Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A76FFECC0ECD1B0809D714B83F269E2B8CDDD76.cer
File:                     4A76FFECC0ECD1B0809D714B83F269E2B8CDDD76.cer (raw, json)
Hash identifier:          jJV8IYQCacLbZ5lkDQYMi2G8jKLxmaf1K10138SQou0=
Subject key identifier:   4A:76:FF:EC:C0:EC:D1:B0:80:9D:71:4B:83:F2:69:E2:B8:CD:DD:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DA4B9EC2A9CB726CB7F7A3F45F0AABDC99F6E93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/4A76FFECC0ECD1B0809D714B83F269E2B8CDDD76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 16:08:58 +0000
Certificate not after:    Thu 11 Jan 2024 16:13:58 +0000
Subordinate resources:    AS: 271074
                          IP: 179.48.84.0/22
                          IP: 2804:75dc::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a4:b9:ec:2a:9c:b7:26:cb:7f:7a:3f:45:f0:aa:bd:c9:9f:6e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 16:08:58 2023 GMT
            Not After : Jan 11 16:13:58 2024 GMT
        Subject: CN=4A76FFECC0ECD1B0809D714B83F269E2B8CDDD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:84:49:c0:38:ed:3e:da:f4:87:01:13:96:
                    6f:50:66:c6:6c:4f:a0:2f:30:1a:4a:54:c6:9a:0a:
                    0e:a8:43:96:cf:12:cb:49:86:f2:d7:78:88:2c:fd:
                    64:d8:a3:01:12:82:89:96:1a:cc:b9:c5:c3:d1:10:
                    12:6e:79:3d:01:bc:f2:d2:7b:bd:2b:d8:bd:f3:93:
                    41:22:2e:3a:89:8c:fe:0e:d7:d3:cc:de:a6:6c:67:
                    09:3f:2e:4a:3c:bd:69:5e:fd:76:c5:80:11:3c:65:
                    fe:d7:e2:0b:00:5b:5c:43:ad:19:90:4f:5a:bb:28:
                    7d:1d:5e:b5:a7:70:31:71:d5:2f:d8:8c:a7:99:4e:
                    9a:b3:70:42:e9:fb:59:2b:96:96:dd:41:17:af:90:
                    98:43:2f:11:4d:b2:e7:30:df:43:21:83:d9:af:fa:
                    86:cb:68:e0:bc:46:04:d2:c5:ef:82:69:37:ec:0c:
                    e9:53:44:e4:a8:96:27:fc:4a:68:d7:73:a8:1a:a8:
                    36:e2:ce:b5:a4:d0:f8:fa:fb:6d:70:b3:90:3d:55:
                    79:b3:f4:d2:d1:a6:ee:ae:39:8f:c5:bb:7f:26:ce:
                    b8:0e:b6:e0:0b:88:a3:7c:6d:8e:a5:5f:67:9f:93:
                    af:be:9d:86:7c:9d:a0:f5:db:30:3b:8e:2d:90:a9:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:76:FF:EC:C0:EC:D1:B0:80:9D:71:4B:83:F2:69:E2:B8:CD:DD:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/4A76FFECC0ECD1B0809D714B83F269E2B8CDDD76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.84.0/22
                IPv6:
                  2804:75dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271074

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:3b:79:18:49:12:69:a7:38:cc:d6:c7:e1:37:00:24:e2:
         d4:b1:cf:11:59:4b:c3:1d:e3:7e:4e:37:3c:ee:b6:8d:ca:b4:
         14:61:20:99:49:75:cb:b7:2f:83:db:e3:b0:7c:eb:c7:36:49:
         3e:a3:6c:9f:b5:e1:f9:0d:1e:fa:b7:e8:e4:37:f3:8c:79:50:
         83:cc:6b:e7:e3:44:60:95:95:8e:d2:88:af:0c:cc:63:b4:d9:
         be:9b:2c:ac:cd:25:6a:8b:49:d4:32:3a:cb:0f:8c:9f:9f:ca:
         19:af:44:3e:f5:59:97:00:b5:c9:9c:2f:62:a9:7c:19:48:01:
         2d:38:07:37:42:d8:64:ca:49:f8:63:c8:2a:99:c5:8e:ea:bb:
         d9:d1:ec:00:d9:5c:a3:0a:2f:37:9c:9d:61:66:25:f2:f1:b4:
         e3:2d:69:d2:89:e5:70:cf:13:cc:82:39:dd:00:07:87:99:ae:
         e6:16:69:89:e2:db:fd:a7:fa:c4:e1:68:9f:0d:3a:78:81:ac:
         5d:5a:ad:03:d3:2c:86:16:ee:31:1e:66:61:83:0c:7b:17:8f:
         5e:9a:34:1a:09:66:83:67:6c:9a:1e:63:67:03:54:94:53:bb:
         a6:0e:e2:2e:9d:30:01:ac:a8:96:9a:3b:1f:f1:76:71:ff:2a:
         64:60:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----