Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B72B159095F8C6C1D37283BDFBC70F8CA71F025.cer
File:                     4B72B159095F8C6C1D37283BDFBC70F8CA71F025.cer (raw, json)
Hash identifier:          XUIZIweT7HL+/ToB4NabKu5mBAcYTfTjTN5yZhetpqw=
Subject key identifier:   4B:72:B1:59:09:5F:8C:6C:1D:37:28:3B:DF:BC:70:F8:CA:71:F0:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A9160C6B3FA2A35AFAAEB37B835A9FD82DA706A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/4B72B159095F8C6C1D37283BDFBC70F8CA71F025.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 15:14:13 +0000
Certificate not after:    Thu 20 Jul 2023 15:19:13 +0000
Subordinate resources:    AS: 268847
                          IP: 45.173.252.0/22
                          IP: 2804:5b78::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:91:60:c6:b3:fa:2a:35:af:aa:eb:37:b8:35:a9:fd:82:da:70:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 15:14:13 2022 GMT
            Not After : Jul 20 15:19:13 2023 GMT
        Subject: CN=4B72B159095F8C6C1D37283BDFBC70F8CA71F025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:e2:3e:37:a0:4a:bc:4a:b0:ac:ea:cb:d6:
                    5a:c0:50:d5:48:b4:03:90:46:73:1c:57:3a:e5:fa:
                    f9:6f:a7:f7:8d:87:72:23:85:b6:2e:cb:10:8b:4f:
                    18:30:53:53:7e:15:0c:09:bc:e9:2b:bd:ec:6b:54:
                    0e:c5:f0:c0:c5:c4:ff:db:1d:ae:b7:ea:21:38:40:
                    56:a6:24:68:94:79:83:d8:4b:f1:f0:18:6a:09:01:
                    b5:d2:70:9b:2f:88:d4:b0:60:48:5f:d1:22:91:dc:
                    6a:40:02:9f:36:79:0b:c7:b1:30:47:89:1d:2c:a2:
                    51:7b:e3:62:fe:3a:c5:89:05:ca:4e:0e:7c:bd:47:
                    7a:b6:bc:bc:e3:37:5f:4a:93:31:5e:c2:68:3b:ee:
                    4d:b8:72:ad:e0:de:2b:b1:39:75:68:e3:4f:14:0e:
                    e6:2f:6d:49:cc:d2:21:fd:64:81:a8:85:3e:e2:6b:
                    ca:57:fe:d7:6d:f6:70:5a:b9:3c:74:9e:6d:d9:0a:
                    e5:5a:c0:d2:53:ad:11:13:87:b2:08:65:68:c8:ed:
                    27:cf:62:72:cd:e7:eb:1a:b4:eb:8e:6c:0f:06:24:
                    be:9e:0f:e8:99:aa:71:7c:c3:96:1d:ce:24:f2:7d:
                    00:18:ce:d4:b2:f8:7e:ba:69:94:b4:6c:8a:3d:60:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:72:B1:59:09:5F:8C:6C:1D:37:28:3B:DF:BC:70:F8:CA:71:F0:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/4B72B159095F8C6C1D37283BDFBC70F8CA71F025.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.252.0/22
                IPv6:
                  2804:5b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268847

    Signature Algorithm: sha256WithRSAEncryption
         93:80:bc:43:1c:bc:bf:55:ea:6e:11:27:10:c3:e8:8b:39:82:
         3f:50:d2:df:40:04:10:e0:b5:31:4c:75:cf:65:42:47:cb:79:
         29:2b:6a:c5:2b:bf:9e:00:81:34:aa:6e:bb:f2:84:7f:f7:d3:
         36:17:87:1c:16:26:d0:a5:e9:88:8c:66:d9:ff:ce:13:9d:e9:
         04:f7:e6:ca:b3:06:0c:dc:0c:1a:99:00:8d:19:5a:6a:73:6d:
         68:91:a1:f9:72:77:e9:1a:52:f1:96:2f:c4:aa:a0:b7:ee:41:
         0d:9c:3a:fd:50:d3:d7:1a:53:6a:21:50:87:56:f6:f5:bf:08:
         0d:12:e5:b5:29:f1:e6:f9:34:49:38:9f:48:2e:94:bf:ef:74:
         99:2c:e4:dd:41:43:b0:8a:3b:fb:61:ed:ef:ad:79:8d:95:3f:
         2b:d8:1a:9a:7f:e4:04:8e:69:d1:37:2c:7d:99:8c:21:a6:fd:
         49:1a:0f:25:6a:37:7d:d9:24:b2:87:79:bf:c6:da:53:bc:e8:
         18:1e:2a:5a:17:33:bf:81:f7:41:38:d9:00:d1:2c:14:c4:a8:
         45:13:98:49:84:0d:1c:0f:aa:9a:da:96:94:9e:8c:50:85:75:
         d7:7b:d3:0d:03:b5:00:9f:49:7c:e7:6c:fb:d0:60:7a:4c:64:
         b3:92:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----