Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FACF693935DF85E951D29CA8CFC9E1B7EF33FD9B.cer
File:                     FACF693935DF85E951D29CA8CFC9E1B7EF33FD9B.cer (raw, json)
Hash identifier:          Zj+sHNpNW2S0Zq56MhkeNMhnmw5t2RcVkB73QAzBsbg=
Subject key identifier:   FA:CF:69:39:35:DF:85:E9:51:D2:9C:A8:CF:C9:E1:B7:EF:33:FD:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3902A6A4CAFB95B47524D9CAE0F2A364257942A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/FACF693935DF85E951D29CA8CFC9E1B7EF33FD9B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 16:12:50 +0000
Certificate not after:    Mon 25 Mar 2024 16:17:50 +0000
Subordinate resources:    AS: 267150
                          IP: 45.230.56.0/22
                          IP: 2804:48e0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:a6:a4:ca:fb:95:b4:75:24:d9:ca:e0:f2:a3:64:25:79:42:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 16:12:50 2023 GMT
            Not After : Mar 25 16:17:50 2024 GMT
        Subject: CN=FACF693935DF85E951D29CA8CFC9E1B7EF33FD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:79:a7:90:ac:1d:ea:5b:b2:4b:50:8f:7f:
                    fe:18:89:da:6c:bd:f7:22:66:e0:e7:a5:c5:bb:bb:
                    c5:48:4f:b7:ef:27:7c:b1:ab:05:7a:6e:9b:a4:5d:
                    0f:ae:27:5a:ed:6a:93:4a:e3:5b:17:ff:72:c6:52:
                    9a:3b:72:6c:86:47:63:88:11:b8:6d:20:9d:c7:af:
                    62:8a:19:3a:ea:9c:e0:19:94:bd:7e:97:1f:fa:e3:
                    3a:51:24:5d:e4:b1:f0:1d:f7:ae:76:00:94:04:84:
                    2a:31:73:29:68:ba:4b:84:d3:6d:4f:26:5e:9d:8e:
                    76:a4:f6:35:10:fb:a4:0e:9d:c1:b1:2a:0d:2c:5b:
                    6f:0f:52:69:2b:52:62:33:11:89:e0:eb:a0:11:dc:
                    fc:25:08:5e:80:3b:79:3f:61:94:0b:35:61:cf:23:
                    f4:21:90:75:ff:d6:16:fc:ee:d6:63:3b:f9:ac:69:
                    65:e2:7c:de:b7:d5:a7:d0:65:80:4f:a5:6d:64:fe:
                    4f:a3:9e:b5:81:6c:c1:14:04:f5:12:0d:ae:05:59:
                    f9:e1:1d:5d:d4:06:be:e4:15:b1:fc:66:a4:cc:e2:
                    7f:6d:91:4a:61:02:17:c5:63:9f:57:69:92:bc:b2:
                    35:9c:26:08:4b:9d:30:f2:2e:ae:14:cf:ad:5e:12:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:CF:69:39:35:DF:85:E9:51:D2:9C:A8:CF:C9:E1:B7:EF:33:FD:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/FACF693935DF85E951D29CA8CFC9E1B7EF33FD9B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.56.0/22
                IPv6:
                  2804:48e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267150

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:ed:7d:39:36:4c:0c:6c:d6:7f:1b:f8:df:ce:2c:8a:cf:
         3c:03:a7:34:d9:c0:ac:0c:03:7b:ab:4a:be:f0:c8:19:da:ec:
         9c:67:c8:78:e5:b4:44:5b:0c:5d:ed:b4:d4:66:91:67:d9:d7:
         39:41:d5:62:a2:d2:0d:ce:7d:a4:9f:83:af:45:a9:f3:b6:2f:
         c5:8b:3f:9c:ad:70:7c:fc:32:bf:d6:2d:70:78:14:ad:c4:96:
         b2:ce:62:54:b6:9f:9d:74:a4:ec:73:b4:88:be:80:87:2d:7c:
         63:a1:cd:06:68:6a:ef:2d:cf:3c:37:b7:86:9a:5b:7e:d6:3d:
         86:85:65:a1:29:b1:21:e7:1e:c0:e8:74:11:8d:87:51:32:50:
         f7:e7:82:60:a3:a6:df:c6:3f:ce:ae:7b:3a:01:2d:fa:98:3e:
         2b:83:10:0e:69:da:5c:4d:2b:56:35:4a:c9:e0:e7:9b:c5:6e:
         f5:64:51:c7:d1:c3:27:2e:57:76:57:a6:43:41:5b:79:28:96:
         de:80:22:c3:b8:c1:12:c3:05:30:a5:3e:3a:8e:a0:39:b6:dc:
         0b:8d:ba:61:ef:31:0d:d8:62:85:af:ee:23:7b:69:c7:85:c4:
         96:5c:b0:f5:4e:3c:d8:cc:ce:80:94:e2:a3:bb:d8:37:92:15:
         82:aa:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----