Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.cer
File:                     9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.cer (raw, json)
Hash identifier:          8a4IKdf5iYzok1vlsC+5HRXCx/SK/PPkhOfqXKLRIHw=
Subject key identifier:   9A:E7:CC:D8:C2:AC:F0:4A:A8:1B:FD:6A:26:E7:8D:79:AC:89:DE:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3997C14ABE69FBB58886D06AF9966D63BB4AD9E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 13:26:36 +0000
Certificate not after:    Tue 09 Jul 2024 13:31:36 +0000
Subordinate resources:    AS: 268463
                          IP: 45.161.96.0/22
                          IP: 2804:5194::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:97:c1:4a:be:69:fb:b5:88:86:d0:6a:f9:96:6d:63:bb:4a:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 13:26:36 2023 GMT
            Not After : Jul  9 13:31:36 2024 GMT
        Subject: CN=9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:5c:22:61:90:2f:d4:60:a0:c8:7c:6c:78:
                    23:ee:a1:a0:1a:8e:29:70:13:e4:89:ef:d7:d9:2a:
                    e8:4f:18:0b:a8:89:94:b7:55:f6:5b:78:87:1e:37:
                    70:4c:e9:29:2c:b8:8f:0a:2c:68:ca:b3:0f:df:43:
                    28:01:b4:1c:6d:b5:db:98:b5:82:aa:f4:de:84:37:
                    79:f1:df:2c:c9:94:ab:3e:28:0c:67:25:ec:72:02:
                    6a:20:88:23:99:03:44:5a:7b:97:96:d4:9e:22:22:
                    db:61:1c:d7:41:5e:c1:aa:18:d7:c3:d8:95:1d:e9:
                    54:21:88:d8:46:1a:17:a9:9f:0d:40:5c:5b:7e:d8:
                    87:22:ce:c4:dd:ea:9f:c1:1e:92:33:6e:17:20:21:
                    cd:44:be:35:05:c0:72:2d:bb:c4:71:4e:29:4d:ab:
                    f1:6f:98:1a:39:b4:b3:1c:05:eb:50:6d:6c:b3:42:
                    ec:42:1a:de:04:b0:95:4a:07:21:05:5c:f5:30:91:
                    32:6e:71:63:9d:61:d5:dc:82:ab:84:a4:5e:08:23:
                    5a:36:2c:00:e7:54:ae:75:ac:87:00:ab:f5:d0:80:
                    d0:48:a0:a0:79:3f:ab:25:3c:ca:b2:cc:e2:b6:37:
                    fb:37:87:24:8f:7d:5d:0a:ec:ea:f5:92:f1:65:ab:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:E7:CC:D8:C2:AC:F0:4A:A8:1B:FD:6A:26:E7:8D:79:AC:89:DE:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22
                IPv6:
                  2804:5194::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268463

    Signature Algorithm: sha256WithRSAEncryption
         02:09:eb:d4:f1:3d:1e:2f:fc:dd:8d:5d:8b:34:00:13:7f:59:
         f9:13:c7:4d:71:c8:a4:4a:cd:63:27:66:94:4a:41:90:a7:d8:
         42:8b:78:2f:ab:1b:de:d2:b0:08:89:32:83:de:0f:27:d5:63:
         6f:ab:25:9d:9a:5d:de:b5:29:30:66:eb:42:b4:54:d0:dc:7d:
         e8:43:df:f6:bc:f7:b7:37:95:73:d3:51:f2:b6:a0:b9:cb:5d:
         f8:9f:b0:9d:54:9d:ff:a9:76:e4:9b:99:53:17:53:5b:65:da:
         5a:9b:70:2a:81:92:aa:80:24:d0:0e:d7:6e:a2:e9:f6:5e:1a:
         3a:f2:48:79:17:ef:21:52:b6:7b:46:a5:4f:34:70:11:89:98:
         d0:27:ea:e2:52:93:eb:f1:07:e1:99:8f:b5:7e:2c:9e:83:3c:
         90:fa:1f:d0:f7:9f:a9:5d:1a:88:01:68:c2:89:8c:24:79:7a:
         55:ed:64:34:7c:4e:57:a7:c1:38:33:1a:fc:b8:00:5f:98:14:
         9a:40:c8:0d:03:4d:40:33:be:68:aa:36:81:cd:e0:0c:18:c8:
         b8:77:6c:62:e7:dd:a6:fc:4f:62:8f:5d:fd:80:c6:6c:64:40:
         ce:b6:8e:68:a3:df:de:f1:ce:ef:3e:8f:23:78:52:b9:6a:99:
         ab:1c:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----