Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer
File:                     4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer (raw, json)
Hash identifier:          hXeg1r2d//PjPb3MrTMCOgeJnaImctU7lTPS3TJQnzU=
Subject key identifier:   4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59AD171FAFCCCA8E7C087A5EFB8F08969B3D5CC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Aug 2022 13:08:43 +0000
Certificate not after:    Mon 21 Aug 2023 13:13:43 +0000
Subordinate resources:    AS: 266607
                          IP: 45.7.192.0/22
                          IP: 2804:3e94::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ad:17:1f:af:cc:ca:8e:7c:08:7a:5e:fb:8f:08:96:9b:3d:5c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 13:08:43 2022 GMT
            Not After : Aug 21 13:13:43 2023 GMT
        Subject: CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:f6:42:c5:5c:c5:a2:49:05:28:95:0b:06:
                    d3:25:92:71:3c:fd:ee:82:f4:0b:91:e3:ab:d6:b0:
                    5a:8d:2d:f2:13:d6:66:f3:3c:e2:40:62:48:d1:02:
                    b1:56:33:5a:02:05:c6:a1:9a:9a:59:b1:7b:97:b2:
                    0c:27:ed:3c:34:1e:69:89:05:5e:b7:1d:fa:75:de:
                    e1:fb:82:e9:23:9d:69:3e:13:ab:c7:6e:bf:0b:3f:
                    70:d0:b5:56:e3:d3:cf:62:27:d9:0b:9e:8f:68:17:
                    f2:3f:b4:9c:71:11:6d:3b:bc:c4:32:95:83:a6:b7:
                    1e:55:c6:93:e1:98:e6:11:12:fc:8b:bd:6d:48:bd:
                    4f:c7:8d:8f:85:8e:9e:13:f9:72:a8:32:62:00:1c:
                    a9:28:42:6f:21:65:9f:07:a0:60:14:9e:3a:62:b2:
                    47:0a:0b:0c:ab:44:ae:3d:5b:8a:d5:aa:c4:9b:8b:
                    15:da:28:b7:dd:2a:21:66:2e:4e:2b:8c:c6:71:8a:
                    9a:14:04:87:9e:fe:ef:14:28:73:5e:46:87:82:aa:
                    9c:a2:47:bd:ed:6b:e8:54:50:93:e1:da:bd:00:33:
                    45:d0:9e:a8:40:12:f7:e6:dc:ef:3e:60:53:6e:f5:
                    0f:0c:04:18:56:26:36:c8:d4:6f:87:a9:3c:37:41:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/22
                IPv6:
                  2804:3e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266607

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:3f:59:ac:27:07:31:bc:3e:c1:25:58:a3:f0:85:f1:65:
         f4:a0:a6:ae:12:0d:7e:e5:23:d9:cf:74:4e:9e:2d:4a:6c:fc:
         47:80:3c:5c:98:b3:56:34:f6:10:3a:d7:e9:01:d1:79:bf:c3:
         b3:19:47:3c:62:bd:10:bd:b9:dc:a6:70:9a:bc:c4:c8:97:9d:
         e7:b9:61:e4:8b:a5:5b:ff:33:f8:32:87:9f:fc:8b:fc:ea:83:
         bd:82:77:db:d2:2d:e9:79:8b:16:5f:55:12:08:98:bd:ad:e4:
         d3:21:e9:e7:04:67:51:5a:a1:df:b7:58:26:e5:8b:20:73:fa:
         14:09:c5:fd:4d:04:19:0c:a7:72:f3:b4:03:63:1f:a0:f6:3e:
         25:3b:82:66:a4:a3:80:61:38:66:d2:03:4e:34:e6:69:73:5a:
         f3:5e:6a:5c:e7:0e:d2:60:64:aa:64:d5:9c:0d:65:17:93:a9:
         ce:bc:9d:25:af:15:50:2a:0e:7d:04:6d:9b:d2:a6:88:0b:fc:
         70:1f:30:26:62:1c:89:b9:f1:1d:b0:bd:17:5d:d6:e4:b2:14:
         e3:8d:a5:27:23:b2:2f:63:94:4f:45:08:27:f9:dd:d0:ee:87:
         8d:ac:04:95:14:5b:27:14:15:24:d1:37:78:5f:48:66:85:67:
         38:90:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----