Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
File:                     BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer (raw, json)
Hash identifier:          I8OOEGM5bsbs5wYu84RzhHE8t23siLnswxTHvv6EQSE=
Subject key identifier:   BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38F196C2531EBD9D676A3348AB627CDFC028D5EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 08:27:27 +0000
Certificate not after:    Thu 27 Jun 2024 08:32:27 +0000
Subordinate resources:    AS: 271557
                          IP: 181.233.188.0/22
                          IP: 2804:7d60::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f1:96:c2:53:1e:bd:9d:67:6a:33:48:ab:62:7c:df:c0:28:d5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 08:27:27 2023 GMT
            Not After : Jun 27 08:32:27 2024 GMT
        Subject: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:86:41:ba:44:3f:51:7d:c5:e8:c6:7e:40:
                    e3:7f:06:30:9f:0e:25:75:fc:17:4f:cd:54:a0:45:
                    45:e3:42:29:9e:38:82:88:7f:2c:0f:45:8b:0f:83:
                    b4:4b:4d:e0:de:c5:14:5a:be:c9:b6:12:ea:2b:3b:
                    e7:d3:80:dd:aa:d8:4c:b3:d3:66:4b:a9:9a:84:29:
                    e1:48:86:92:d7:48:30:d1:30:d2:db:b0:21:35:67:
                    2a:36:da:cc:c8:fc:e2:ce:0a:ad:78:29:e5:49:c2:
                    9c:61:7b:69:07:91:bb:12:e8:d2:5e:7d:55:f2:de:
                    6c:a1:10:e4:a4:6f:81:96:81:14:60:ad:ce:08:25:
                    87:23:67:df:2b:2d:cb:a5:ee:b4:55:5c:e8:27:96:
                    cc:0e:06:d2:1e:a2:e6:77:aa:ca:cc:05:14:8a:0b:
                    ae:f5:07:21:70:39:a9:35:f4:eb:02:87:58:41:0f:
                    81:26:7b:e3:77:52:45:d4:f6:32:00:bd:4f:c1:1d:
                    e2:29:14:18:4f:98:ad:f2:ad:87:49:04:44:1c:ae:
                    0e:9a:99:94:48:5d:90:22:2a:11:69:6c:92:11:39:
                    90:68:97:eb:30:e1:69:2d:79:98:ea:93:ba:ea:73:
                    ac:26:58:7a:82:97:01:da:f9:c8:6b:a6:6b:4e:b3:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22
                IPv6:
                  2804:7d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271557

    Signature Algorithm: sha256WithRSAEncryption
         14:63:f4:30:fe:a6:f5:74:f6:26:9f:1c:71:87:ac:85:4d:da:
         a7:64:38:3b:c4:ca:78:34:e2:d2:6e:60:d9:91:6d:3c:5f:d2:
         db:87:b7:7a:cc:bd:41:f7:77:d0:47:26:5c:75:fd:00:7a:34:
         06:f8:6d:50:fd:ee:d3:9a:cd:39:0a:c0:86:24:ae:27:ca:b2:
         a6:f8:8a:d0:2c:0f:6d:ca:02:e6:c1:96:5a:fc:92:39:3b:07:
         6b:68:45:74:49:62:93:a7:3f:75:c9:67:58:e3:83:66:54:84:
         ff:d6:71:b2:27:66:1a:86:c8:ce:e3:aa:07:87:1e:7c:db:35:
         3c:2e:db:7d:da:e6:7a:66:08:62:49:75:43:80:c6:a1:70:7e:
         0b:76:6d:6f:36:a5:d8:15:7f:79:a1:29:d8:59:a3:ed:80:b0:
         8d:68:85:d6:b1:ef:cb:92:9a:c8:27:6e:d5:46:34:ad:f1:20:
         16:f9:a9:33:b1:e2:e7:d2:bb:e9:9f:29:40:64:bf:74:10:91:
         ea:06:28:f7:a7:84:04:7c:b0:dd:3d:a3:8c:54:82:64:85:d8:
         e7:e4:b7:c3:73:f8:d0:00:c2:0a:65:9f:94:d6:bd:6a:61:78:
         f2:f0:93:00:a8:53:a2:c9:65:cb:c7:b4:02:31:23:ed:02:ea:
         32:58:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----