Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B19E482E7803E78E75ED46B1C1B2D462071D845C.cer
File:                     B19E482E7803E78E75ED46B1C1B2D462071D845C.cer (raw, json)
Hash identifier:          yhoDNC6Gd04gST1XQjtq5uyKdfG0qov5oWYsr3nXt2A=
Subject key identifier:   B1:9E:48:2E:78:03:E7:8E:75:ED:46:B1:C1:B2:D4:62:07:1D:84:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47AB959E78EE4BD490E8B357ECC503E24C55BE31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/B19E482E7803E78E75ED46B1C1B2D462071D845C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 13:07:33 +0000
Certificate not after:    Thu 28 Dec 2023 13:12:33 +0000
Subordinate resources:    AS: 268508
                          IP: 45.162.22.0/23
                          IP: 2804:5248::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ab:95:9e:78:ee:4b:d4:90:e8:b3:57:ec:c5:03:e2:4c:55:be:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 13:07:33 2022 GMT
            Not After : Dec 28 13:12:33 2023 GMT
        Subject: CN=B19E482E7803E78E75ED46B1C1B2D462071D845C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:bc:9d:36:c2:f4:51:16:12:01:61:88:2d:
                    48:79:9e:90:bb:a8:b9:fd:9f:95:5d:72:9b:14:23:
                    74:db:ec:b0:a6:79:c2:b4:76:9d:d3:c3:83:5d:2d:
                    7f:03:d0:32:e8:f9:d8:bd:cf:fa:36:58:69:a4:59:
                    28:47:6b:54:81:45:4b:8d:e0:47:78:0a:ff:cc:e3:
                    61:03:bd:8f:81:f2:df:0e:f6:c5:b7:76:9f:f5:6c:
                    82:4e:f7:cf:dc:6e:0c:d5:f0:7e:14:80:72:5c:36:
                    0e:15:3f:45:af:12:e3:a3:29:11:4b:ad:66:95:ee:
                    d7:78:94:81:8c:83:2d:3c:2d:2d:ef:dd:e6:02:85:
                    86:64:fb:e6:47:7c:5f:35:32:d9:ce:be:63:8d:67:
                    ac:8d:b5:46:df:ab:11:92:00:6d:ae:3c:84:24:5a:
                    78:82:db:fe:1b:26:e2:47:30:54:21:ff:2c:c9:dd:
                    a1:37:f4:d6:2b:f7:7c:58:b8:28:d4:b8:ba:3f:df:
                    92:da:c4:2b:3c:7e:2b:c2:35:d1:1c:8a:1f:87:1d:
                    02:c2:d2:13:16:33:a4:29:64:14:56:3f:87:eb:48:
                    3c:d5:59:7d:9e:be:c1:bf:41:8d:0a:60:2c:b4:18:
                    9d:1f:f9:6d:73:7f:8a:78:41:70:65:9b:05:f2:e1:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:9E:48:2E:78:03:E7:8E:75:ED:46:B1:C1:B2:D4:62:07:1D:84:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/B19E482E7803E78E75ED46B1C1B2D462071D845C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.22.0/23
                IPv6:
                  2804:5248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268508

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:86:b2:96:73:f1:53:d4:9b:55:3a:e0:17:99:c9:2c:e4:
         7f:d9:26:e9:bc:7a:87:cb:50:58:25:51:d5:af:ca:0b:47:e2:
         f4:08:29:00:18:7e:a8:72:16:83:0c:af:9e:b2:61:9c:1c:7e:
         92:b2:d8:a6:36:20:80:a3:da:6b:26:c4:24:af:50:0a:7c:a1:
         81:10:71:d2:57:cc:13:bb:c3:d1:69:72:3b:13:3a:5b:af:13:
         e8:79:e8:71:6e:58:7b:2e:37:d8:0a:c7:b4:3e:74:e0:b1:5d:
         f0:b1:f0:3d:02:27:b3:ec:fa:72:83:cd:77:7a:1f:4c:87:2c:
         a2:22:ba:ba:35:d3:d6:45:3f:05:19:73:8f:ce:7e:2f:6e:a7:
         2b:ec:21:22:e3:e5:7f:94:7f:9b:bc:f0:66:bc:67:20:ef:4d:
         7b:9c:b7:2e:50:21:5d:c1:7b:64:a9:f7:31:8d:05:65:84:a6:
         f3:df:95:10:8d:b7:4f:05:96:34:55:b7:9b:a9:98:c6:4d:45:
         93:6f:c5:fa:7f:55:22:59:5d:cc:a7:19:f8:37:db:73:96:4b:
         56:68:4d:c1:2e:bb:d4:b0:60:c5:d5:b6:18:47:a7:b3:82:1a:
         51:2c:e2:52:fd:3e:f2:37:f1:1e:fe:b0:f2:00:1f:f1:27:02:
         41:76:d8:c5
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUR6uVnnjuS9SQ6LNX7MUD4kxVvjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMjkxMzA3MzNaFw0yMzEyMjgxMzEyMzNaMDMxMTAvBgNV
BAMTKEIxOUU0ODJFNzgwM0U3OEU3NUVENDZCMUMxQjJENDYyMDcxRDg0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkp7ydNsL0URYSAWGILUh5npC7
qLn9n5VdcpsUI3Tb7LCmecK0dp3Tw4NdLX8D0DLo+di9z/o2WGmkWShHa1SBRUuN
4Ed4Cv/M42EDvY+B8t8O9sW3dp/1bIJO98/cbgzV8H4UgHJcNg4VP0WvEuOjKRFL
rWaV7td4lIGMgy08LS3v3eYChYZk++ZHfF81MtnOvmONZ6yNtUbfqxGSAG2uPIQk
WniC2/4bJuJHMFQh/yzJ3aE39NYr93xYuCjUuLo/35LaxCs8fivCNdEcih+HHQLC
0hMWM6QpZBRWP4frSDzVWX2evsG/QY0KYCy0GJ0f+W1zf4p4QXBlmwXy4YO5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxnkgueAPnjnXt
RrHBstRiBx2EXDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80Q2hzY2FEU0Y1aW9hVHJTOXNRNXR4dVZ0c2IyWmNWUWFw
RnlqSDJ0a2UxVi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80Q2hzY2FEU0Y1aW9hVHJTOXNRNXR4dVZ0c2IyWmNWUWFw
RnlqSDJ0a2UxVi8wL0IxOUU0ODJFNzgwM0U3OEU3NUVENDZCMUMxQjJENDYyMDcx
RDg0NUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS2iFjANBAIAAjAHAwUA
KARSSDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGNwwDQYJKoZIhvcNAQELBQAD
ggEBABSrhrKWc/FT1JtVOuAXmcks5H/ZJum8eofLUFglUdWvygtH4vQIKQAYfqhy
FoMMr56yYZwcfpKy2KY2IICj2msmxCSvUAp8oYEQcdJXzBO7w9FpcjsTOluvE+h5
6HFuWHsuN9gKx7Q+dOCxXfCx8D0CJ7Ps+nKDzXd6H0yHLKIiuro109ZFPwUZc4/O
fi9upyvsISLj5X+Uf5u88Ga8ZyDvTXucty5QIV3Be2Sp9zGNBWWEpvPflRCNt08F
ljRVt5upmMZNRZNvxfp/VSJZXcynGfg323OWS1ZoTcEuu9SwYMXVthhHp7OCGlEs
4lL9PvI38R7+sPIAH/EnAkF22MU=
-----END CERTIFICATE-----