Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.cer
File:                     D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.cer (raw, json)
Hash identifier:          PnouXX7xMoPzaQqCcdfOb4JgvPL4zFbtsmltv6aTPu0=
Subject key identifier:   D3:30:22:82:E3:76:7C:06:D5:D1:D3:EB:16:D4:FB:89:A3:DA:9D:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B580AD1DAA89ED4D585D7AB7EA52FD2F8F044DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 13:06:58 +0000
Certificate not after:    Tue 30 Jul 2024 13:11:58 +0000
Subordinate resources:    AS: 265328
                          IP: 168.181.64.0/22
                          IP: 2804:2e28::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:58:0a:d1:da:a8:9e:d4:d5:85:d7:ab:7e:a5:2f:d2:f8:f0:44:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 13:06:58 2023 GMT
            Not After : Jul 30 13:11:58 2024 GMT
        Subject: CN=D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:79:cf:97:8b:d5:05:80:67:ba:a2:32:0d:
                    b7:6f:5a:15:95:7a:25:20:d0:19:84:11:0d:bc:ba:
                    33:bd:18:b6:60:4d:23:b0:d7:31:c9:a2:74:5a:4e:
                    e1:69:da:4e:2a:e7:e4:64:a4:72:43:e6:82:ec:b6:
                    83:b9:5a:1c:8f:f2:9a:69:3b:2c:7c:23:ae:56:bc:
                    a9:6a:10:ff:27:76:17:93:2f:aa:bb:d7:57:8b:b2:
                    75:4e:c1:b6:45:c4:5d:66:5e:d4:7b:3d:c1:be:4b:
                    2e:a4:e5:a7:ae:99:32:96:14:3a:a0:66:6e:24:ee:
                    4f:42:5d:3c:a1:6b:31:b5:7e:05:63:f3:f0:9b:ba:
                    de:cf:cb:69:b7:95:cc:ec:f2:02:ed:a6:2b:c2:16:
                    24:73:fa:83:07:ad:34:19:01:a4:b0:99:87:fc:ca:
                    34:16:a8:34:13:17:35:fa:98:03:7a:32:05:20:6b:
                    d6:75:85:a7:75:10:24:ed:ff:d2:f9:f3:f6:56:32:
                    2f:a9:ab:9f:50:1e:8b:50:2e:a6:b2:87:8a:66:97:
                    32:43:5b:33:6a:3f:d4:02:69:5c:22:4c:e4:3a:18:
                    48:b3:08:a6:ab:8a:be:8d:e3:ed:25:7d:ea:cb:8b:
                    cd:bb:28:ae:3e:a5:99:58:89:7a:0e:c5:f0:aa:e9:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:30:22:82:E3:76:7C:06:D5:D1:D3:EB:16:D4:FB:89:A3:DA:9D:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22
                IPv6:
                  2804:2e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265328

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:99:c9:be:02:61:fb:a6:75:c3:79:4a:de:c4:fc:e5:bd:
         12:5d:f4:5e:66:84:50:ef:8a:53:8b:7b:54:e9:11:b1:bc:40:
         1e:23:47:40:5b:3d:a6:aa:b9:a0:24:12:c4:d0:a7:29:15:90:
         ff:e6:c7:6e:53:d3:d1:15:6f:d6:dd:8f:6c:29:9f:65:03:a9:
         5a:3d:94:99:86:e6:9a:ea:5d:74:f1:ec:b9:30:c3:60:6a:ea:
         6b:12:41:93:14:f6:a5:37:f0:dc:ac:01:6a:bb:2c:cd:42:09:
         63:70:7e:a0:57:4c:f4:5d:fe:d2:58:08:7d:aa:fb:f2:fd:91:
         a6:08:0d:15:4a:db:69:6b:82:36:cd:39:da:71:6c:16:10:4e:
         b9:92:14:b2:9a:7c:b6:7c:1f:ea:85:5b:3f:15:ab:4f:4e:e9:
         13:8d:41:14:a6:fc:8b:7b:4f:e3:dc:36:d2:1d:00:76:11:63:
         79:38:13:0b:e4:41:f3:3a:32:25:88:ef:94:99:73:38:3e:24:
         97:fa:08:50:ff:2a:53:43:3c:7e:4c:75:6c:0b:30:f8:5d:c1:
         5e:42:5e:da:0b:8c:97:d3:e2:51:69:85:05:27:e0:ff:71:e5:
         83:42:c6:63:9e:89:74:0c:f3:2c:d5:e3:c2:36:91:c2:64:45:
         80:2c:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----