Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FB1D96A95A664A5717A857DDB66D00D83410791.cer
File:                     8FB1D96A95A664A5717A857DDB66D00D83410791.cer (raw, json)
Hash identifier:          J0HsMcvbDUfusQ2pMW0MQtVidp2icClTiaFVxukkhac=
Subject key identifier:   8F:B1:D9:6A:95:A6:64:A5:71:7A:85:7D:DB:66:D0:0D:83:41:07:91
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C760DE4C6A65B90B309A788CD84BB4C7E0BFDF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/8FB1D96A95A664A5717A857DDB66D00D83410791.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Feb 2023 14:07:46 +0000
Certificate not after:    Thu 08 Feb 2024 14:12:46 +0000
Subordinate resources:    AS: 268668
                          IP: 45.164.220.0/22
                          IP: 2804:54c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:76:0d:e4:c6:a6:5b:90:b3:09:a7:88:cd:84:bb:4c:7e:0b:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 14:07:46 2023 GMT
            Not After : Feb  8 14:12:46 2024 GMT
        Subject: CN=8FB1D96A95A664A5717A857DDB66D00D83410791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f7:df:79:56:45:33:b4:7a:29:bc:28:64:dd:
                    6f:93:d8:d1:b4:92:81:93:48:a7:fa:64:c0:37:0f:
                    a7:4b:d3:ef:7a:7b:4b:6d:70:c9:93:96:c8:eb:42:
                    f0:f4:96:5f:b0:0b:26:f0:7d:dc:50:56:5a:83:e7:
                    66:13:7b:60:0b:35:48:e2:dc:6e:f9:8e:eb:b4:e7:
                    b9:25:12:c1:11:45:91:25:8b:8f:ab:10:61:50:6d:
                    22:07:d4:95:d3:db:fa:ff:8b:a2:61:af:32:ee:08:
                    67:82:fa:48:a2:7f:81:a9:6b:c4:ab:af:73:16:53:
                    02:24:a1:9f:80:47:1f:8e:79:de:76:9a:dd:a0:d4:
                    3b:f9:6b:0b:58:a3:13:0d:c6:f4:d1:e3:d9:bc:4e:
                    b9:e5:89:9a:87:c4:16:67:46:54:fa:cd:8e:7b:34:
                    d1:15:6e:dc:8a:8b:d9:22:47:70:04:56:9a:e3:aa:
                    94:dc:ef:9c:90:ba:09:6f:d4:8f:b8:50:95:d1:f8:
                    51:7f:6b:19:0f:52:bb:c3:ee:89:54:d2:d3:4c:41:
                    94:1d:f7:31:7f:f1:53:7b:2b:61:61:c0:59:26:10:
                    fb:d3:8c:87:c1:fb:53:da:23:67:a3:ac:2a:0b:43:
                    ae:75:ad:10:8d:fc:68:9e:44:cc:47:0b:96:59:e3:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:B1:D9:6A:95:A6:64:A5:71:7A:85:7D:DB:66:D0:0D:83:41:07:91
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/8FB1D96A95A664A5717A857DDB66D00D83410791.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22
                IPv6:
                  2804:54c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268668

    Signature Algorithm: sha256WithRSAEncryption
         84:da:1d:7f:0e:3e:3f:7d:44:a9:d8:81:02:14:85:72:0c:1a:
         2b:13:49:93:15:e7:4f:a1:71:12:27:49:e1:49:46:b8:89:ee:
         59:02:e7:a4:a5:a7:93:36:ea:45:6f:69:04:dd:4c:18:bc:4a:
         85:35:c7:c3:19:f8:c2:15:14:93:0c:9b:f5:5e:f3:4b:03:68:
         91:e4:b5:58:41:86:39:da:f8:18:1d:26:e2:31:e7:9b:87:8f:
         15:69:1c:39:ad:b5:67:21:3a:a9:4f:4e:fa:c9:1b:9a:ee:e5:
         67:d6:71:5e:03:fe:dc:e0:2c:db:c3:b1:7a:29:65:b6:94:85:
         de:44:8f:ad:4d:9f:b9:e6:35:27:df:67:ff:8e:eb:a3:66:8b:
         1b:d9:0c:43:84:9e:fe:ff:7f:f0:69:85:b2:62:61:d2:3c:26:
         24:57:4f:b4:6f:01:53:21:16:ef:a9:5c:9d:1a:80:b1:a6:62:
         e8:d9:9d:d6:5f:57:7b:8d:c1:4a:3e:af:65:1b:8e:b6:06:29:
         73:f0:0e:3f:92:e2:42:22:6b:f6:3a:f4:73:20:3c:25:5d:d1:
         bc:49:d9:07:4b:19:ef:92:8c:98:a7:2b:e3:cf:41:01:32:05:
         8e:57:cd:06:9f:be:59:4e:92:ad:3a:89:03:0b:5b:d5:82:b6:
         cc:9a:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----