Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A07228844CBD41A718AC926925D4CB15330FABAF.cer
File:                     A07228844CBD41A718AC926925D4CB15330FABAF.cer (raw, json)
Hash identifier:          Jl5Qj4HFoNXBfqtXWGc/MIr44t3n06pAc8HjFGv5OTA=
Subject key identifier:   A0:72:28:84:4C:BD:41:A7:18:AC:92:69:25:D4:CB:15:33:0F:AB:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5748714739DA0938FEA7CA3DD74BF9A3026EA64B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/A07228844CBD41A718AC926925D4CB15330FABAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 18:16:02 +0000
Certificate not after:    Wed 21 Aug 2024 18:21:02 +0000
Subordinate resources:    AS: 61782
                          IP: 200.77.176.0/22
                          IP: 2804:1940::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:48:71:47:39:da:09:38:fe:a7:ca:3d:d7:4b:f9:a3:02:6e:a6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 18:16:02 2023 GMT
            Not After : Aug 21 18:21:02 2024 GMT
        Subject: CN=A07228844CBD41A718AC926925D4CB15330FABAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:52:db:f2:7c:76:5d:40:41:9c:6e:a2:b1:
                    6f:06:f4:f1:44:b1:73:7f:38:50:9e:b6:af:d7:a9:
                    8f:4a:24:96:68:b8:93:71:c6:80:0b:51:c1:6c:64:
                    dd:76:fb:73:a4:1f:2e:7c:84:44:4d:e5:24:45:da:
                    f2:f9:c7:a3:ab:28:8c:f5:a8:e3:b3:62:0c:1f:4f:
                    a0:0c:04:78:9d:56:54:4c:e4:43:17:d8:a7:f4:4b:
                    d4:12:5f:5a:be:a1:82:16:f1:30:17:8c:f4:f3:e8:
                    d7:a8:77:af:47:ad:55:65:69:dd:7b:e7:94:77:0e:
                    76:82:86:fd:3c:a1:51:05:f9:ac:53:e4:9f:a1:3b:
                    e5:2d:97:61:dd:09:fc:52:14:06:67:6a:72:b6:4a:
                    a6:60:e9:bf:da:82:99:7e:db:90:8d:81:92:66:ed:
                    c2:60:a8:f0:b8:81:6f:ac:bf:e8:85:80:74:0e:a4:
                    82:63:7b:bb:79:ae:3d:89:ec:da:ae:84:53:a8:c2:
                    cb:e9:76:72:19:bb:f7:90:16:84:d1:de:52:e9:8d:
                    d7:4c:60:64:35:31:b4:cc:ef:e2:ba:f4:64:77:6e:
                    c7:58:20:8d:30:5a:d0:fd:bb:78:cc:27:55:65:4c:
                    07:36:1b:36:f2:de:4c:d3:7e:83:f0:2c:de:2b:0b:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:72:28:84:4C:BD:41:A7:18:AC:92:69:25:D4:CB:15:33:0F:AB:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/A07228844CBD41A718AC926925D4CB15330FABAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/22
                IPv6:
                  2804:1940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61782

    Signature Algorithm: sha256WithRSAEncryption
         7c:9e:89:35:29:00:f7:53:19:62:9b:8c:40:bd:0f:7c:b0:c0:
         44:06:28:4b:22:a9:e0:90:bf:67:b8:9e:11:b1:ed:6d:c2:83:
         53:56:64:eb:66:6e:38:13:a7:23:ff:00:bc:74:b2:cc:66:81:
         9a:f2:c4:86:a3:af:fa:af:10:b3:8a:bb:b8:54:ce:95:da:aa:
         75:de:77:41:bb:01:39:ed:ad:0b:34:1d:25:81:38:19:5f:71:
         2b:a5:01:b0:79:53:1e:4a:5e:3a:2e:95:9d:69:3a:49:e5:80:
         77:ed:4b:9a:4b:12:6e:1d:6a:5a:67:bc:e2:b5:e6:23:70:a2:
         a9:3a:25:7f:35:d9:0a:9d:ae:1a:3d:81:1e:65:31:64:b4:6f:
         44:03:a1:a1:e9:aa:0d:93:17:9f:80:76:1f:02:3f:6f:de:6d:
         4f:ab:28:da:ae:c7:cc:4a:a0:6c:07:d3:6a:bb:db:ea:1f:e5:
         4b:3f:d9:87:3f:c5:ff:f9:a3:57:22:a1:06:d5:91:4a:36:99:
         78:de:65:55:22:8f:59:70:47:4b:d3:8d:d0:14:0f:40:ee:67:
         90:25:6a:62:f4:6f:02:5b:ae:8d:09:14:d0:6a:39:81:82:62:
         53:b1:fd:a8:19:f4:7a:9b:77:73:70:3f:71:35:8e:e1:ed:34:
         d3:da:3c:36
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUV0hxRznaCTj+p8o910v5owJupkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjMxODE2MDJaFw0yNDA4MjExODIxMDJaMDMxMTAvBgNV
BAMTKEEwNzIyODg0NENCRDQxQTcxOEFDOTI2OTI1RDRDQjE1MzMwRkFCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpyFLb8nx2XUBBnG6isW8G9PFE
sXN/OFCetq/XqY9KJJZouJNxxoALUcFsZN12+3OkHy58hERN5SRF2vL5x6OrKIz1
qOOzYgwfT6AMBHidVlRM5EMX2Kf0S9QSX1q+oYIW8TAXjPTz6Neod69HrVVlad17
55R3DnaChv08oVEF+axT5J+hO+Utl2HdCfxSFAZnanK2SqZg6b/agpl+25CNgZJm
7cJgqPC4gW+sv+iFgHQOpIJje7t5rj2J7NquhFOowsvpdnIZu/eQFoTR3lLpjddM
YGQ1MbTM7+K69GR3bsdYII0wWtD9u3jMJ1VlTAc2Gzby3kzTfoPwLN4rC9ONAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgciiETL1Bpxis
kmkl1MsVMw+rrzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HZ1dNYTlDNjNweEttMVQ3TjFNblN6dTlqbjZlNVp2TDlx
dWpUTHFUS25MVi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5
cXVqVExxVEtuTFYvMC9BMDcyMjg4NDRDQkQ0MUE3MThBQzkyNjkyNUQ0Q0IxNTMz
MEZBQkFGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALITbAwDQQCAAIwBwMF
ACgEGUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPFWMA0GCSqGSIb3DQEBCwUA
A4IBAQB8nok1KQD3Uxlim4xAvQ98sMBEBihLIqngkL9nuJ4Rse1twoNTVmTrZm44
E6cj/wC8dLLMZoGa8sSGo6/6rxCziru4VM6V2qp13ndBuwE57a0LNB0lgTgZX3Er
pQGweVMeSl46LpWdaTpJ5YB37UuaSxJuHWpaZ7ziteYjcKKpOiV/NdkKna4aPYEe
ZTFktG9EA6Gh6aoNkxefgHYfAj9v3m1PqyjarsfMSqBsB9Nqu9vqH+VLP9mHP8X/
+aNXIqEG1ZFKNpl43mVVIo9ZcEdL043QFA9A7meQJWpi9G8CW66NCRTQajmBgmJT
sf2oGfR6m3dzcD9xNY7h7TTT2jw2
-----END CERTIFICATE-----