Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.cer
File:                     9F9B5232D6A4C199290F4138875796FD5B1F1DBC.cer (raw, json)
Hash identifier:          In2X17KFhVg2ey59DoGN7eZk6upO3LSVmP2X/1T4vbc=
Subject key identifier:   9F:9B:52:32:D6:A4:C1:99:29:0F:41:38:87:57:96:FD:5B:1F:1D:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5EC8492CE80DA2E219D2FCA424163783E443127F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Jan 2023 01:09:36 +0000
Certificate not after:    Tue 02 Jan 2024 01:14:36 +0000
Subordinate resources:    AS: 271484
                          IP: 181.233.16.0/22
                          IP: 2804:7c40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:49:2c:e8:0d:a2:e2:19:d2:fc:a4:24:16:37:83:e4:43:12:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 01:09:36 2023 GMT
            Not After : Jan  2 01:14:36 2024 GMT
        Subject: CN=9F9B5232D6A4C199290F4138875796FD5B1F1DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:09:ff:f5:86:d6:44:cc:6f:79:2b:e9:89:
                    76:61:96:13:4b:42:6c:ba:12:e0:fb:ec:9b:62:88:
                    16:92:81:37:41:f9:cc:79:50:82:62:1b:1d:2d:87:
                    92:88:ba:13:ae:37:83:d5:39:90:71:9e:59:8c:ea:
                    09:73:ee:f4:ea:e6:12:99:92:ab:10:a6:c0:29:f5:
                    d1:0e:fe:81:13:0e:12:cb:ad:c6:00:ef:bb:3b:1f:
                    1e:ba:bf:04:5c:b4:ca:ed:0c:ff:28:51:89:a3:89:
                    8c:8e:f9:85:79:3d:c2:4c:d6:a7:43:66:b2:ec:2d:
                    46:80:1a:7a:f6:fd:4b:08:c3:64:5c:f1:52:18:5a:
                    3c:c2:52:d5:72:02:ec:77:7d:10:ab:ef:4d:92:34:
                    42:4d:92:f3:26:00:a9:9c:30:81:12:38:d2:7d:fe:
                    e9:ff:65:30:04:fd:01:31:c3:80:f6:00:e7:d7:e4:
                    d6:97:c7:40:11:b2:b3:00:a9:33:dd:8c:da:2a:c0:
                    d2:28:1d:ce:8c:d9:fb:fd:3d:89:2b:c9:28:8a:e6:
                    3d:89:6a:ed:90:67:f9:40:9d:46:0f:3a:fb:8e:2f:
                    88:9b:49:ce:c6:25:fe:34:78:e4:c7:ca:bb:43:82:
                    6a:11:a0:c4:57:7f:47:d2:cb:1f:08:2c:84:0d:75:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:9B:52:32:D6:A4:C1:99:29:0F:41:38:87:57:96:FD:5B:1F:1D:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9F9B5232D6A4C199290F4138875796FD5B1F1DBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22
                IPv6:
                  2804:7c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271484

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:f4:9e:b0:2c:72:48:1c:51:ea:35:03:05:e9:ea:f5:3e:
         a4:29:69:b5:97:3f:96:3d:db:df:0c:48:d4:e5:30:4c:8b:c4:
         fa:ba:32:e5:1f:ee:39:c8:cd:cc:8d:33:ae:bd:54:46:03:78:
         ad:2a:62:10:4f:ed:01:2f:f9:56:c3:e0:ed:3a:72:59:65:bc:
         45:8e:35:f0:10:a7:8b:18:05:f7:c7:a7:5d:37:e4:ae:0e:b9:
         c3:58:ea:d4:3f:4a:27:31:1c:ec:cf:99:62:5e:3a:57:20:ef:
         8f:ba:cc:4e:bf:96:76:2f:e9:c6:d9:ec:1f:e9:15:21:1b:fc:
         19:f6:3a:40:43:43:14:54:92:95:33:5c:da:b0:ce:30:86:30:
         ee:ac:e4:10:21:ed:60:17:92:7e:48:b7:98:56:92:6f:d4:ec:
         8f:c1:0a:f8:30:6c:35:54:37:f2:f0:a6:d4:79:03:d7:40:f6:
         30:e3:9f:28:59:70:a8:0e:4b:c6:62:9a:c1:79:03:17:86:4c:
         d1:d5:66:49:42:a5:25:4d:75:43:a0:4a:fe:7f:5f:3c:91:23:
         a8:53:0c:79:24:b9:f1:52:36:43:9a:f4:c6:99:ec:01:56:b6:
         c6:89:b5:44:26:23:ee:f3:4b:95:a6:50:a4:e5:f6:e3:c6:0b:
         69:18:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----