Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C8D559050CF5596CE0C9CC45B8E449296901686.cer
File:                     8C8D559050CF5596CE0C9CC45B8E449296901686.cer (raw, json)
Hash identifier:          qckZog3mU3MGktLRCpb/WknYOGqENHs/a22jODpSw4w=
Subject key identifier:   8C:8D:55:90:50:CF:55:96:CE:0C:9C:C4:5B:8E:44:92:96:90:16:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48CA6BC2A652002C061917621CA7856D44D70250
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/8C8D559050CF5596CE0C9CC45B8E449296901686.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Mar 2023 11:45:08 +0000
Certificate not after:    Mon 18 Mar 2024 11:50:08 +0000
Subordinate resources:    AS: 272220
                          IP: 2804:1f54::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ca:6b:c2:a6:52:00:2c:06:19:17:62:1c:a7:85:6d:44:d7:02:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 11:45:08 2023 GMT
            Not After : Mar 18 11:50:08 2024 GMT
        Subject: CN=8C8D559050CF5596CE0C9CC45B8E449296901686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:7a:2a:97:94:da:d1:e9:3f:ba:f8:ff:3d:
                    47:be:71:e6:8d:6e:d2:06:c9:a9:74:14:70:a6:ed:
                    c6:d9:9b:bf:80:72:bc:3d:2f:84:06:0d:85:a4:49:
                    56:51:a3:98:83:97:09:69:af:96:25:21:22:41:ad:
                    67:0a:d1:77:f2:19:cb:55:19:f8:df:21:10:62:8f:
                    85:39:05:0d:5e:8d:80:e0:4b:32:c2:36:b6:60:4f:
                    eb:ae:0c:d7:ff:11:0b:7f:d9:9f:bc:06:7b:f1:f1:
                    28:52:98:87:e2:d7:3c:21:9a:b5:04:e9:d6:20:ee:
                    03:4e:03:d4:b1:64:24:e1:77:8f:da:0e:f9:85:4c:
                    61:b4:59:04:5d:7a:33:92:1b:d3:33:6b:19:e5:8a:
                    fe:54:a1:16:1e:de:c9:84:26:fb:56:10:3b:30:48:
                    cd:75:52:e8:35:bc:4e:26:e0:7a:0c:4b:37:3d:d0:
                    c4:73:ba:e4:f0:d7:08:5c:83:33:c9:3c:62:0d:0b:
                    1a:69:0d:28:36:d6:af:6b:bd:4e:34:a1:ea:8d:19:
                    b6:3a:4d:78:20:ac:6c:b7:e5:ab:a3:54:10:da:9d:
                    88:23:28:43:1e:8f:18:91:1c:c9:da:20:ff:9f:04:
                    e3:8b:8e:e3:c9:bd:85:9f:35:24:77:1d:8a:68:88:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:8D:55:90:50:CF:55:96:CE:0C:9C:C4:5B:8E:44:92:96:90:16:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/8C8D559050CF5596CE0C9CC45B8E449296901686.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272220

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:df:03:59:a5:3c:5b:41:ff:14:7d:a3:c6:5c:ee:1e:b6:
         2c:a8:cf:79:95:26:8f:52:24:28:3e:0f:fb:e1:2e:a7:34:4a:
         53:c8:43:2e:06:57:01:81:44:e2:21:e1:85:8f:5d:cf:da:c2:
         70:97:a5:4d:34:12:fe:30:e3:16:24:5e:b6:53:9d:30:f0:22:
         14:37:bb:69:84:30:9d:ef:0c:0e:3c:9c:bc:9b:57:1a:46:9a:
         7b:87:7c:92:63:1f:87:38:88:51:ea:ab:98:c3:87:a6:d3:e2:
         67:7c:0a:d5:5e:b0:98:32:e8:9b:b3:a1:37:21:cc:97:bf:05:
         62:c1:8e:f2:54:a4:e4:8c:dc:fd:12:bc:0e:3b:7d:3d:ab:a4:
         36:cd:d7:6c:f7:5b:3b:a0:3c:fe:6a:d3:f1:6f:93:7f:47:21:
         04:e9:d4:ca:2d:f7:ea:e8:32:a6:cb:31:ff:16:e4:76:c3:ec:
         cb:d7:f9:79:c8:73:2b:f4:46:57:0e:e0:f6:6f:01:a4:2e:b6:
         64:a3:52:94:8a:bd:d3:46:8b:79:f6:36:7c:29:18:54:68:2c:
         dc:62:3e:10:1e:80:45:b9:e6:4c:e0:fe:b8:96:8b:4b:c4:29:
         ec:80:22:6b:30:2e:e6:0d:a9:55:84:de:41:d4:55:8d:dc:ab:
         77:2c:52:87
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUSMprwqZSACwGGRdiHKeFbUTXAlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjAxMTQ1MDhaFw0yNDAzMTgxMTUwMDhaMDMxMTAvBgNV
BAMTKDhDOEQ1NTkwNTBDRjU1OTZDRTBDOUNDNDVCOEU0NDkyOTY5MDE2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehXoql5Ta0ek/uvj/PUe+ceaN
btIGyal0FHCm7cbZm7+Acrw9L4QGDYWkSVZRo5iDlwlpr5YlISJBrWcK0XfyGctV
GfjfIRBij4U5BQ1ejYDgSzLCNrZgT+uuDNf/EQt/2Z+8Bnvx8ShSmIfi1zwhmrUE
6dYg7gNOA9SxZCThd4/aDvmFTGG0WQRdejOSG9Mzaxnliv5UoRYe3smEJvtWEDsw
SM11Uug1vE4m4HoMSzc90MRzuuTw1whcgzPJPGINCxppDSg21q9rvU40oeqNGbY6
TXggrGy35aujVBDanYgjKEMejxiRHMnaIP+fBOOLjuPJvYWfNSR3HYpoiEjpAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMjVWQUM9Vls4M
nMRbjkSSlpAWhjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CYWRENFcyQXlvbnBENEZNVm94Q0VDZnZzZWc3eERIaWth
QWpzZHRYQWNFdS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CYWRENFcyQXlvbnBENEZNVm94Q0VDZnZzZWc3eERIaWth
QWpzZHRYQWNFdS8wLzhDOEQ1NTkwNTBDRjU1OTZDRTBDOUNDNDVCOEU0NDkyOTY5
MDE2ODYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEH1QwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCdcMA0GCSqGSIb3DQEBCwUAA4IBAQBslt8DWaU8W0H/
FH2jxlzuHrYsqM95lSaPUiQoPg/74S6nNEpTyEMuBlcBgUTiIeGFj13P2sJwl6VN
NBL+MOMWJF62U50w8CIUN7tphDCd7wwOPJy8m1caRpp7h3ySYx+HOIhR6quYw4em
0+JnfArVXrCYMuibs6E3IcyXvwViwY7yVKTkjNz9ErwOO309q6Q2zdds91s7oDz+
atPxb5N/RyEE6dTKLffq6DKmyzH/FuR2w+zL1/l5yHMr9EZXDuD2bwGkLrZko1KU
ir3TRot59jZ8KRhUaCzcYj4QHoBFueZM4P64lotLxCnsgCJrMC7mDalVhN5B1FWN
3Kt3LFKH
-----END CERTIFICATE-----