Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A1AD91D4F3E57356A8461A3E03C671D4E5B04F1.cer
File:                     8A1AD91D4F3E57356A8461A3E03C671D4E5B04F1.cer (raw, json)
Hash identifier:          uAXMEnxJmCt79RtfGv8PppzLDOQ7+RoRjvhKbNReimQ=
Subject key identifier:   8A:1A:D9:1D:4F:3E:57:35:6A:84:61:A3:E0:3C:67:1D:4E:5B:04:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47882A12350F21A93F576634580EC47D0E3FE26D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/8A1AD91D4F3E57356A8461A3E03C671D4E5B04F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Dec 2022 12:12:02 +0000
Certificate not after:    Thu 14 Dec 2023 12:17:02 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:88:2a:12:35:0f:21:a9:3f:57:66:34:58:0e:c4:7d:0e:3f:e2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 12:12:02 2022 GMT
            Not After : Dec 14 12:17:02 2023 GMT
        Subject: CN=8A1AD91D4F3E57356A8461A3E03C671D4E5B04F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:7b:df:5f:92:4e:58:f6:99:b8:fb:c3:89:
                    37:5a:ac:64:b5:2f:a6:bf:12:a2:2e:46:25:de:91:
                    71:d4:6f:57:d2:cd:99:ab:0e:07:22:6b:32:3f:40:
                    3c:67:8c:6d:e7:77:92:a6:72:30:55:a7:ff:02:15:
                    40:e9:cb:bd:55:a5:50:06:c4:3b:60:be:ed:8e:05:
                    4b:28:6b:56:34:e4:0c:44:b4:d1:c3:22:a9:79:69:
                    8c:f6:18:dd:a7:78:14:20:12:55:4b:b5:6e:c7:1b:
                    ba:78:f2:b2:ae:f0:64:9f:3b:e1:5c:b5:ad:ae:79:
                    4b:47:03:c0:f3:57:06:58:2d:e7:6c:8b:ce:0f:92:
                    5c:f5:26:fe:e7:f7:84:b1:6e:a3:16:ca:44:27:df:
                    c6:53:5c:03:74:30:1b:f6:f1:f5:21:ab:ab:34:58:
                    bc:d2:26:13:2d:fe:70:be:65:fc:56:15:8d:f2:b7:
                    f4:3e:10:52:5f:07:08:fc:6c:19:69:da:13:32:5e:
                    7b:7e:d9:ed:2c:40:4b:d2:c8:e6:5a:5a:59:93:97:
                    c3:87:42:ec:43:00:85:0a:19:45:cf:8b:29:52:77:
                    56:6c:22:03:fd:ed:12:6b:08:95:e8:5e:f0:87:40:
                    c6:8b:45:03:aa:9e:94:78:68:5e:49:f5:52:03:c4:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:1A:D9:1D:4F:3E:57:35:6A:84:61:A3:E0:3C:67:1D:4E:5B:04:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/8A1AD91D4F3E57356A8461A3E03C671D4E5B04F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:a8:15:cf:46:bd:66:40:c3:f6:1c:ea:0d:5e:90:1b:17:
         5b:b0:3b:33:50:1f:35:57:a5:3a:bc:86:2a:8b:7a:d7:b8:81:
         cc:a9:11:b4:9c:bd:85:b7:7c:ed:13:73:77:b1:c0:07:07:fc:
         e7:a3:fe:59:39:64:93:e5:de:ee:c8:44:85:aa:b1:46:d0:bc:
         ed:78:95:5c:f6:96:92:7f:4a:c4:c1:89:06:e9:69:c7:3e:60:
         d2:90:1c:db:78:d5:ae:09:8a:5e:56:98:54:e6:53:f2:63:73:
         a8:55:d1:43:fe:c4:b8:71:45:ef:59:c8:29:1c:b4:5e:3f:47:
         ce:46:a4:e0:0c:fa:ed:19:d5:0a:56:05:57:ca:57:01:f3:77:
         a2:2c:79:50:39:9e:86:0a:4f:9a:82:a5:64:d7:22:f2:34:83:
         c8:67:27:9f:37:c3:63:fe:69:c3:c7:0c:49:e6:30:17:ad:a1:
         8e:6e:50:4d:f2:52:fb:f9:c5:ea:b1:08:06:28:a7:c8:25:be:
         8d:8d:8f:3a:e1:ee:13:ad:25:96:7f:81:62:fa:4f:ec:3a:36:
         cc:77:ec:d7:10:6e:1d:9d:d1:cf:30:5e:b4:18:49:f4:c2:1a:
         b1:03:0f:69:22:d0:2d:e0:43:8d:c3:ee:a0:2e:8a:92:13:97:
         a2:52:5b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----