Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E6E8309409AB8504281265D740C306CA05EE348.cer
File:                     9E6E8309409AB8504281265D740C306CA05EE348.cer (raw, json)
Hash identifier:          NygKZiXngbz1SeQsNb+Q0BVB7UKpDmv2hqinAoS1Fk4=
Subject key identifier:   9E:6E:83:09:40:9A:B8:50:42:81:26:5D:74:0C:30:6C:A0:5E:E3:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       216587ABA1F98963C91AB09F9C9E5758F2AEE36B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/9E6E8309409AB8504281265D740C306CA05EE348.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 17:20:16 +0000
Certificate not after:    Wed 08 May 2024 17:25:16 +0000
Subordinate resources:    AS: 262424
                          IP: 177.44.128.0/20
                          IP: 2804:6164::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:87:ab:a1:f9:89:63:c9:1a:b0:9f:9c:9e:57:58:f2:ae:e3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 10 17:20:16 2023 GMT
            Not After : May  8 17:25:16 2024 GMT
        Subject: CN=9E6E8309409AB8504281265D740C306CA05EE348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:15:89:c6:cb:49:f7:3a:05:b7:ba:15:5a:
                    d6:5d:2b:5e:35:78:96:80:f9:08:3a:c0:a4:69:6a:
                    f1:5e:d6:db:36:a1:96:a5:72:75:03:02:60:87:fc:
                    22:74:63:73:64:93:20:ea:b2:05:62:21:b3:87:4c:
                    2b:96:dc:93:b5:de:f1:ba:45:8e:b5:a9:21:39:75:
                    36:7f:63:8e:07:45:31:ef:51:9d:77:e8:09:a4:f4:
                    22:25:4d:39:45:e7:ba:c5:6f:84:96:70:cb:2d:c0:
                    38:cd:cc:53:19:c3:b6:64:9d:bd:56:49:72:70:8a:
                    fd:4c:65:3a:c6:a0:9a:05:a8:12:01:92:29:39:15:
                    2c:d5:26:b9:a5:07:ec:32:54:9e:22:bc:66:4c:18:
                    0d:2f:69:98:f3:f6:1a:78:a7:5b:10:23:4d:8f:24:
                    ab:f7:1c:3e:36:26:d2:c5:8a:3f:9f:7f:7e:2d:7f:
                    ba:48:a6:d5:fd:df:c2:d6:34:78:c6:3d:3d:d4:d5:
                    5e:be:76:02:11:a6:9f:9b:b5:31:7f:1c:16:12:07:
                    48:ad:23:90:9a:e0:ce:3e:e7:d8:22:23:0f:0c:c8:
                    ab:19:b6:9b:1e:ca:d9:dd:ea:cb:96:fe:23:8d:5b:
                    e7:87:71:bb:b3:f8:17:21:c4:49:ef:92:54:61:88:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:6E:83:09:40:9A:B8:50:42:81:26:5D:74:0C:30:6C:A0:5E:E3:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/9E6E8309409AB8504281265D740C306CA05EE348.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.128.0/20
                IPv6:
                  2804:6164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262424

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:2e:d7:ef:c5:5f:66:e2:fc:aa:fe:7c:b5:fd:79:e6:8e:
         39:ca:00:0b:37:b4:af:5f:75:2a:7e:f8:23:3c:30:80:86:93:
         09:b7:f0:33:f6:99:df:6b:9f:e4:ee:45:73:5b:c5:5e:15:0f:
         c5:6e:6b:f7:1d:b0:96:ea:42:9f:ef:a9:f8:1f:bc:71:5f:94:
         59:ab:7f:a3:6f:a6:ab:f1:37:f3:29:a1:ba:29:59:40:3d:a5:
         b3:64:d6:94:75:79:6e:0d:41:20:2c:f4:c7:b7:de:a7:5a:fa:
         c4:da:e3:6c:92:2e:5d:ea:69:75:c8:c6:af:34:1d:9a:4e:89:
         f5:c4:ca:9c:e4:2a:c8:33:79:55:fa:38:56:4c:e5:5b:87:fb:
         92:cb:f8:da:21:50:71:48:ed:3e:f3:8e:1b:ba:92:fb:d4:44:
         e1:51:d7:07:2c:4b:94:f7:7a:86:e6:94:47:0b:5f:29:3e:8a:
         ec:c5:5d:7c:91:cc:d7:9c:e3:98:5a:3b:ed:8a:8e:df:93:6e:
         5d:de:2d:de:a5:e6:1d:dd:f6:d7:03:b8:1e:f5:ac:ff:10:e3:
         d3:a4:41:d2:b0:1d:89:38:ad:b8:bc:7c:7d:c0:a7:4a:cd:a7:
         1a:e6:ff:fc:33:36:6f:50:6b:78:f8:c0:01:c6:cd:23:d3:5e:
         fc:cc:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----