Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EAD2C7944CCACDF8BC19289CE702F188926F6EE2.cer
File:                     EAD2C7944CCACDF8BC19289CE702F188926F6EE2.cer (raw, json)
Hash identifier:          3l/lxjdXswBQ8Kge8Y6oD776ZLsO5xDFsD0YVmtvRTI=
Subject key identifier:   EA:D2:C7:94:4C:CA:CD:F8:BC:19:28:9C:E7:02:F1:88:92:6F:6E:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2656709E41CFA1BCEDF74E1A99DCA0DE34B1D42E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/EAD2C7944CCACDF8BC19289CE702F188926F6EE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 13:37:42 +0000
Certificate not after:    Thu 25 Jul 2024 13:42:42 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:56:70:9e:41:cf:a1:bc:ed:f7:4e:1a:99:dc:a0:de:34:b1:d4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 13:37:42 2023 GMT
            Not After : Jul 25 13:42:42 2024 GMT
        Subject: CN=EAD2C7944CCACDF8BC19289CE702F188926F6EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:99:de:89:a6:76:0f:a7:1d:f6:f4:6e:ed:
                    c0:b7:a2:76:68:a0:66:39:f8:52:af:9c:d4:0c:92:
                    95:2e:f8:aa:c0:4d:ff:ec:65:ec:bf:98:ca:d1:ef:
                    5f:4d:f8:21:46:3d:31:90:b1:b8:53:de:49:2d:a5:
                    6d:c2:26:99:f9:25:f8:40:72:ae:db:e7:64:54:42:
                    a7:4c:44:fe:67:56:e4:b3:11:0f:a6:8d:da:8f:16:
                    49:94:a4:7f:48:3c:a4:43:1b:f7:b5:d1:86:03:59:
                    92:97:f7:39:2d:8c:ae:25:e0:86:31:26:ad:35:6d:
                    8b:c1:a9:f9:10:dd:a8:10:76:a6:47:e0:58:17:02:
                    0a:17:4c:36:cf:d5:57:45:00:da:d2:a4:b7:ae:a7:
                    9e:e4:ce:56:42:15:a1:de:d4:f1:a7:50:10:a3:f8:
                    13:10:8b:62:fe:c9:20:aa:c5:d3:5e:3a:4b:82:ae:
                    30:c9:f2:0c:f9:83:db:0c:a5:01:cd:20:63:a3:2c:
                    61:36:99:49:fa:08:3c:77:07:06:0c:cc:65:a8:df:
                    2b:67:a1:91:b1:b6:4c:25:66:1c:3e:79:83:5e:2b:
                    52:91:1e:e6:11:e3:f1:e6:25:5f:77:39:27:59:14:
                    84:51:9c:62:39:e4:14:cc:8a:68:c7:08:74:3f:47:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:D2:C7:94:4C:CA:CD:F8:BC:19:28:9C:E7:02:F1:88:92:6F:6E:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/EAD2C7944CCACDF8BC19289CE702F188926F6EE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:4a:7c:68:95:d1:5e:9c:e9:3b:53:86:52:36:f0:6d:a6:
         f6:58:2c:54:12:6e:33:a9:28:60:d9:0e:4f:24:1b:95:67:6b:
         6a:b4:0c:46:8d:c4:25:b6:93:f6:e7:3d:5a:1b:23:39:9e:ae:
         81:cb:c5:5c:ef:eb:bb:e3:bb:12:cb:06:86:db:b5:d1:da:8c:
         3b:a9:03:b0:43:1f:2b:e4:69:99:d3:61:c5:b4:2d:bd:b1:09:
         34:f0:78:39:82:9d:db:87:38:b2:27:ad:75:ac:76:45:7a:26:
         12:92:91:e4:06:c9:d5:f3:aa:41:10:1b:c2:83:be:d1:da:28:
         aa:3f:1a:af:35:c7:f0:90:02:21:f0:d1:c1:0e:c7:cd:25:6b:
         3a:1f:9c:8b:ff:ff:46:17:ac:ed:62:b7:68:e9:cc:1e:0e:d0:
         f2:4e:9b:17:e3:6e:01:5a:01:b6:f9:99:03:47:71:94:4c:33:
         90:11:9f:c3:01:78:d2:0a:3e:ea:87:d0:9d:2b:b0:e1:69:5c:
         85:d6:31:97:d1:f7:5f:24:5a:9a:39:b5:9d:e9:fd:ee:9d:96:
         d2:cb:aa:37:fa:e6:89:c7:e6:49:c2:f2:ee:e2:0b:9c:0a:12:
         53:d9:1a:a1:12:55:4d:ed:f4:0c:82:92:57:58:1d:e5:af:d1:
         db:78:d3:7a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJlZwnkHPobzt904amdyg3jSx1C4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjcxMzM3NDJaFw0yNDA3MjUxMzQyNDJaMDMxMTAvBgNV
BAMTKEVBRDJDNzk0NENDQUNERjhCQzE5Mjg5Q0U3MDJGMTg4OTI2RjZFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCua5neiaZ2D6cd9vRu7cC3onZo
oGY5+FKvnNQMkpUu+KrATf/sZey/mMrR719N+CFGPTGQsbhT3kktpW3CJpn5JfhA
cq7b52RUQqdMRP5nVuSzEQ+mjdqPFkmUpH9IPKRDG/e10YYDWZKX9zktjK4l4IYx
Jq01bYvBqfkQ3agQdqZH4FgXAgoXTDbP1VdFANrSpLeup57kzlZCFaHe1PGnUBCj
+BMQi2L+ySCqxdNeOkuCrjDJ8gz5g9sMpQHNIGOjLGE2mUn6CDx3BwYMzGWo3ytn
oZGxtkwlZhw+eYNeK1KRHuYR4/HmJV93OSdZFIRRnGI55BTMimjHCHQ/R1wnAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTq0seUTMrN+LwZ
KJznAvGIkm9u4jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83Vmh2NWM0WkVoYWY4QUxaQU51UnRwR2pyalk1bjNkRTRU
Mnh2azZndnFyTC8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0
VDJ4dms2Z3ZxckwvMS9FQUQyQzc5NDRDQ0FDREY4QkMxOTI4OUNFNzAyRjE4ODky
NkY2RUUyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKowqQwDQQCAAIwBwMF
ACgEM2QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAyxMA0GCSqGSIb3DQEBCwUA
A4IBAQCjXUp8aJXRXpzpO1OGUjbwbab2WCxUEm4zqShg2Q5PJBuVZ2tqtAxGjcQl
tpP25z1aGyM5nq6By8Vc7+u747sSywaG27XR2ow7qQOwQx8r5GmZ02HFtC29sQk0
8Hg5gp3bhziyJ611rHZFeiYSkpHkBsnV86pBEBvCg77R2iiqPxqvNcfwkAIh8NHB
DsfNJWs6H5yL//9GF6ztYrdo6cweDtDyTpsX424BWgG2+ZkDR3GUTDOQEZ/DAXjS
Cj7qh9CdK7DhaVyF1jGX0fdfJFqaObWd6f3unZbSy6o3+uaJx+ZJwvLu4gucChJT
2RqhElVN7fQMgpJXWB3lr9HbeNN6
-----END CERTIFICATE-----