Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7932A54240095CADBDE3766FCFE5AABB72693777.cer
File:                     7932A54240095CADBDE3766FCFE5AABB72693777.cer (raw, json)
Hash identifier:          ujsyi3Ck6fRVtrSvQSGSDnp36bSKLYhgba4iqRGr1vw=
Subject key identifier:   79:32:A5:42:40:09:5C:AD:BD:E3:76:6F:CF:E5:AA:BB:72:69:37:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       200061BC1DDE75BC56FE8F3C72251ECF01D5269A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/7932A54240095CADBDE3766FCFE5AABB72693777.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 19:46:56 +0000
Certificate not after:    Mon 13 May 2024 19:51:56 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:00:61:bc:1d:de:75:bc:56:fe:8f:3c:72:25:1e:cf:01:d5:26:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 19:46:56 2023 GMT
            Not After : May 13 19:51:56 2024 GMT
        Subject: CN=7932A54240095CADBDE3766FCFE5AABB72693777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:d9:c2:c3:0b:c4:0e:8d:51:b6:11:ec:16:
                    6f:1a:b3:78:d0:e1:a5:b8:b3:80:e0:c2:74:b8:a4:
                    ac:65:8b:ea:00:50:f0:f4:05:33:30:53:1a:8e:3a:
                    86:c4:f9:c3:7d:e2:8c:fe:83:c1:97:0b:fb:1d:b4:
                    9c:35:be:06:4c:35:50:51:f7:c6:f3:f2:e0:6a:0e:
                    d0:32:a3:ee:ee:20:b8:84:53:35:e1:5c:a8:1d:7d:
                    50:4d:f3:92:7a:2b:b9:c2:13:7b:a8:4a:da:71:68:
                    43:da:70:2a:67:d2:df:d1:69:73:51:2b:f2:91:d0:
                    a6:11:c5:f8:58:e3:ec:7b:c8:d7:10:3c:b1:6d:49:
                    72:8b:f8:14:b9:1c:2f:07:e6:a9:64:74:d0:6d:c0:
                    0e:4e:df:f4:b3:9f:80:4b:be:1c:d6:78:28:a4:6a:
                    1f:20:6c:2d:7c:c8:47:8b:79:bf:fb:ca:87:ce:2f:
                    fd:3f:4e:54:68:17:67:9a:d8:86:39:36:2a:bd:6a:
                    92:ec:04:bd:48:99:af:5c:be:3a:6f:b2:94:ad:1f:
                    18:65:ae:17:4d:22:b0:23:8a:c0:d9:c0:c4:16:e0:
                    2b:5c:1a:88:3e:ad:c8:39:b8:45:2e:8f:ea:bd:08:
                    28:c8:59:61:d8:be:db:80:7e:45:6b:55:e5:0c:0d:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:32:A5:42:40:09:5C:AD:BD:E3:76:6F:CF:E5:AA:BB:72:69:37:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/7932A54240095CADBDE3766FCFE5AABB72693777.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:42:0f:63:92:28:89:d2:b3:53:53:b9:b3:6f:ab:72:3d:
         98:61:b9:86:36:5c:1a:88:97:f6:11:54:1b:f3:75:a6:c0:e2:
         0d:ca:2b:c1:bd:59:cb:f2:36:93:59:b8:1c:44:42:18:8f:4f:
         b6:4c:3d:32:be:3e:3c:40:60:b7:e3:21:79:7b:ea:4b:ff:8d:
         c6:b8:bc:5a:68:4b:1c:30:c6:26:96:96:b8:6a:f3:d3:e3:2e:
         6a:74:4e:b5:a3:34:4a:9f:fe:b3:5d:86:f8:12:63:4c:4b:5b:
         29:99:cf:ce:9b:04:51:a6:f8:81:37:48:f4:8b:b1:61:b9:62:
         5d:db:b6:df:89:f9:fa:0b:73:9e:c0:b5:85:ad:9e:e3:2d:a8:
         b5:e5:36:4e:94:37:d8:02:df:3a:2d:0e:5d:d0:2f:ee:92:53:
         36:ef:67:94:3a:a6:b2:e9:0d:2b:29:6a:f2:bc:c5:92:24:b0:
         1d:33:e5:66:8b:00:6b:36:dc:b8:57:fe:e4:33:e4:cb:7c:23:
         1f:91:af:be:38:c1:67:5f:df:66:ff:23:41:f1:89:c2:af:a3:
         d0:66:3d:36:de:22:8e:e1:87:0b:c9:a1:17:9c:ed:03:a1:6e:
         98:03:34:cc:25:aa:6e:e9:ce:af:aa:90:31:1c:0e:8c:ec:ee:
         61:79:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----