Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.cer
File:                     52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.cer (raw, json)
Hash identifier:          1rALPRXCsEHrQhUeCzo81kFVN3VTQNGDYJKj60+OlMg=
Subject key identifier:   52:14:06:34:A3:C5:68:91:FF:B3:EC:70:ED:A0:A5:F9:C9:BC:E0:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12B57255A46752CD5F09397C8EA397CCC9BFCB1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Dec 2022 19:03:14 +0000
Certificate not after:    Thu 14 Dec 2023 19:08:14 +0000
Subordinate resources:    AS: 61609
                          IP: 2804:87bc::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b5:72:55:a4:67:52:cd:5f:09:39:7c:8e:a3:97:cc:c9:bf:cb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 19:03:14 2022 GMT
            Not After : Dec 14 19:08:14 2023 GMT
        Subject: CN=52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:91:a1:33:9a:72:bb:7f:c6:f7:5b:9d:10:
                    90:ed:d2:94:68:1c:57:7d:49:63:73:6c:ca:48:1a:
                    fe:76:1f:68:d0:8b:61:88:6c:4e:35:21:82:f9:6d:
                    56:87:f9:c9:9b:43:27:b1:e7:dc:6a:3d:59:6a:e0:
                    a8:2e:05:71:95:0b:7f:63:32:3f:53:1b:20:4b:61:
                    0f:6d:94:5f:56:54:1b:38:ed:f8:ed:f2:61:48:4a:
                    6e:d3:49:b3:52:3a:2c:37:55:f1:d5:14:0a:d7:f7:
                    a7:62:06:61:8c:81:47:49:a3:83:ab:38:07:c1:cd:
                    95:1a:56:58:6d:c2:28:c0:9f:d9:55:26:9e:fe:10:
                    a7:7b:d6:20:e5:5c:cb:9b:43:95:50:3f:2f:97:11:
                    e8:5b:a1:39:b4:16:f9:0e:9f:97:5a:1e:7c:3e:86:
                    ff:09:b2:bf:28:ed:1c:20:5d:cd:89:0b:2d:87:71:
                    76:cc:77:8e:5e:1c:66:e5:d1:0a:74:6f:71:d4:39:
                    07:d7:de:3e:f1:ec:83:c4:65:c9:80:08:cb:5b:63:
                    3d:5b:e0:c6:77:9a:de:08:96:94:9f:09:99:af:13:
                    40:b8:24:d3:63:5b:cb:6e:ab:b4:84:60:b1:66:f9:
                    fd:7d:45:96:17:55:45:5c:6c:a3:8a:d6:39:8f:dd:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:14:06:34:A3:C5:68:91:FF:B3:EC:70:ED:A0:A5:F9:C9:BC:E0:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61609

    Signature Algorithm: sha256WithRSAEncryption
         b1:dc:7a:d6:2b:0b:2d:5e:5e:53:90:f3:b7:3b:5a:d4:88:7f:
         49:ba:49:55:a2:56:10:3c:c0:fd:4f:9f:75:58:92:b6:f3:09:
         2c:ea:a2:7d:b8:e1:79:bf:c2:db:ee:33:ac:df:eb:3d:65:6d:
         ca:e3:3a:a1:ed:f1:dd:65:72:f4:2c:14:ac:55:04:12:12:4b:
         5f:a2:e4:67:70:b4:5c:09:76:c1:aa:33:b1:3e:1e:42:d6:c9:
         32:41:b1:e7:74:0d:2e:4f:3f:e5:cc:19:36:e8:65:9e:1d:b0:
         13:86:62:50:17:fe:3b:cc:e0:7f:f2:d9:c9:ba:80:14:2b:4f:
         11:e4:42:85:5a:2f:f6:4c:68:f6:ee:f4:63:a5:4f:21:3e:78:
         4e:29:fb:cf:05:02:9f:07:4c:22:17:84:f0:af:f5:45:42:bf:
         de:8b:4a:88:5f:af:eb:7e:87:c4:ad:4f:29:af:09:90:05:3c:
         7b:be:07:f3:e8:68:58:1f:7f:e7:c4:e9:61:d0:60:ea:9b:98:
         87:e0:79:5d:d0:79:b2:74:7b:c0:f0:61:f1:b8:4b:7e:a5:0b:
         d0:f0:8e:8b:a6:14:30:de:06:3c:6c:58:55:ee:ed:60:75:f1:
         f9:ab:76:56:b5:e6:d5:11:2b:17:68:a6:1c:55:b0:81:31:c1:
         4a:86:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----