Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/497F436C4E5116B17795A157B3836383F68E21D5.cer
File:                     497F436C4E5116B17795A157B3836383F68E21D5.cer (raw, json)
Hash identifier:          fhekhdPF4K2vEoBX6G0n/8PIc0tS8/uJQ8p5fqDIuKc=
Subject key identifier:   49:7F:43:6C:4E:51:16:B1:77:95:A1:57:B3:83:63:83:F6:8E:21:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DA9390B8D5BCABE0D26BF0FA0CA4571BE9D3039
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/497F436C4E5116B17795A157B3836383F68E21D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 23:35:12 +0000
Certificate not after:    Tue 25 Jun 2024 23:40:12 +0000
Subordinate resources:    AS: 267218
                          IP: 45.231.196.0/22
                          IP: 2804:4a18::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a9:39:0b:8d:5b:ca:be:0d:26:bf:0f:a0:ca:45:71:be:9d:30:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 23:35:12 2023 GMT
            Not After : Jun 25 23:40:12 2024 GMT
        Subject: CN=497F436C4E5116B17795A157B3836383F68E21D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:2e:8e:69:dd:71:5f:d5:6a:c5:28:82:30:
                    a4:c9:a8:88:79:ea:97:55:71:b2:a5:72:b5:6d:e0:
                    23:f8:86:8e:c5:ad:e7:43:55:b4:bd:9a:07:f0:3c:
                    2b:ff:82:d3:a5:69:1a:a9:d8:e8:b6:34:f6:1f:7b:
                    c6:bb:4e:c9:11:b8:80:dc:2e:3a:7f:5f:16:8e:4e:
                    53:8d:34:96:ce:0f:34:e4:1d:58:e4:cf:38:07:b4:
                    a3:55:76:40:34:ef:75:41:64:53:3e:97:fb:b4:db:
                    dd:e9:16:7f:f2:fc:93:d9:77:be:1e:d1:97:83:60:
                    38:cd:d5:a4:8b:5b:57:e2:64:c5:c3:be:b7:9b:8e:
                    dd:86:5e:8f:d7:4d:cd:4a:01:de:97:27:ac:82:13:
                    f7:6e:ce:48:e9:7b:c6:a7:43:12:70:37:ca:e2:81:
                    13:c7:2a:98:2b:52:8e:85:e0:b2:0b:48:7c:bd:a2:
                    ce:e7:03:c9:41:5e:3b:b6:b7:99:9c:4c:df:7a:58:
                    57:1e:5d:4a:05:2a:64:62:fe:24:ad:61:f3:19:a4:
                    b5:b9:0a:d9:7d:59:7a:bc:5e:af:2e:67:9d:bb:2b:
                    d1:b9:a1:41:2a:53:90:90:03:c6:10:67:e6:3d:2c:
                    64:1f:ab:c1:a5:d1:a3:39:cf:cc:42:3f:22:7e:d3:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:7F:43:6C:4E:51:16:B1:77:95:A1:57:B3:83:63:83:F6:8E:21:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/497F436C4E5116B17795A157B3836383F68E21D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22
                IPv6:
                  2804:4a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267218

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:d8:0d:82:39:a5:7b:12:fd:04:a0:59:3e:72:fe:0a:48:
         3e:14:06:d2:5d:8b:fb:ff:87:32:9e:ca:c6:f2:b1:e0:a7:5f:
         c8:41:a1:fd:23:c5:46:9d:94:81:d1:df:39:b6:32:6a:bb:d5:
         0a:4e:94:6e:44:c4:3f:4f:d9:7f:c3:8c:27:a7:3e:12:19:08:
         f1:1a:03:8a:03:d7:58:ee:0d:54:8d:3f:92:8e:ad:2d:81:ef:
         46:d2:0c:6b:3e:29:88:2a:2d:22:84:c3:fa:f4:7b:ef:8e:a5:
         5e:22:1f:c3:0a:16:1f:a1:dc:90:1f:af:d6:7d:10:74:d1:c1:
         b0:d9:14:de:0d:98:6a:0a:66:9e:bc:7d:4e:0b:e3:bf:09:42:
         9d:f9:60:76:02:07:d1:91:64:5b:31:2e:25:63:ca:2e:bb:51:
         b3:19:ed:eb:c3:b4:97:15:9e:b4:a3:57:5c:3d:31:c7:91:ae:
         1f:7b:63:dd:d9:4c:be:ff:c4:11:6b:f6:4b:30:b5:2f:49:2e:
         72:47:52:9f:90:d0:1c:14:9b:a8:d7:0f:27:36:d6:29:b5:f1:
         49:14:62:7b:63:7e:76:36:b5:b0:58:77:ae:f7:91:14:c4:f3:
         f0:a5:3c:aa:05:e0:ad:06:14:dc:77:fc:f8:ae:97:68:5f:da:
         9b:2e:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----