Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91BD7202FAB43417486F1EFE400916E4F814FC10.cer
File:                     91BD7202FAB43417486F1EFE400916E4F814FC10.cer (raw, json)
Hash identifier:          T7MDNpbsTXjSxUfLlikS18RLXp7P7qhLHc+tQM17n7w=
Subject key identifier:   91:BD:72:02:FA:B4:34:17:48:6F:1E:FE:40:09:16:E4:F8:14:FC:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       017D17D1A87755A06CDE495A0DB369428E59D314
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91BD7202FAB43417486F1EFE400916E4F814FC10.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 21:38:24 +0000
Certificate not after:    Fri 15 Dec 2023 21:43:24 +0000
Subordinate resources:    AS: 269411
                          IP: 45.186.52.0/22
                          IP: 2804:642c::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:17:d1:a8:77:55:a0:6c:de:49:5a:0d:b3:69:42:8e:59:d3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 21:38:24 2022 GMT
            Not After : Dec 15 21:43:24 2023 GMT
        Subject: CN=91BD7202FAB43417486F1EFE400916E4F814FC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:80:41:bb:60:ee:07:d2:67:98:e8:f9:8d:
                    09:81:92:83:67:eb:4e:95:0a:a4:f5:73:af:14:47:
                    72:e1:15:7f:bf:59:1f:02:70:56:b9:e7:b1:a0:ef:
                    21:da:ee:29:01:3e:b8:a9:0a:df:55:2c:fa:c6:d3:
                    40:7a:cc:6e:ba:d4:b6:43:e5:49:55:bb:75:3a:24:
                    10:18:ed:f8:cd:94:79:26:01:82:f1:46:20:10:cd:
                    7e:2a:74:6a:33:d8:17:26:ba:40:50:43:dc:35:02:
                    ca:49:25:c1:35:7f:57:d6:3c:74:e2:d4:3c:38:aa:
                    6d:ba:ea:1e:74:1b:93:0d:67:c8:c4:b9:9b:df:25:
                    e7:04:f8:06:d5:3f:23:aa:9b:d4:4d:93:ba:00:82:
                    47:f5:e1:8f:24:93:60:c9:ae:22:49:b7:91:16:c5:
                    53:e2:52:65:f6:e9:69:50:3e:af:9e:be:b1:3b:d2:
                    26:c8:e2:03:15:1f:17:7b:e4:f9:6c:78:da:81:ff:
                    0b:f0:c3:9c:ec:84:6c:e7:cb:e4:6e:54:68:7f:4f:
                    b3:79:32:5d:24:e2:bb:03:a6:50:53:96:28:f3:47:
                    15:ff:5a:34:9d:6e:d5:b1:0e:66:7a:22:38:75:b7:
                    21:6d:1d:a5:57:a1:9f:cb:ab:44:6e:15:7b:57:f9:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:BD:72:02:FA:B4:34:17:48:6F:1E:FE:40:09:16:E4:F8:14:FC:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91BD7202FAB43417486F1EFE400916E4F814FC10.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/22
                IPv6:
                  2804:642c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269411

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:cd:8e:c0:e5:03:7f:d0:52:70:18:7e:eb:cb:76:c6:40:
         0d:38:1d:d0:68:72:8e:12:4d:af:0b:cb:d5:5c:3c:db:61:da:
         31:db:81:fd:ed:a8:cc:40:bd:b1:ac:82:c2:3a:bb:9a:f3:78:
         c3:43:73:92:86:f7:2c:3d:56:d3:c4:ea:29:12:ae:82:f4:00:
         9d:0b:8c:29:3b:69:b3:d0:4b:24:7b:ed:25:d5:5b:84:0b:53:
         0d:d1:ed:61:db:9f:99:62:c3:d3:44:c4:3a:4e:8a:15:f3:d1:
         ce:89:e9:3b:a7:69:82:48:79:ff:01:23:6d:97:eb:40:07:b3:
         21:41:37:06:cc:7b:ab:61:1b:0a:03:2a:4b:76:65:a3:9f:64:
         e2:a8:c8:06:e2:ee:6e:41:29:40:0d:09:8a:b6:e3:26:12:f1:
         1f:e3:b3:1f:46:14:75:d1:4a:32:89:84:40:dd:35:ac:bb:a5:
         b8:8b:47:6e:29:61:23:77:da:c6:73:5a:c3:cb:07:01:78:07:
         70:09:b7:d2:f0:84:d0:dc:c4:08:c0:c6:e5:e8:e4:6b:92:db:
         0f:c9:05:99:d4:b9:8d:1a:11:ec:eb:9f:d1:3e:19:20:81:85:
         3c:2d:22:7d:8b:36:f1:32:2a:14:41:50:fe:5c:a2:4e:4b:d6:
         61:97:ea:6f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUAX0X0ah3VaBs3klaDbNpQo5Z0xQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTYyMTM4MjRaFw0yMzEyMTUyMTQzMjRaMDMxMTAvBgNV
BAMTKDkxQkQ3MjAyRkFCNDM0MTc0ODZGMUVGRTQwMDkxNkU0RjgxNEZDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynIBBu2DuB9JnmOj5jQmBkoNn
606VCqT1c68UR3LhFX+/WR8CcFa557Gg7yHa7ikBPripCt9VLPrG00B6zG661LZD
5UlVu3U6JBAY7fjNlHkmAYLxRiAQzX4qdGoz2BcmukBQQ9w1AspJJcE1f1fWPHTi
1Dw4qm266h50G5MNZ8jEuZvfJecE+AbVPyOqm9RNk7oAgkf14Y8kk2DJriJJt5EW
xVPiUmX26WlQPq+evrE70ibI4gMVHxd75PlseNqB/wvww5zshGzny+RuVGh/T7N5
Ml0k4rsDplBTlijzRxX/WjSdbtWxDmZ6Ijh1tyFtHaVXoZ/Lq0RuFXtX+fHHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRvXIC+rQ0F0hv
Hv5ACRbk+BT8EDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DUWZacnQ5R1NvUzJKdEJqdTRSaVFIMXFCR2s4R1JzRHlT
RDVyNUwyOFF4RS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DUWZacnQ5R1NvUzJKdEJqdTRSaVFIMXFCR2s4R1JzRHlT
RDVyNUwyOFF4RS8wLzkxQkQ3MjAyRkFCNDM0MTc0ODZGMUVGRTQwMDkxNkU0Rjgx
NEZDMTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi26NDANBAIAAjAHAwUA
KARkLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHGMwDQYJKoZIhvcNAQELBQAD
ggEBADFvzY7A5QN/0FJwGH7ry3bGQA04HdBoco4STa8Ly9VcPNth2jHbgf3tqMxA
vbGsgsI6u5rzeMNDc5KG9yw9VtPE6ikSroL0AJ0LjCk7abPQSyR77SXVW4QLUw3R
7WHbn5liw9NExDpOihXz0c6J6TunaYJIef8BI22X60AHsyFBNwbMe6thGwoDKkt2
ZaOfZOKoyAbi7m5BKUANCYq24yYS8R/jsx9GFHXRSjKJhEDdNay7pbiLR24pYSN3
2sZzWsPLBwF4B3AJt9LwhNDcxAjAxuXo5GuS2w/JBZnUuY0aEezrn9E+GSCBhTwt
In2LNvEyKhRBUP5cok5L1mGX6m8=
-----END CERTIFICATE-----