Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
File:                     696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer (raw, json)
Hash identifier:          vgIEp7SWpuMT5fhXaMwTzmPTXmTfuLMtQZXdEUJlj7U=
Subject key identifier:   69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67D1F33AB6E5E44C0FBB2B4C28F3F142F8BF1108
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 23:36:40 +0000
Certificate not after:    Tue 16 Apr 2024 23:41:40 +0000
Subordinate resources:    AS: 271104
                          IP: 179.42.4.0/22
                          IP: 2804:7654::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d1:f3:3a:b6:e5:e4:4c:0f:bb:2b:4c:28:f3:f1:42:f8:bf:11:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 23:36:40 2023 GMT
            Not After : Apr 16 23:41:40 2024 GMT
        Subject: CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:79:9e:89:e4:08:e4:55:cf:4a:81:01:31:
                    5d:33:81:d1:3f:f0:f2:2c:db:5a:83:ed:a7:75:00:
                    4a:8d:be:f9:e1:97:5c:c1:e5:c1:4e:e9:26:ac:5d:
                    55:f7:bf:b3:32:86:26:b8:36:8c:9c:a7:70:e8:39:
                    03:b7:76:e8:92:a0:3c:18:0c:2d:7e:74:d2:8c:4f:
                    2d:1f:25:ca:f1:ae:ba:61:03:d6:93:2c:ca:9d:69:
                    f0:55:74:50:66:66:e3:58:9b:55:1b:91:8d:ad:0c:
                    d1:e0:19:ed:71:92:01:9d:66:8a:a1:a7:1c:e9:bc:
                    73:b1:89:dd:23:c1:f9:2f:f1:66:00:b9:3a:c6:8d:
                    82:66:a7:12:c2:76:a0:22:b8:3c:b2:03:2b:5e:5d:
                    ed:41:f3:a9:69:27:21:dc:4d:0a:83:3f:78:6f:32:
                    b7:00:96:bc:b2:5f:b9:a5:f1:bc:12:a6:e5:96:73:
                    5b:c8:dd:61:49:82:12:24:9a:cd:54:5f:c8:1f:5e:
                    27:60:1d:ec:98:15:e5:a6:38:46:3b:f0:a6:8f:69:
                    15:17:86:73:74:5c:b4:d9:59:84:70:f5:4b:44:e4:
                    36:e0:8f:95:3d:b5:c0:1d:4b:88:54:6c:9e:82:0c:
                    a3:e3:d6:e9:37:0e:cf:60:6e:5d:fd:35:89:f4:04:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22
                IPv6:
                  2804:7654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271104

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:bf:bc:f7:6e:be:d3:88:07:c0:77:47:5c:d3:fb:b7:19:
         4a:79:a5:93:bd:d9:da:3d:fa:cb:98:ef:7f:91:73:93:c6:12:
         ff:d8:c1:07:41:d3:5d:1e:ce:45:d1:23:4c:46:f1:98:d5:22:
         d4:c3:4e:46:c8:2e:70:62:93:63:ac:0b:bc:ac:24:62:61:10:
         8c:7d:5a:fd:f6:c3:a8:8f:79:11:79:71:8a:f8:4a:74:2e:2d:
         60:7b:ed:f9:44:ff:88:54:26:e5:4e:c4:85:91:a5:be:36:0e:
         08:ea:d2:8f:52:29:3b:b1:3b:13:49:d6:f4:53:a9:e5:e3:a8:
         67:7c:77:60:87:84:71:67:89:d1:78:12:c0:1b:97:ce:36:bf:
         d2:e8:df:aa:f4:a5:ad:b7:a2:b2:e2:3e:c4:7e:ce:c5:62:ca:
         32:54:01:24:9c:1c:2e:1d:3e:b8:17:c7:28:f0:9d:97:b1:91:
         ce:e5:df:a2:cd:54:6c:b2:aa:b4:ad:19:a4:59:29:60:65:7b:
         32:83:c4:31:d4:0b:ed:1b:3e:19:7c:ab:9e:8a:78:33:0b:c1:
         54:8f:8d:2d:e7:d2:d7:2c:33:7b:4c:ce:8c:93:3c:34:e0:97:
         44:ad:33:61:76:49:4f:8c:86:46:fa:b0:6d:4a:b6:ba:4a:a8:
         dc:ef:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----