Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED02F76B783B61A0407441C97CCF7FC651A53FD8.cer
File:                     ED02F76B783B61A0407441C97CCF7FC651A53FD8.cer (raw, json)
Hash identifier:          cOY9FGhvcLqNHxT1Wh/Tzo5APDuhtSZcQLxNcq/xkKE=
Subject key identifier:   ED:02:F7:6B:78:3B:61:A0:40:74:41:C9:7C:CF:7F:C6:51:A5:3F:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A5DA649356949CE3614F69194148B5A2EB88AC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/ED02F76B783B61A0407441C97CCF7FC651A53FD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 19:26:20 +0000
Certificate not after:    Tue 20 Aug 2024 19:31:20 +0000
Subordinate resources:    AS: 268746
                          IP: 45.171.228.0/22
                          IP: 2804:5a10::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5d:a6:49:35:69:49:ce:36:14:f6:91:94:14:8b:5a:2e:b8:8a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 19:26:20 2023 GMT
            Not After : Aug 20 19:31:20 2024 GMT
        Subject: CN=ED02F76B783B61A0407441C97CCF7FC651A53FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:0c:16:83:9d:a8:d3:5f:aa:d8:0e:17:f6:
                    76:c9:55:dd:57:73:64:97:c3:11:90:07:57:f0:3a:
                    6e:a9:35:4b:ed:c4:3d:c3:ed:7e:6b:80:94:72:c4:
                    84:35:af:80:c6:7e:75:24:30:c9:e9:1a:93:6b:39:
                    ce:dc:fe:e1:40:4a:80:a4:46:41:41:06:a0:e0:82:
                    7a:d8:68:23:89:55:a9:53:e5:09:ac:15:b7:68:1f:
                    0b:34:a0:f9:9f:c5:2b:2a:28:83:f5:c6:19:71:5e:
                    3e:26:2f:b9:9d:a5:f2:19:3b:18:01:60:29:e0:d1:
                    97:74:0e:23:63:e3:43:14:4c:7f:2d:61:c8:8f:98:
                    ae:56:d0:5a:71:44:79:a6:e9:e5:76:0e:9f:8c:61:
                    6a:2a:b4:58:11:c6:fb:ad:b8:f0:2a:a9:91:e1:cb:
                    3e:eb:3a:ba:a9:26:57:09:84:c7:eb:dc:ef:67:4d:
                    98:bb:54:5b:e4:ce:cc:d8:ec:87:98:58:8e:f6:c6:
                    95:bd:56:6f:85:aa:84:c3:12:28:d1:c8:25:15:64:
                    c5:62:e1:7f:b6:52:5d:50:1d:56:61:5e:e9:4e:45:
                    3d:da:d0:eb:6a:5d:47:55:2c:c2:3e:7d:8e:23:41:
                    47:98:55:ce:f5:db:35:96:bb:a1:a8:a2:8a:42:b8:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:02:F7:6B:78:3B:61:A0:40:74:41:C9:7C:CF:7F:C6:51:A5:3F:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/ED02F76B783B61A0407441C97CCF7FC651A53FD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/22
                IPv6:
                  2804:5a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268746

    Signature Algorithm: sha256WithRSAEncryption
         63:53:d6:be:43:0b:51:4d:31:05:f4:25:82:f8:5f:34:1b:f1:
         30:49:98:b3:3f:37:6e:56:1d:52:ae:f2:7b:5e:67:45:2e:d6:
         4d:ce:b8:ce:9e:a8:ae:d1:02:39:a4:27:e8:0b:a6:c4:e2:85:
         19:ff:4a:fb:3f:6a:3c:63:6c:9a:37:0b:f8:b4:46:58:8e:aa:
         35:cf:cc:d5:b0:11:e6:44:46:e2:2d:50:6e:1d:0d:d6:84:66:
         81:48:b7:3c:b1:7e:2d:9a:e7:98:47:4f:15:dc:84:97:0d:3c:
         b3:b6:8c:6e:1f:75:04:fb:ab:d5:f4:5c:c7:4c:7a:19:3c:77:
         c3:ba:02:6e:5a:14:e1:f4:7e:6a:36:b1:ce:24:9c:a3:5f:68:
         7d:f4:54:1b:44:2b:08:4f:81:83:10:0a:49:9b:97:b9:f7:c7:
         01:b1:d1:ad:79:2e:d8:01:bb:d5:2b:15:0d:cc:b6:e8:20:00:
         91:a3:d3:ae:df:19:ad:1e:14:05:ef:8b:b1:9c:8d:d9:4a:8e:
         44:ba:7c:ca:16:88:c4:00:91:58:df:26:ad:f1:c8:1f:d0:49:
         9a:80:a1:14:dd:19:df:6e:73:bb:37:61:4a:bd:d2:4f:f7:cc:
         1e:77:34:2f:4d:90:aa:49:1a:ce:ac:a9:cf:75:f2:07:37:c6:
         d3:84:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----