Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C00B42BB28649977C9198D6CD528A3837C8A098.cer
File:                     1C00B42BB28649977C9198D6CD528A3837C8A098.cer (raw, json)
Hash identifier:          uUDkJ29f0WLGga+9eLdzyfjgi7EhTdqJ2l1G8EGTIgg=
Subject key identifier:   1C:00:B4:2B:B2:86:49:97:7C:91:98:D6:CD:52:8A:38:37:C8:A0:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C8E4A75CADFB875E9D73F5E54B6BD55C86F74F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/1C00B42BB28649977C9198D6CD528A3837C8A098.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 13:42:04 +0000
Certificate not after:    Tue 13 Jun 2023 13:47:04 +0000
Subordinate resources:    AS: 52742
                          IP: 177.130.16.0/20
                          IP: 2804:cb0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:4a:75:ca:df:b8:75:e9:d7:3f:5e:54:b6:bd:55:c8:6f:74:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 13:42:04 2022 GMT
            Not After : Jun 13 13:47:04 2023 GMT
        Subject: CN=1C00B42BB28649977C9198D6CD528A3837C8A098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:3b:a1:fd:6e:55:a2:6a:44:60:e2:d9:13:
                    8e:19:ed:1d:20:1f:c2:25:ed:e3:a8:45:8b:25:0e:
                    3a:5b:c1:37:ea:09:8e:cd:d9:04:61:f0:b4:1c:67:
                    d4:36:37:2c:4b:8c:f5:57:2d:00:e9:83:33:21:fc:
                    62:24:33:4b:5e:87:ac:90:59:f4:24:ec:a8:9b:46:
                    17:e7:76:54:99:85:06:fb:04:01:20:94:3a:a4:af:
                    b2:38:aa:c8:b6:1a:14:67:0a:a4:14:0f:a8:99:d2:
                    de:fc:c3:ca:8a:a3:57:c5:f6:36:2d:13:b0:80:61:
                    5e:49:21:78:fb:da:87:d2:d6:e6:c1:7a:d4:e9:62:
                    ad:47:bd:a7:1c:fe:36:01:a7:53:92:ef:ff:5f:5f:
                    52:6f:19:68:a6:f7:d6:7b:b9:61:d8:08:40:e4:27:
                    f6:d1:c9:26:45:55:03:b6:fa:d4:52:a7:ff:82:94:
                    9e:bf:f3:4d:72:ac:70:f4:ad:b0:20:69:c8:8f:88:
                    8d:0d:ed:aa:81:3c:51:6f:d9:5a:48:f4:bc:3e:56:
                    e0:a5:5d:bd:f2:27:2e:b9:b9:1b:7f:fb:8e:68:26:
                    d8:86:c6:75:9c:f6:c1:e8:cf:86:20:c0:e8:90:5e:
                    2b:4b:7c:d9:40:85:12:5c:96:0e:f6:b9:97:da:e3:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:00:B4:2B:B2:86:49:97:7C:91:98:D6:CD:52:8A:38:37:C8:A0:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/1C00B42BB28649977C9198D6CD528A3837C8A098.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.16.0/20
                IPv6:
                  2804:cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52742

    Signature Algorithm: sha256WithRSAEncryption
         07:37:8a:59:74:e5:13:1a:a1:e5:b7:20:ce:3e:ab:30:a1:fd:
         46:e2:8f:2c:a4:f9:41:7a:52:8e:82:70:21:1a:d9:57:7a:60:
         5e:30:ed:cb:bb:34:93:b0:ea:86:df:bb:44:18:e9:1c:d7:34:
         fd:19:e0:5a:66:76:f3:40:06:a1:f7:ff:53:9c:dd:7a:36:e3:
         ce:cd:1b:82:40:25:2f:7f:ff:0e:4d:4a:48:73:b0:1d:d8:d2:
         26:d7:ab:93:08:00:be:6b:ec:b2:ec:07:f9:26:fb:05:f2:c0:
         56:6d:3d:14:10:8f:73:92:32:31:99:02:74:d9:b7:f5:5f:46:
         6a:c2:dc:a9:7f:77:5f:41:40:17:09:2d:98:a7:3d:ea:2c:c3:
         dc:4c:80:6f:fe:22:92:88:38:3e:c7:a9:ec:9c:b0:58:7f:16:
         63:b4:f7:c9:e0:15:1d:ba:a7:d7:9f:13:8c:05:24:d1:52:48:
         e4:0d:32:11:98:c5:ae:a4:fc:eb:dc:1c:89:30:54:4a:fe:37:
         f7:5b:65:e6:a7:da:2b:80:70:8e:5a:e6:cb:4e:3c:03:1b:55:
         6a:be:bb:f5:76:19:8a:ed:9d:27:d0:83:bc:86:47:c4:05:14:
         8c:c1:cf:bf:28:2e:06:20:fc:d6:47:2b:b1:d4:e2:3e:d2:6f:
         c7:5f:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----