Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F09D78FAB257DA8D8F70E7F2EC444C5EABFFC883.cer
File:                     F09D78FAB257DA8D8F70E7F2EC444C5EABFFC883.cer (raw, json)
Hash identifier:          ZIw7X9/l4l6Ck71Wj3CN/+75v5eeknoynvz1TzvwwMU=
Subject key identifier:   F0:9D:78:FA:B2:57:DA:8D:8F:70:E7:F2:EC:44:4C:5E:AB:FF:C8:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FD65E457F953317E8D41D0FCB0A3774F29B03B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/F09D78FAB257DA8D8F70E7F2EC444C5EABFFC883.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 12:53:53 +0000
Certificate not after:    Wed 10 Jul 2024 12:58:53 +0000
Subordinate resources:    AS: 271104
                          IP: 179.42.4.0/22
                          IP: 2804:7654::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:5e:45:7f:95:33:17:e8:d4:1d:0f:cb:0a:37:74:f2:9b:03:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 12:53:53 2023 GMT
            Not After : Jul 10 12:58:53 2024 GMT
        Subject: CN=F09D78FAB257DA8D8F70E7F2EC444C5EABFFC883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:1c:8d:23:f1:e1:c3:c8:92:fe:7a:63:6e:
                    37:b2:61:8e:8f:e2:26:79:23:b6:6d:8a:0e:a9:cf:
                    c8:db:e4:80:55:81:50:9d:2d:64:c7:9c:1f:84:e0:
                    1a:f2:3b:1f:f4:bb:01:73:6d:11:61:bb:9c:b8:73:
                    13:11:b9:82:10:29:26:f7:57:5a:cc:80:8e:bf:e8:
                    1e:f8:60:d5:68:e8:63:c6:3a:46:f2:39:88:e6:1b:
                    a3:9f:cb:f1:5b:c2:e4:c2:4b:4d:c1:1f:99:0c:07:
                    63:b6:91:92:e1:f9:d6:e7:17:e4:56:b6:da:c9:cf:
                    c9:24:2b:9a:ef:9b:4a:cd:30:6a:1d:93:d6:0c:99:
                    64:93:4d:0e:cb:01:d7:78:e2:47:ca:32:1e:61:5f:
                    26:cd:3b:d6:c6:51:f2:d6:5b:4b:41:d6:a5:2b:90:
                    f7:b6:38:8d:31:42:be:fd:bb:18:f2:e3:c4:d2:7f:
                    16:98:fc:a4:db:01:49:2d:c3:a8:22:f9:53:1e:31:
                    71:d3:24:21:4c:6e:54:21:4d:c5:47:d7:f6:e4:5c:
                    63:19:7c:85:a6:68:21:76:01:37:4a:63:19:bd:55:
                    c9:57:b3:ef:69:ad:51:5a:d4:e4:61:54:1a:65:89:
                    6e:5f:e8:36:27:be:f6:0e:a0:85:82:1f:23:ab:87:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:9D:78:FA:B2:57:DA:8D:8F:70:E7:F2:EC:44:4C:5E:AB:FF:C8:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/F09D78FAB257DA8D8F70E7F2EC444C5EABFFC883.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22
                IPv6:
                  2804:7654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271104

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:6d:72:99:3b:ab:33:c3:66:6b:35:ee:2c:ce:e6:63:94:
         83:f8:a7:ea:85:6b:0c:a4:6f:85:c0:9a:7d:64:14:d6:2f:8e:
         c0:90:bf:c9:06:f0:1d:e6:09:70:ff:b8:c1:d7:ec:87:9f:b8:
         51:c8:ba:d0:d8:9b:12:6a:6d:c0:4a:6d:93:0d:91:0d:2d:e6:
         dc:36:a2:bc:a7:f5:4c:2f:c7:64:3f:e9:64:b1:af:39:08:b4:
         3d:6f:03:3b:8b:0e:96:42:f5:8f:99:50:47:71:34:11:09:b1:
         5d:2a:65:09:d8:f5:37:c2:bc:1c:06:b0:21:8a:de:47:fa:5d:
         59:bb:db:2e:d6:b9:67:2f:7d:6b:10:7b:00:27:79:b6:0b:d5:
         5d:d1:6d:6d:d0:a9:64:3f:15:23:cc:28:2c:83:1b:9e:49:a0:
         b8:dc:74:d0:b8:7b:5e:5d:f8:e4:d1:d2:60:7f:8d:8c:c1:97:
         7f:53:58:90:bc:e0:c5:91:30:a0:0a:fe:dd:5a:c7:72:e6:db:
         72:9d:61:9f:47:75:b9:c7:ab:e7:8b:b3:4c:73:bd:cc:bc:6f:
         4b:01:b7:6e:ec:0a:04:28:69:7e:e5:b6:82:c4:f9:0a:b8:ff:
         65:1e:6d:e2:6a:bb:45:a2:73:56:21:38:c6:c1:14:a0:19:fc:
         83:30:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----