Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.cer
File:                     ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.cer (raw, json)
Hash identifier:          PEYeKx1sqB83+KzPW8h152rfrAp5R4Fiy+Pn/nKfypc=
Subject key identifier:   AC:E2:A3:13:71:8C:29:FB:FA:09:1B:0D:CF:F5:0D:AA:23:EE:EE:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7716E06A724F34396ADDC771386D0A8D333725DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 14:33:58 +0000
Certificate not after:    Wed 03 Jul 2024 14:38:58 +0000
Subordinate resources:    AS: 268465
                          IP: 45.161.124.0/22
                          IP: 2804:519c::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:16:e0:6a:72:4f:34:39:6a:dd:c7:71:38:6d:0a:8d:33:37:25:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 14:33:58 2023 GMT
            Not After : Jul  3 14:38:58 2024 GMT
        Subject: CN=ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:2c:f1:0c:e4:0a:a2:52:8a:bb:22:a7:bb:
                    c2:01:39:a9:02:b4:48:73:68:a9:a0:bb:f6:dd:13:
                    26:14:74:b2:a4:26:52:7c:78:2a:df:f4:9c:3f:50:
                    97:7c:1a:80:61:1f:fa:8d:05:75:ac:be:45:98:58:
                    35:a4:92:f4:75:b1:5c:c1:ba:8b:0f:79:e9:7b:18:
                    7f:30:f3:33:6a:83:65:56:8e:27:11:49:7e:14:02:
                    a8:59:3a:0e:a3:df:31:17:25:ad:bd:7c:0f:f6:ce:
                    d1:81:a6:b2:13:bd:29:94:2e:25:b9:d4:01:9a:17:
                    38:a9:de:e4:65:37:72:15:3d:87:d3:5c:cc:60:f9:
                    93:d0:8a:e4:2a:d2:3b:45:27:64:4a:ae:a5:8a:b5:
                    83:ca:ea:0a:c4:44:3c:9c:be:0c:cb:e4:43:37:af:
                    9e:b1:68:32:e3:16:b8:5c:34:75:ae:a3:9e:9a:b6:
                    d8:7d:8e:f8:7e:84:77:82:81:6f:71:53:58:2c:b5:
                    7e:93:95:bc:a3:2c:47:ae:ee:40:74:84:b0:02:84:
                    56:d6:f5:09:f8:93:4b:4f:05:d4:94:fe:a3:8f:d2:
                    eb:82:5e:b4:4a:e9:5f:20:6f:65:a9:af:ab:45:29:
                    54:52:41:05:fe:79:d1:8a:e4:4f:8e:39:a3:25:f3:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:E2:A3:13:71:8C:29:FB:FA:09:1B:0D:CF:F5:0D:AA:23:EE:EE:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.124.0/22
                IPv6:
                  2804:519c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268465

    Signature Algorithm: sha256WithRSAEncryption
         55:17:83:87:24:5f:2b:cc:33:0f:ca:f0:99:33:51:d4:6d:ff:
         d0:73:2d:37:0a:2f:f5:e1:da:dc:43:e6:28:81:62:71:4a:e8:
         6f:d5:9b:77:b4:3c:14:b2:0c:de:cb:10:fb:e7:9d:f6:c5:04:
         9f:68:2c:6c:a9:ac:89:70:b4:ad:68:6a:50:50:98:4d:4a:86:
         43:ef:2a:2d:73:9c:41:5a:65:94:b2:b3:e3:07:84:52:38:e3:
         c6:58:d5:21:8a:23:bc:1b:9a:0d:7c:90:f7:59:25:7c:53:d8:
         b5:f9:f2:e7:a2:1f:d6:c8:30:d5:3b:d8:17:39:17:15:12:47:
         4e:a4:37:a7:72:2c:7b:2f:c1:65:e3:7b:7b:59:92:f2:b1:36:
         4f:f9:5e:39:e0:5a:5d:b9:35:2a:df:dc:38:37:28:ef:ab:38:
         d7:a9:ec:b5:0c:8a:47:a3:c7:64:f7:03:d8:e8:98:ec:a6:f0:
         65:9a:13:df:a8:bf:f5:72:58:e0:74:22:87:cd:8c:bf:c5:f0:
         3c:d1:2b:63:fd:02:6b:34:8e:c4:fe:32:bf:e8:9b:36:4b:ba:
         62:7a:af:cc:14:72:10:17:62:61:64:70:31:7a:b4:79:b9:eb:
         ee:c2:a6:8f:38:1f:39:c3:9f:27:a9:3c:92:00:06:07:db:35:
         89:97:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----