Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.cer
File:                     7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.cer (raw, json)
Hash identifier:          g62scRoCPs04PcYcJQfwkZe14GH9VnnJtJ6RickoJcE=
Subject key identifier:   7B:0E:E7:7F:36:E4:2B:60:3F:E6:14:63:C5:A6:E8:A8:75:CD:8A:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44115023E2B36328AEC33003BB96FDF05471EAC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Sep 2024 16:16:24 +0000
Certificate not after:    Tue 16 Sep 2025 16:21:24 +0000
Subordinate resources:    AS: 262909
                          IP: 177.36.48.0/20
                          IP: 2804:702c::/32

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 16:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:11:50:23:e2:b3:63:28:ae:c3:30:03:bb:96:fd:f0:54:71:ea:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 16:16:24 2024 GMT
            Not After : Sep 16 16:21:24 2025 GMT
        Subject: CN=7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:8e:1d:01:b7:ab:24:e6:34:01:01:1a:ba:
                    3c:2f:f0:a9:96:0e:78:6c:29:e3:71:c8:b5:53:40:
                    dc:f0:bc:a9:15:02:33:5a:6c:e4:31:29:90:40:76:
                    1d:e4:7f:b3:68:23:95:d5:ae:52:49:d4:1c:73:bf:
                    3f:f1:e3:2b:16:02:dc:37:c3:7d:83:0c:cc:d8:89:
                    a0:f6:22:65:d8:d8:ae:53:ab:27:e7:34:c9:ca:71:
                    f4:fa:56:91:5a:b8:32:71:50:55:55:c1:ec:b5:82:
                    cb:eb:a4:7c:b7:66:b7:2e:36:ef:92:8b:3e:d5:1c:
                    81:97:e5:5e:1f:3f:b9:3c:90:fa:98:76:94:b2:02:
                    6a:45:4a:fe:92:d4:13:b0:ea:e3:32:02:73:c2:ea:
                    96:1a:2d:23:58:4f:03:48:bf:b0:2a:f6:bd:b6:72:
                    01:3c:3e:bf:2f:a5:15:77:f0:ba:c0:d5:ba:77:8d:
                    4e:2c:b4:ae:0e:08:56:82:56:be:30:99:f8:2e:c8:
                    39:51:2c:dc:a2:ac:b2:55:d4:db:7c:f8:8e:6d:c5:
                    f8:3f:ef:a5:24:8c:27:21:5c:3d:2c:91:1b:b7:2d:
                    4b:cc:55:aa:98:9b:d0:46:c0:73:78:26:30:c3:04:
                    e2:fa:5d:8a:71:0a:0a:e9:4b:28:8f:98:67:95:cf:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:0E:E7:7F:36:E4:2B:60:3F:E6:14:63:C5:A6:E8:A8:75:CD:8A:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.48.0/20
                IPv6:
                  2804:702c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262909

    Signature Algorithm: sha256WithRSAEncryption
         cf:a0:48:69:85:73:39:f8:62:a0:58:93:06:05:09:14:e0:5a:
         b8:be:86:74:f2:65:f6:c0:9a:32:fe:0c:d6:d7:58:c2:36:d6:
         6b:86:21:df:08:06:58:85:69:8f:40:39:26:b6:17:6e:aa:bc:
         1b:2d:cd:a9:bc:7b:42:0c:ec:24:b5:09:96:7f:75:60:50:f2:
         72:08:b4:37:a7:ad:1c:f9:78:8a:fa:f8:fd:92:f5:c6:38:82:
         5f:62:db:29:70:63:77:46:09:7c:e2:ef:3f:7d:bc:df:84:3e:
         b5:f8:35:dd:86:71:9b:49:0d:b3:d8:b1:a0:49:f3:53:54:ef:
         85:c5:7b:ae:ba:84:2d:10:06:28:a6:e7:d5:84:e2:f8:12:1d:
         d8:76:85:92:59:b1:bd:9e:cc:5d:b6:f7:9e:84:30:ee:bd:da:
         ef:3b:a8:72:a6:f2:46:3a:ad:5e:24:5e:da:b8:3b:fd:a0:5a:
         ad:be:f9:79:e5:b9:68:85:d7:09:98:96:60:dd:6c:c5:f1:14:
         01:d7:06:79:ad:61:03:7d:b0:c1:23:ee:1a:af:03:1c:c3:06:
         1e:5c:2a:36:f2:cf:e8:20:c6:7b:bd:44:e9:5a:0f:34:26:3a:
         3a:d0:70:2b:3e:b8:5f:2d:ff:a9:b8:da:30:84:56:61:fa:b0:
         d6:e0:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----