Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/782AF16B7C0646CAD9272809776CC25AF97DD15A.cer
File:                     782AF16B7C0646CAD9272809776CC25AF97DD15A.cer (raw, json)
Hash identifier:          QQSRCOmyAUQ8UmljnZugBzTbMrCsHlXeg9sHcOmosaM=
Subject key identifier:   78:2A:F1:6B:7C:06:46:CA:D9:27:28:09:77:6C:C2:5A:F9:7D:D1:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44E72FEF0F0AF0013A8DD9EE27C4FBCD29026378
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/782AF16B7C0646CAD9272809776CC25AF97DD15A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Jul 2022 05:55:21 +0000
Certificate not after:    Mon 03 Jul 2023 06:00:21 +0000
Subordinate resources:    AS: 265302
                          IP: 168.121.72.0/22
                          IP: 2804:2dc4::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e7:2f:ef:0f:0a:f0:01:3a:8d:d9:ee:27:c4:fb:cd:29:02:63:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 05:55:21 2022 GMT
            Not After : Jul  3 06:00:21 2023 GMT
        Subject: CN=782AF16B7C0646CAD9272809776CC25AF97DD15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:b2:5f:9a:b4:f5:c2:d6:88:37:55:d7:62:
                    3b:b9:f5:88:a1:d5:4b:f1:fc:35:95:b9:59:d2:02:
                    71:dd:30:69:26:7d:65:bc:52:57:cf:d5:c0:7d:c8:
                    43:9d:36:18:58:a3:47:7e:02:ce:79:f6:aa:38:e2:
                    03:63:ef:e5:9c:1a:61:c2:50:e7:89:f3:52:ab:35:
                    16:c1:3b:f1:81:3d:e6:a0:6e:a2:70:e4:ba:05:7f:
                    1a:00:09:97:8d:3f:d0:68:21:fc:09:9e:bb:3e:bc:
                    96:1d:2b:45:d0:00:dd:08:42:f4:67:38:f7:e7:c7:
                    9d:2e:83:63:06:07:d9:13:96:08:20:d5:bd:27:9d:
                    88:d6:d2:fa:8a:b9:af:a3:8b:9a:a0:b7:0e:2d:81:
                    7f:f6:ad:ba:93:d1:46:48:e6:05:76:1b:11:73:22:
                    d5:66:ca:76:a6:f9:18:f2:f6:ad:e2:04:8b:53:d5:
                    c7:23:8b:cf:7e:e8:ce:bb:07:9a:87:81:8f:00:80:
                    e7:0c:c8:8c:1f:c5:d1:e7:b7:7e:a5:62:a5:aa:41:
                    94:cd:10:c9:a5:8e:83:1c:d1:78:b2:e1:74:d4:0a:
                    a5:d3:5e:c2:78:c3:d0:a3:a8:d0:e3:c6:81:cd:bd:
                    6b:bd:31:44:58:ab:eb:89:fa:ae:37:3d:cd:ad:4c:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:2A:F1:6B:7C:06:46:CA:D9:27:28:09:77:6C:C2:5A:F9:7D:D1:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/782AF16B7C0646CAD9272809776CC25AF97DD15A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.72.0/22
                IPv6:
                  2804:2dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265302

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:e7:9a:75:c9:81:d0:37:79:de:25:10:89:1b:e3:19:1e:
         59:75:df:e0:81:ac:e1:6b:9d:10:0a:30:ea:17:6d:1d:3e:71:
         c1:68:1f:65:17:0d:0d:25:5b:61:b6:04:b9:e9:6c:e7:ac:3b:
         d7:df:50:0e:d3:a8:43:e4:4a:9a:ac:87:5a:10:5d:4f:6b:a8:
         b8:b3:b1:2f:5f:d5:78:78:98:90:88:48:71:2f:8d:c5:2f:0a:
         81:d3:7b:09:44:a4:ae:aa:fb:90:35:7c:8f:28:7e:f6:d2:a7:
         81:2d:3c:9f:ce:1e:4b:3d:b2:b5:a3:b1:7d:1c:86:76:47:db:
         4e:05:1c:d8:fe:dc:cf:30:2f:b3:14:8c:a5:1f:1c:6f:8c:ef:
         95:0d:50:cf:43:1f:40:02:87:ac:09:a4:6b:f4:37:ed:7d:88:
         d5:b4:db:42:ad:07:83:af:19:f1:8e:b1:4d:71:fa:22:81:dd:
         08:10:b2:8a:a4:d2:85:ef:50:62:41:79:f1:e6:1b:e8:65:e4:
         14:7d:2c:98:92:9b:93:ec:2c:e3:d5:3c:db:20:64:ad:e9:45:
         bb:da:8b:09:9d:e3:63:fb:ac:29:77:54:ec:51:47:98:e6:0d:
         0b:e7:36:fa:f0:61:e9:b1:0d:c3:6a:74:c1:5e:d8:bd:6c:fd:
         95:63:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----