Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.cer
File:                     34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.cer (raw, json)
Hash identifier:          0D/B80zawSlYXxjHJlH8GbZta3Pqo/c1SPsYDswrBoY=
Subject key identifier:   34:47:1C:9E:8B:96:C0:2F:EE:3B:20:93:47:E7:B5:EE:0B:F8:F0:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CEC6B7F7C0CC4576718FA072454EDBF12E74BC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Feb 2022 19:30:18 +0000
Certificate not after:    Thu 16 Feb 2023 19:35:18 +0000
Subordinate resources:    AS: 264539
                          IP: 138.0.24.0/22
                          IP: 2804:2128::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ec:6b:7f:7c:0c:c4:57:67:18:fa:07:24:54:ed:bf:12:e7:4b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 19:30:18 2022 GMT
            Not After : Feb 16 19:35:18 2023 GMT
        Subject: CN=34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:95:b4:18:29:6a:71:29:a6:1b:f4:6f:04:
                    2d:dd:d0:7e:6f:53:b4:55:52:72:d6:41:52:fb:00:
                    c1:a3:55:a2:3f:af:86:8d:c5:a7:9a:6b:6b:ca:61:
                    88:37:7d:c8:fd:64:34:23:6d:83:5a:2c:0c:00:68:
                    9d:fb:5b:6e:d1:e3:a8:4c:53:a6:90:c7:76:90:5c:
                    a2:0e:5d:91:e8:4e:68:d1:59:82:be:87:6c:3e:d1:
                    ba:27:dd:ea:c4:8e:e1:98:8c:f3:ed:ee:fd:57:0c:
                    1a:b6:68:25:5b:e1:4b:75:15:e5:cb:79:62:e5:18:
                    1d:b9:b3:b1:eb:e5:1c:c1:2d:dd:f4:14:93:d8:d5:
                    0d:10:03:79:ad:a5:6f:d1:47:08:38:a0:52:f8:f5:
                    2b:7e:58:8e:bc:83:6e:4f:9a:07:1d:42:f6:99:9f:
                    93:16:fa:e8:db:1e:f5:de:60:ee:49:cf:e1:c1:53:
                    8b:03:5f:fa:21:52:81:79:58:b7:e7:fd:17:da:06:
                    8b:99:19:01:72:cc:d4:e3:85:c7:ed:e2:78:90:fd:
                    d0:dd:94:d9:6a:84:16:4c:4e:75:86:24:d5:b0:d8:
                    22:8f:07:31:8c:bc:b4:34:f5:90:9b:1d:fc:17:f3:
                    01:8f:0b:9b:2c:71:a1:6e:d6:95:fc:65:95:2c:46:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:47:1C:9E:8B:96:C0:2F:EE:3B:20:93:47:E7:B5:EE:0B:F8:F0:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22
                IPv6:
                  2804:2128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264539

    Signature Algorithm: sha256WithRSAEncryption
         72:df:d7:95:8b:02:f9:8c:67:99:c8:02:66:9e:cd:79:1b:01:
         43:49:63:b0:8c:e6:17:bc:b4:4c:bf:72:60:47:22:04:ab:d9:
         0a:da:77:ff:19:26:32:90:30:04:6e:21:84:d3:55:3e:0e:54:
         ac:09:d5:89:94:79:1e:0a:04:9f:f4:78:b3:ed:67:de:32:44:
         ff:c7:93:b8:d7:9d:04:8d:ff:10:d2:63:f2:bb:89:b7:34:55:
         8f:70:bb:8f:e5:0c:b9:10:f3:4b:47:4e:1c:44:ec:49:56:2a:
         d0:59:e7:33:e3:c8:03:ea:4c:7d:70:73:f2:b6:99:d9:38:77:
         2a:c8:c3:bc:8d:1c:5f:c4:17:83:62:71:50:95:5d:b6:3d:d7:
         96:63:62:52:80:f6:61:ba:39:ca:f4:8f:d9:fe:f6:df:21:1d:
         e4:b6:9b:93:aa:db:d1:ae:1b:90:43:ed:5e:bc:58:d3:66:be:
         f8:b8:a9:22:10:4e:23:8b:06:55:5d:57:fb:0d:08:4e:ce:60:
         98:b3:a6:1e:ba:61:80:07:c9:6c:9e:aa:17:3d:b4:a7:fa:c6:
         ce:c6:b2:a0:06:a5:c5:38:4c:f3:c3:01:b8:a7:6c:e8:43:47:
         6d:25:4d:d3:3f:13:fb:ba:49:2d:33:ca:02:70:95:2a:1e:c0:
         f2:37:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----