Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F048D7B1F55BCB4C657EAE115254B5895CDBC53E.cer
File:                     F048D7B1F55BCB4C657EAE115254B5895CDBC53E.cer (raw, json)
Hash identifier:          B1RNRPOCZ2EyuTVFjUr3HIsv0vf2xA7Oa+wg4w0Sdzs=
Subject key identifier:   F0:48:D7:B1:F5:5B:CB:4C:65:7E:AE:11:52:54:B5:89:5C:DB:C5:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0502B132A4D4187169D55517C168A0A6F8B79613
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/F048D7B1F55BCB4C657EAE115254B5895CDBC53E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 12:35:52 +0000
Certificate not after:    Wed 10 Jul 2024 12:40:52 +0000
Subordinate resources:    AS: 271104
                          IP: 179.42.4.0/22
                          IP: 2804:7654::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:02:b1:32:a4:d4:18:71:69:d5:55:17:c1:68:a0:a6:f8:b7:96:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 12:35:52 2023 GMT
            Not After : Jul 10 12:40:52 2024 GMT
        Subject: CN=F048D7B1F55BCB4C657EAE115254B5895CDBC53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:b2:d1:58:49:ff:31:de:5a:9d:d1:9b:81:
                    f2:5c:9d:eb:81:29:dd:5a:f2:a3:4c:04:d4:5d:8c:
                    b6:61:a5:83:f9:8e:e1:a3:c8:2e:9d:c6:29:25:97:
                    bb:db:c1:11:01:d5:b5:27:8f:0f:83:90:7a:33:35:
                    38:2a:ec:76:33:39:cd:42:8b:a0:f3:c2:33:fb:9f:
                    fc:f6:b4:16:ba:4f:d9:82:df:55:ee:b5:a2:4b:c0:
                    d4:a4:72:35:da:21:d5:28:b8:3f:41:e1:0e:fc:44:
                    65:9a:66:0f:4f:9b:15:e5:8f:10:c2:67:55:05:ef:
                    53:04:2a:17:9a:44:f2:45:49:ee:5d:43:4c:68:ac:
                    4e:75:93:e0:16:ed:a9:f7:89:d7:51:8e:ed:fe:23:
                    9e:46:4a:53:40:fa:3c:cb:e6:1e:6f:1c:51:6f:00:
                    f6:f8:bf:0e:77:f6:59:8f:c7:8f:94:fb:47:52:94:
                    c8:e9:34:0a:60:96:e2:37:33:fb:4a:70:c0:fc:81:
                    47:8b:88:0f:c6:ee:86:7a:94:7f:3b:89:99:7c:ee:
                    1a:32:b1:7e:3f:dd:53:07:dd:8c:cf:36:46:4f:9d:
                    00:03:ab:a1:7b:99:01:b8:50:8a:62:f2:dd:2d:7a:
                    77:96:91:e6:8b:82:4d:d7:0f:01:dd:49:71:2d:2f:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:48:D7:B1:F5:5B:CB:4C:65:7E:AE:11:52:54:B5:89:5C:DB:C5:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/F048D7B1F55BCB4C657EAE115254B5895CDBC53E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22
                IPv6:
                  2804:7654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271104

    Signature Algorithm: sha256WithRSAEncryption
         83:36:db:94:8b:18:c3:99:f2:ff:98:9d:f6:4c:ce:5e:10:2a:
         92:8d:96:37:8e:bd:88:d5:8a:32:21:a7:6e:a3:2e:0c:41:17:
         a4:55:d7:5f:75:ca:d8:b6:66:32:4d:fa:8a:aa:b0:48:a0:10:
         ef:8e:a3:3e:fd:e8:d3:ee:a5:94:65:31:15:88:03:da:6e:ed:
         1f:a9:17:9b:22:46:f5:95:0e:9b:25:72:86:3c:d1:7e:cc:87:
         e2:cd:9d:b2:1a:00:23:4c:98:f0:5c:8e:4d:73:2d:a2:01:04:
         bd:d1:b6:80:0f:b8:38:f2:6f:3d:89:ff:35:e4:bf:35:ae:8b:
         9f:93:06:69:a0:26:a3:1c:a8:21:8b:f5:c7:c1:b5:c9:a8:43:
         eb:90:cf:61:b6:f7:f2:ed:63:94:95:37:50:46:31:55:7d:15:
         f8:be:47:83:ff:69:e5:f7:4c:32:42:db:dc:44:36:50:9b:47:
         14:fc:1a:6a:ed:f1:e3:e9:96:1d:f7:5f:5a:73:6c:85:0c:57:
         a8:af:1a:11:a4:62:c9:b7:d9:a1:43:63:0c:5d:f3:66:a7:2d:
         b2:3c:54:78:a2:80:5a:46:12:19:d4:a1:5b:42:a0:f1:e9:43:
         b5:64:35:ad:72:14:13:95:f6:a5:58:b2:b1:ca:bc:48:27:c9:
         c8:fa:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----