Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BD5D2F7AD342417A0B2914691BEBD646104DE6B5.cer
File:                     BD5D2F7AD342417A0B2914691BEBD646104DE6B5.cer (raw, json)
Hash identifier:          NRwj+hPPkEJBB3L6G914TA8pNFmzgiCTE4+9WL4S8Vs=
Subject key identifier:   BD:5D:2F:7A:D3:42:41:7A:0B:29:14:69:1B:EB:D6:46:10:4D:E6:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3457D669B7B3B9B7EF682BA84D37487FF41FF745
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/BD5D2F7AD342417A0B2914691BEBD646104DE6B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 14:44:45 +0000
Certificate not after:    Mon 22 Jul 2024 14:49:45 +0000
Subordinate resources:    AS: 271566
                          IP: 179.63.172.0/22
                          IP: 2804:7d84::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:d6:69:b7:b3:b9:b7:ef:68:2b:a8:4d:37:48:7f:f4:1f:f7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 14:44:45 2023 GMT
            Not After : Jul 22 14:49:45 2024 GMT
        Subject: CN=BD5D2F7AD342417A0B2914691BEBD646104DE6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:04:5d:11:cd:31:2b:77:ad:27:c7:e4:e4:
                    27:0a:4b:1e:54:a7:83:d3:46:c0:e1:06:4e:61:55:
                    6a:87:a1:b5:b6:b9:a7:22:71:c2:d9:d3:b4:9e:48:
                    5c:73:d0:0c:81:f4:dd:1f:ec:1c:8a:c7:51:a4:d3:
                    cf:98:57:48:9f:83:d9:33:50:e7:d1:57:bc:4d:60:
                    e1:5e:f5:de:c4:ba:07:0a:a2:e3:d9:15:0a:6d:59:
                    0a:59:c4:fe:34:b9:b1:03:fc:bb:1f:6c:27:ce:5b:
                    4b:b3:71:46:e0:27:98:f1:0d:ab:dd:d6:20:9f:f1:
                    fe:d5:d6:e9:92:9d:3b:47:aa:70:05:f0:a9:f0:e6:
                    29:49:43:81:a4:87:08:66:4b:78:fc:03:81:36:7e:
                    c0:ee:a2:f7:e3:e1:88:f5:af:9a:2c:2b:8b:14:a1:
                    78:6a:f3:85:3b:99:20:28:d5:13:0f:3f:70:c9:10:
                    40:a6:b3:68:3a:a3:25:3b:d7:48:e8:f0:c4:ab:59:
                    56:ec:71:d2:9b:fe:fa:4d:9a:52:70:3f:82:aa:d1:
                    52:65:7e:ca:8e:06:4a:a7:86:0b:27:5c:2a:4f:29:
                    26:ae:34:b3:bf:49:4b:2a:7c:74:59:78:d7:9e:9e:
                    82:be:5b:81:7b:18:31:bf:eb:51:eb:fc:59:bb:4c:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:5D:2F:7A:D3:42:41:7A:0B:29:14:69:1B:EB:D6:46:10:4D:E6:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/BD5D2F7AD342417A0B2914691BEBD646104DE6B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/22
                IPv6:
                  2804:7d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271566

    Signature Algorithm: sha256WithRSAEncryption
         21:85:9a:ea:43:6b:48:2f:ed:be:13:23:f1:d4:db:8f:48:a3:
         a9:a9:72:37:b7:08:83:29:d4:b9:7e:74:6d:70:cf:52:b8:d9:
         aa:1a:14:e5:45:be:e9:fa:50:9e:62:44:6d:24:05:89:b7:09:
         c7:bb:c8:1d:7d:70:68:e6:a2:e1:09:65:81:93:c3:a9:c2:08:
         3f:13:a0:63:9e:9a:89:38:50:21:9b:26:f6:d7:52:95:85:7e:
         30:e6:04:49:97:e1:49:5b:3a:40:e2:ff:50:29:33:a1:97:4b:
         8b:61:bb:67:81:00:4d:30:8c:14:c8:a1:61:1f:b7:c0:3a:43:
         c2:8a:67:ab:24:d3:ee:50:36:13:91:bb:a3:ff:90:56:d2:80:
         d5:1d:bb:81:88:a6:e0:ec:b0:25:59:9c:42:31:71:71:62:93:
         99:8e:fa:32:04:17:d1:e1:88:3c:f9:8d:fc:b7:52:e3:74:a1:
         71:af:21:15:c3:78:4a:4e:7f:91:ce:6a:58:73:48:df:af:de:
         23:66:77:0a:72:8e:04:00:2e:e3:95:3c:f8:9c:01:e3:b9:36:
         87:e8:98:d1:d2:4e:62:2f:a1:e3:17:35:f6:98:5c:e7:32:94:
         9e:7a:b5:2a:24:45:4c:2d:79:34:b8:e5:68:d7:6a:11:bf:a8:
         8e:77:1b:f6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNFfWabezubfvaCuoTTdIf/Qf90UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjQxNDQ0NDVaFw0yNDA3MjIxNDQ5NDVaMDMxMTAvBgNV
BAMTKEJENUQyRjdBRDM0MjQxN0EwQjI5MTQ2OTFCRUJENjQ2MTA0REU2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRQRdEc0xK3etJ8fk5CcKSx5U
p4PTRsDhBk5hVWqHobW2uaciccLZ07SeSFxz0AyB9N0f7ByKx1Gk08+YV0ifg9kz
UOfRV7xNYOFe9d7EugcKouPZFQptWQpZxP40ubED/LsfbCfOW0uzcUbgJ5jxDavd
1iCf8f7V1umSnTtHqnAF8Knw5ilJQ4GkhwhmS3j8A4E2fsDuovfj4Yj1r5osK4sU
oXhq84U7mSAo1RMPP3DJEECms2g6oyU710jo8MSrWVbscdKb/vpNmlJwP4Kq0VJl
fsqOBkqnhgsnXCpPKSauNLO/SUsqfHRZeNeenoK+W4F7GDG/61Hr/Fm7TN7LAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9XS9600JBegsp
FGkb69ZGEE3mtTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GNlFNRUFTY29SZkVzVmRMWW9CVzJYUWtYVUFuMTlGaVJS
M3l0dnhpaFNnaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjZRTUVBU2NvUmZFc1ZkTFlvQlcyWFFrWFVBbjE5RmlS
UjN5dHZ4aWhTZ2gvMC9CRDVEMkY3QUQzNDI0MTdBMEIyOTE0NjkxQkVCRDY0NjEw
NERFNkI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzP6wwDQQCAAIwBwMF
ACgEfYQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCTOMA0GCSqGSIb3DQEBCwUA
A4IBAQAhhZrqQ2tIL+2+EyPx1NuPSKOpqXI3twiDKdS5fnRtcM9SuNmqGhTlRb7p
+lCeYkRtJAWJtwnHu8gdfXBo5qLhCWWBk8Opwgg/E6BjnpqJOFAhmyb211KVhX4w
5gRJl+FJWzpA4v9QKTOhl0uLYbtngQBNMIwUyKFhH7fAOkPCimerJNPuUDYTkbuj
/5BW0oDVHbuBiKbg7LAlWZxCMXFxYpOZjvoyBBfR4Yg8+Y38t1LjdKFxryEVw3hK
Tn+RzmpYc0jfr94jZncKco4EAC7jlTz4nAHjuTaH6JjR0k5iL6HjFzX2mFznMpSe
erUqJEVMLXk0uOVo12oRv6iOdxv2
-----END CERTIFICATE-----