:2b:34:47:41:
         ec:c5:1a:b4:6b:ce:48:51:11:8e:7d:b4:6d:07:37:8a:10:7c:
         2a:92:b6:a9:fc:c8:a6:44:02:bc:c7:2f:91:d2:97:35:5f:17:
         10:e1:a8:2b:58:9d:50:7d:72:74:92:30:e8:8f:64:c7:25:95:
         84:e2:10:3c:83:3e:3f:f7:ac:b7:8f:cb:36:b6:1e:0c:bf:a4:
         d1:ad:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----