Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.cer
File:                     3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.cer (raw, json)
Hash identifier:          c8de2LZE83qGfzUCmS/ZjSvxmdQJ0OWQuMNoYkRUVNQ=
Subject key identifier:   3C:48:AD:61:EB:20:DD:DA:BB:33:B6:FA:4C:1B:F5:3D:8B:E5:CD:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       464943BDF4128EC102BD450B840DA299378B1D89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Sep 2022 14:26:24 +0000
Certificate not after:    Mon 11 Sep 2023 14:31:24 +0000
Subordinate resources:    AS: 267257
                          IP: 45.232.80.0/22
                          IP: 2804:4ab0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:49:43:bd:f4:12:8e:c1:02:bd:45:0b:84:0d:a2:99:37:8b:1d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 12 14:26:24 2022 GMT
            Not After : Sep 11 14:31:24 2023 GMT
        Subject: CN=3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:8f:ac:d7:4d:61:ab:00:1d:d5:c2:f8:aa:
                    ff:e1:2c:d0:34:4d:f5:cf:5d:89:93:47:40:fa:da:
                    61:84:73:cf:88:9e:e6:49:ff:de:eb:5d:71:e1:b2:
                    ff:a2:46:03:9e:5a:b2:ca:f4:89:39:93:5b:78:cf:
                    ad:4e:6f:93:9d:6f:fc:ee:3d:32:c6:e9:13:68:6e:
                    8f:90:46:ec:9a:77:c4:7d:b1:e4:35:f9:89:64:d9:
                    f9:d5:86:8b:16:6f:d4:cf:99:7d:ee:03:52:6b:b3:
                    f0:1b:56:6b:b0:9e:50:2f:1e:2c:a0:3e:80:5a:99:
                    a9:c6:a4:cc:53:e1:9b:51:9a:2e:83:94:fb:7e:8c:
                    eb:fe:65:91:d9:07:16:f0:9e:76:56:31:30:33:59:
                    81:8b:ac:f6:3a:4f:10:d3:2c:ca:d8:10:2b:51:f3:
                    41:03:53:35:70:83:f6:c3:bc:98:a6:41:f1:d3:eb:
                    eb:ad:12:d0:75:72:52:4a:57:45:cc:99:6e:be:7a:
                    90:91:43:7d:6c:92:8f:85:b0:5a:29:b4:dc:80:14:
                    a9:18:9c:f2:db:b9:60:dc:46:f9:1e:46:62:01:d1:
                    b7:d3:41:31:57:dd:07:31:72:b5:34:66:b8:17:92:
                    5f:12:9e:93:fa:c7:2f:8b:ad:bf:c2:dd:7b:e2:5c:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:48:AD:61:EB:20:DD:DA:BB:33:B6:FA:4C:1B:F5:3D:8B:E5:CD:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.80.0/22
                IPv6:
                  2804:4ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267257

    Signature Algorithm: sha256WithRSAEncryption
         b6:7c:3d:aa:9f:61:d2:cd:64:67:dc:94:24:d0:f4:02:80:7c:
         d2:7d:00:39:5e:77:2b:66:b6:00:3e:f6:1a:bb:23:aa:7b:8e:
         29:05:3f:51:d3:37:28:79:de:3b:35:01:e9:ce:bd:cf:43:70:
         4e:1a:bb:19:d9:23:0c:76:8c:1c:a5:3d:1a:19:bd:d7:74:f6:
         20:2b:72:b0:0a:d4:b3:71:4a:8b:18:d7:ff:cf:70:82:45:81:
         5b:9a:03:45:58:e6:12:aa:78:7f:42:c7:90:7d:b8:ef:9e:9d:
         b0:4e:30:66:bc:d6:a0:d7:9a:e8:cc:a4:14:14:c7:0b:e7:5f:
         f1:82:1f:9b:3a:a1:21:ce:52:43:76:76:80:2a:cc:24:48:dd:
         d3:87:4d:6c:8d:64:8f:16:4b:ac:a6:bc:97:4e:87:22:61:46:
         15:9e:1a:c8:d1:b1:7b:c6:48:be:32:6e:62:63:ce:de:df:31:
         6d:c6:a8:ff:1d:5b:6d:2f:a7:d1:e1:f2:c0:74:f1:f8:19:82:
         0e:0e:95:17:7f:0a:51:59:7e:71:ab:ee:3a:ba:ac:e3:53:f4:
         b5:98:83:8b:8e:d4:ad:bc:d3:55:f1:2e:af:54:52:23:45:c8:
         b6:0a:e5:21:e4:51:15:96:35:6d:97:3d:39:ec:07:7f:5e:30:
         b5:65:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----