Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E7BE86A9A57E21D6EEA42C13A657825D49BBDD99.cer
File:                     E7BE86A9A57E21D6EEA42C13A657825D49BBDD99.cer (raw, json)
Hash identifier:          48yVS6HUEufDzR1N3+tQaIvN/eEAZb/rZ8wZWTQnKTE=
Subject key identifier:   E7:BE:86:A9:A5:7E:21:D6:EE:A4:2C:13:A6:57:82:5D:49:BB:DD:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CEC25E2B924DAF264215FDE0BE40890CABAA3D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/1/E7BE86A9A57E21D6EEA42C13A657825D49BBDD99.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 18:58:14 +0000
Certificate not after:    Thu 12 Sep 2024 19:03:14 +0000
Subordinate resources:    AS: 266484
                          IP: 170.83.168.0/22
                          IP: 2804:3888::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ec:25:e2:b9:24:da:f2:64:21:5f:de:0b:e4:08:90:ca:ba:a3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 18:58:14 2023 GMT
            Not After : Sep 12 19:03:14 2024 GMT
        Subject: CN=E7BE86A9A57E21D6EEA42C13A657825D49BBDD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:2e:3b:75:3a:6f:a5:d8:35:12:8d:78:1f:
                    d3:1b:cf:46:69:71:a0:49:e1:9a:8c:a4:1e:0e:19:
                    dd:f3:a0:d1:8b:99:79:3c:66:43:3d:b6:e0:ec:03:
                    67:7a:19:0b:14:42:5e:fd:0f:bb:44:bb:28:bb:1a:
                    f4:a4:32:1e:02:83:69:8e:75:16:b4:d7:ba:6b:ae:
                    e3:7e:bd:a6:03:6c:2f:65:99:22:6f:b3:71:a0:b8:
                    b9:2d:4a:a4:44:5f:68:30:53:f9:62:ec:d2:11:4c:
                    8f:bb:2c:57:b5:5d:e5:c6:ca:9c:8c:e3:3e:0a:af:
                    3d:fd:91:f9:23:93:cf:4a:d6:d7:7e:2c:fa:8c:7d:
                    da:41:95:98:ba:e9:53:8f:04:48:2b:88:8f:08:39:
                    cc:83:14:32:ec:76:98:1e:85:70:8a:4a:6e:38:ee:
                    97:b7:d1:b5:10:8f:0e:bd:22:79:ec:08:14:cb:04:
                    75:ba:12:ca:cc:b6:12:46:4e:1a:04:ec:f7:30:ba:
                    c1:60:14:a0:b0:c0:c0:1e:4f:6d:4b:82:ee:4e:4e:
                    c2:b5:3a:b8:d1:75:d3:c4:62:30:78:7f:ff:cf:83:
                    ce:62:e1:44:03:e0:81:04:e5:c6:7e:6d:c2:10:15:
                    f2:47:6b:76:31:59:b7:de:07:e6:4f:6b:cc:87:83:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:BE:86:A9:A5:7E:21:D6:EE:A4:2C:13:A6:57:82:5D:49:BB:DD:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/1/E7BE86A9A57E21D6EEA42C13A657825D49BBDD99.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.168.0/22
                IPv6:
                  2804:3888::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266484

    Signature Algorithm: sha256WithRSAEncryption
         1b:e8:40:bd:9e:6b:7a:25:8b:c7:c4:98:80:16:e0:c2:4f:58:
         04:27:da:70:ce:86:49:f7:ae:e1:4f:43:23:d3:c2:9f:10:f4:
         ad:3f:fd:86:0a:10:60:60:d0:fa:14:2b:a2:46:48:63:9e:d2:
         d8:be:d1:5e:a5:1f:7c:60:a1:4e:f1:35:ce:d2:54:a1:51:35:
         bf:f5:ac:77:98:35:69:ad:e7:36:d3:20:52:5b:79:f2:ef:96:
         68:77:25:54:d6:c5:1f:e3:61:8d:71:64:7b:c9:e2:1d:28:cd:
         ce:4e:9c:79:fe:c1:d0:27:12:39:31:16:42:eb:d2:c3:70:26:
         e2:8f:82:98:7f:78:8b:77:9d:fc:e8:59:72:42:bc:21:5f:89:
         32:f7:ce:d8:fe:05:ed:06:29:49:a7:57:b0:18:eb:b4:5d:1e:
         2b:e3:49:95:da:0a:22:9d:45:14:a2:17:ed:2c:75:18:29:52:
         33:28:8f:84:e0:1a:bc:54:33:84:b6:f4:a1:91:19:6f:82:b5:
         b8:b4:c0:9d:ae:f6:75:58:04:e8:46:db:0e:cc:ed:05:37:f6:
         d2:75:b7:8b:f8:30:42:9a:38:0b:4a:72:37:07:a3:61:34:ae:
         b1:4d:f7:d7:44:ad:1d:a1:21:b4:d7:2f:a7:cd:b0:01:e1:bd:
         24:9e:d6:6a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXOwl4rkk2vJkIV/eC+QIkMq6o9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTQxODU4MTRaFw0yNDA5MTIxOTAzMTRaMDMxMTAvBgNV
BAMTKEU3QkU4NkE5QTU3RTIxRDZFRUE0MkMxM0E2NTc4MjVENDlCQkREOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hi47dTpvpdg1Eo14H9Mbz0Zp
caBJ4ZqMpB4OGd3zoNGLmXk8ZkM9tuDsA2d6GQsUQl79D7tEuyi7GvSkMh4Cg2mO
dRa017prruN+vaYDbC9lmSJvs3GguLktSqREX2gwU/li7NIRTI+7LFe1XeXGypyM
4z4Krz39kfkjk89K1td+LPqMfdpBlZi66VOPBEgriI8IOcyDFDLsdpgehXCKSm44
7pe30bUQjw69InnsCBTLBHW6EsrMthJGThoE7PcwusFgFKCwwMAeT21Lgu5OTsK1
OrjRddPEYjB4f//Pg85i4UQD4IEE5cZ+bcIQFfJHa3YxWbfeB+ZPa8yHg3k3AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnvoappX4h1u6k
LBOmV4JdSbvdmTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85U1B1ZXZEUnFrbjlidlF2aU1jREdYd3hSeUs3S0JDTm9h
dmhFZm9nWlZ0NS8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOVNQdWV2RFJxa245YnZRdmlNY0RHWHd4UnlLN0tCQ05v
YXZoRWZvZ1pWdDUvMS9FN0JFODZBOUE1N0UyMUQ2RUVBNDJDMTNBNjU3ODI1RDQ5
QkJERDk5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqU6gwDQQCAAIwBwMF
ACgEOIgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBD0MA0GCSqGSIb3DQEBCwUA
A4IBAQAb6EC9nmt6JYvHxJiAFuDCT1gEJ9pwzoZJ967hT0Mj08KfEPStP/2GChBg
YND6FCuiRkhjntLYvtFepR98YKFO8TXO0lShUTW/9ax3mDVprec20yBSW3ny75Zo
dyVU1sUf42GNcWR7yeIdKM3OTpx5/sHQJxI5MRZC69LDcCbij4KYf3iLd5386Fly
QrwhX4ky987Y/gXtBilJp1ewGOu0XR4r40mV2goinUUUohftLHUYKVIzKI+E4Bq8
VDOEtvShkRlvgrW4tMCdrvZ1WAToRtsOzO0FN/bSdbeL+DBCmjgLSnI3B6NhNK6x
TffXRK0doSG01y+nzbAB4b0kntZq
-----END CERTIFICATE-----