Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/66522AB472ED296819892FF8C573D4078591FB5F.cer
File:                     66522AB472ED296819892FF8C573D4078591FB5F.cer (raw, json)
Hash identifier:          NDxbRBuArmVxKg2qyfxFguS6IHejnbCjx3vOzU7yeow=
Subject key identifier:   66:52:2A:B4:72:ED:29:68:19:89:2F:F8:C5:73:D4:07:85:91:FB:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7193002F24F8871746EBBEFA9E4E4BA389EED12A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/66522AB472ED296819892FF8C573D4078591FB5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jun 2022 18:14:03 +0000
Certificate not after:    Thu 22 Jun 2023 18:19:03 +0000
Subordinate resources:    AS: 61609
                          IP: 2804:87bc::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:93:00:2f:24:f8:87:17:46:eb:be:fa:9e:4e:4b:a3:89:ee:d1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 18:14:03 2022 GMT
            Not After : Jun 22 18:19:03 2023 GMT
        Subject: CN=66522AB472ED296819892FF8C573D4078591FB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:d3:34:10:9a:3f:37:93:46:00:ab:b6:f1:
                    71:d9:4c:6c:ab:99:52:a4:eb:67:e0:98:c1:69:1a:
                    dc:d7:6d:2b:6e:73:ae:07:cd:f2:26:f2:50:de:a1:
                    39:2f:26:3d:fe:31:47:e5:d0:a2:31:08:ce:6c:bf:
                    34:c6:72:fb:40:35:e2:54:aa:b5:25:5b:a1:79:4f:
                    d1:87:a2:0f:92:02:c3:a0:08:0d:c9:09:2d:79:6a:
                    c3:ba:03:00:03:d6:cf:f9:9a:5b:12:57:e5:32:95:
                    aa:06:65:db:1f:5d:f6:f8:06:35:c8:cb:d0:08:91:
                    3f:05:c7:ce:ac:a5:79:0a:2d:8d:38:e9:b5:9d:7b:
                    a1:f3:d4:32:df:16:63:ab:ee:43:0b:17:f0:ae:63:
                    fd:06:c8:f9:60:4f:8a:9b:64:69:1a:f7:0a:4d:c3:
                    33:6f:50:ab:2b:a6:ca:39:5a:0a:cb:e0:05:fc:8c:
                    66:8d:c4:47:61:f7:6f:e3:17:ab:1d:de:ea:18:05:
                    38:49:47:8c:ee:b0:a3:ab:72:28:00:b7:a3:8b:8d:
                    ac:08:76:73:4b:d0:80:ff:bd:10:5c:81:0f:5a:e5:
                    c8:b4:7d:52:24:53:8d:32:fb:ae:7f:5e:3c:c7:4d:
                    8d:85:71:c5:cd:fc:8e:37:ea:10:7e:60:16:a3:45:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                66:52:2A:B4:72:ED:29:68:19:89:2F:F8:C5:73:D4:07:85:91:FB:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/66522AB472ED296819892FF8C573D4078591FB5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61609

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:be:01:84:ba:48:cc:0b:b5:6f:ea:88:7a:e1:24:62:95:
         8d:65:e5:b8:1a:57:b9:cb:e3:35:c7:c3:7d:16:26:93:82:f1:
         50:2b:b5:2c:ae:96:fb:e8:46:73:a0:fa:e6:15:1b:9c:78:57:
         b4:22:ed:51:6c:6f:46:f0:fe:4c:11:8f:19:f7:c0:8a:44:42:
         bc:75:53:a2:c6:3a:7e:17:15:ce:b5:d7:a6:d8:7d:1f:ca:94:
         6a:cc:62:70:be:b3:73:04:33:15:2d:2b:76:be:d0:15:0e:b4:
         ec:83:4d:ae:7d:98:6f:1f:22:27:c6:dc:52:b2:54:76:39:95:
         8a:24:8a:5b:6e:32:93:78:f6:18:f6:a3:87:7e:a9:7e:49:51:
         26:07:51:23:4f:7e:48:08:fc:d4:0e:5b:c5:05:8b:cb:c8:eb:
         60:e9:63:bf:4c:32:66:68:25:91:44:50:7e:27:11:8d:38:ce:
         14:49:ca:c9:d9:ef:30:fa:1a:89:0a:cf:cf:7c:f2:90:d0:b8:
         00:e6:b9:e8:03:7c:41:63:80:3c:32:30:cc:76:48:11:52:80:
         90:fe:34:f3:5c:ae:db:1b:96:f5:58:60:5d:59:90:1d:25:eb:
         6f:03:21:ef:0a:e1:5e:67:54:14:2d:ff:ee:64:c4:69:da:11:
         96:c4:4a:5f
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUcZMALyT4hxdG6776nk5Lo4nu0SowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MjMxODE0MDNaFw0yMzA2MjIxODE5MDNaMDMxMTAvBgNV
BAMTKDY2NTIyQUI0NzJFRDI5NjgxOTg5MkZGOEM1NzNENDA3ODU5MUZCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZytM0EJo/N5NGAKu28XHZTGyr
mVKk62fgmMFpGtzXbStuc64HzfIm8lDeoTkvJj3+MUfl0KIxCM5svzTGcvtANeJU
qrUlW6F5T9GHog+SAsOgCA3JCS15asO6AwAD1s/5mlsSV+UylaoGZdsfXfb4BjXI
y9AIkT8Fx86spXkKLY046bWde6Hz1DLfFmOr7kMLF/CuY/0GyPlgT4qbZGka9wpN
wzNvUKsrpso5WgrL4AX8jGaNxEdh92/jF6sd3uoYBThJR4zusKOrcigAt6OLjawI
dnNL0ID/vRBcgQ9a5ci0fVIkU40y+65/XjzHTY2FccXN/I436hB+YBajRWkVAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmUiq0cu0paBmJ
L/jFc9QHhZH7XzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HQVRTSm9qODRrYlZ2RThBV1BEUG95SnEydUdwb0w2aW5O
OTh5WTNqZmhjRS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HQVRTSm9qODRrYlZ2RThBV1BEUG95SnEydUdwb0w2aW5O
OTh5WTNqZmhjRS8wLzY2NTIyQUI0NzJFRDI5NjgxOTg5MkZGOEM1NzNENDA3ODU5
MUZCNUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEh7wwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAPCpMA0GCSqGSIb3DQEBCwUAA4IBAQAEPr4BhLpIzAu1
b+qIeuEkYpWNZeW4Gle5y+M1x8N9FiaTgvFQK7Usrpb76EZzoPrmFRuceFe0Iu1R
bG9G8P5MEY8Z98CKREK8dVOixjp+FxXOtdem2H0fypRqzGJwvrNzBDMVLSt2vtAV
DrTsg02ufZhvHyInxtxSslR2OZWKJIpbbjKTePYY9qOHfql+SVEmB1EjT35ICPzU
DlvFBYvLyOtg6WO/TDJmaCWRRFB+JxGNOM4UScrJ2e8w+hqJCs/PfPKQ0LgA5rno
A3xBY4A8MjDMdkgRUoCQ/jTzXK7bG5b1WGBdWZAdJetvAyHvCuFeZ1QULf/uZMRp
2hGWxEpf
-----END CERTIFICATE-----