Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer
File:                     471A7ADD455C68D25753DE159530C83B00C46E39.cer (raw, json)
Hash identifier:          4SuUKBG1rh39zbORaVLE9T0vpFGW5NIXjpiIPSTsJWk=
Subject key identifier:   47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B00C712772C277499CF4BEC4F82EBD061F27BBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jun 2023 10:58:27 +0000
Certificate not after:    Fri 21 Jun 2024 11:03:27 +0000
Subordinate resources:    AS: 271412
                          IP: 207.248.16.0/22
                          IP: 2804:7b20::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:c7:12:77:2c:27:74:99:cf:4b:ec:4f:82:eb:d0:61:f2:7b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 10:58:27 2023 GMT
            Not After : Jun 21 11:03:27 2024 GMT
        Subject: CN=471A7ADD455C68D25753DE159530C83B00C46E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:53:06:d2:4e:a4:21:a8:58:c3:3f:0c:e1:
                    19:cb:1c:19:0b:f3:ba:47:9b:08:cf:5a:18:09:2d:
                    01:c4:02:67:0c:46:c9:c6:3a:f4:66:04:2d:95:7e:
                    df:45:18:a2:97:30:2d:a0:15:45:ee:84:08:4b:d2:
                    ad:1c:b7:be:9e:12:85:0e:e1:85:5d:b6:04:92:cd:
                    43:53:35:5e:7a:7a:69:7b:23:f3:a8:a4:bf:6e:5d:
                    a4:7b:2f:35:4c:18:54:2a:19:57:72:f3:19:d5:9d:
                    55:9d:69:bb:b5:ea:aa:39:30:18:3c:cf:17:28:e7:
                    6d:1b:97:50:59:36:b2:75:05:3e:d6:8e:14:7f:49:
                    06:7d:02:ca:e3:8d:80:ae:89:30:31:1e:57:7d:c3:
                    ba:7c:e2:45:85:07:53:e6:75:3d:91:69:db:0d:a1:
                    28:f4:06:55:04:22:1b:10:e7:53:a1:90:3f:66:42:
                    2a:6f:ab:0f:bd:d8:7b:7f:6a:69:1b:58:d6:8c:59:
                    a7:50:0a:71:71:bc:a1:ef:cb:e7:25:33:bc:d3:ec:
                    0f:b7:e7:a1:68:bc:42:b4:3a:45:76:4a:8f:ee:05:
                    94:48:68:f9:c4:94:76:0f:96:b1:93:fd:3c:21:23:
                    d2:a1:74:57:11:19:c9:dd:4f:06:6f:55:0f:26:7f:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.16.0/22
                IPv6:
                  2804:7b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271412

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:33:f4:fe:49:51:59:c8:d1:0c:b3:48:08:d1:74:cb:3e:
         b6:9a:28:26:81:ff:dc:c3:93:ae:08:dd:a3:de:15:31:33:8e:
         d1:1f:fc:d4:70:46:95:ac:53:b6:b9:e1:74:90:f4:25:af:b9:
         2f:8a:a0:38:fa:1e:3c:d6:63:ea:2f:d3:d8:d5:a9:c4:17:e5:
         c3:8f:73:81:ec:a3:bd:d7:3d:cb:d2:f3:0e:36:a1:1b:f1:d0:
         60:ad:c4:cd:48:4a:9d:b8:95:7e:38:57:fe:a9:63:47:ab:4d:
         7c:41:57:a5:d5:d0:1f:83:2f:89:66:fa:5a:61:2a:6e:57:e8:
         ea:e4:fa:f2:20:90:95:74:e1:6b:a4:9c:fb:61:c1:8b:d8:da:
         a4:f9:1d:0a:a5:02:6f:6e:de:54:02:e8:c9:48:86:63:3d:fd:
         26:90:c9:d3:58:d6:7b:cd:86:4a:dd:9e:be:86:89:0f:13:05:
         2c:a8:50:51:66:07:0e:5d:77:6e:05:ab:75:a6:af:94:b4:4f:
         bc:d8:52:e3:28:4a:4e:7a:a6:c8:2a:f7:d2:f2:34:d2:5a:a7:
         ae:bc:43:3c:c4:a3:ea:e4:73:23:b1:a3:64:40:96:a3:96:5b:
         e4:13:51:ab:74:04:fa:f2:48:b5:06:8a:10:8a:df:2f:b9:97:
         60:f2:a0:9a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSwDHEncsJ3SZz0vsT4Lr0GHye7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjMxMDU4MjdaFw0yNDA2MjExMTAzMjdaMDMxMTAvBgNV
BAMTKDQ3MUE3QURENDU1QzY4RDI1NzUzREUxNTk1MzBDODNCMDBDNDZFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNlMG0k6kIahYwz8M4RnLHBkL
87pHmwjPWhgJLQHEAmcMRsnGOvRmBC2Vft9FGKKXMC2gFUXuhAhL0q0ct76eEoUO
4YVdtgSSzUNTNV56eml7I/OopL9uXaR7LzVMGFQqGVdy8xnVnVWdabu16qo5MBg8
zxco520bl1BZNrJ1BT7WjhR/SQZ9AsrjjYCuiTAxHld9w7p84kWFB1PmdT2RadsN
oSj0BlUEIhsQ51OhkD9mQipvqw+92Ht/amkbWNaMWadQCnFxvKHvy+clM7zT7A+3
56FovEK0OkV2So/uBZRIaPnElHYPlrGT/TwhI9KhdFcRGcndTwZvVQ8mf42XAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHGnrdRVxo0ldT
3hWVMMg7AMRuOTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TlFBYkg2cUJVNHhEWFRQREpyQU1NZjFuM1lWOEM3Q0Vp
S2Rlc1d0YzllQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOU5RQWJINnFCVTR4RFhUUERKckFNTWYxbjNZVjhDN0NF
aUtkZXNXdGM5ZUIvMC80NzFBN0FERDQ1NUM2OEQyNTc1M0RFMTU5NTMwQzgzQjAw
QzQ2RTM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALP+BAwDQQCAAIwBwMF
ACgEeyAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCQ0MA0GCSqGSIb3DQEBCwUA
A4IBAQBNpTP0/klRWcjRDLNICNF0yz62migmgf/cw5OuCN2j3hUxM47RH/zUcEaV
rFO2ueF0kPQlr7kviqA4+h481mPqL9PY1anEF+XDj3OB7KO91z3L0vMONqEb8dBg
rcTNSEqduJV+OFf+qWNHq018QVel1dAfgy+JZvpaYSpuV+jq5PryIJCVdOFrpJz7
YcGL2Nqk+R0KpQJvbt5UAujJSIZjPf0mkMnTWNZ7zYZK3Z6+hokPEwUsqFBRZgcO
XXduBat1pq+UtE+82FLjKEpOeqbIKvfS8jTSWqeuvEM8xKPq5HMjsaNkQJajllvk
E1GrdAT68ki1BooQit8vuZdg8qCa
-----END CERTIFICATE-----