Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.cer
File:                     96F1D02F451D1A1561711A9E6C09A2168371C08F.cer (raw, json)
Hash identifier:          kllccL2+sPFVcJoP6yD2Kb40a3ZMQzBoTLU8MzycOT0=
Subject key identifier:   96:F1:D0:2F:45:1D:1A:15:61:71:1A:9E:6C:09:A2:16:83:71:C0:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3832279DAB129857456433F1EF56BE89842AA545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Oct 2022 13:33:36 +0000
Certificate not after:    Mon 02 Oct 2023 13:38:36 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:32:27:9d:ab:12:98:57:45:64:33:f1:ef:56:be:89:84:2a:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 13:33:36 2022 GMT
            Not After : Oct  2 13:38:36 2023 GMT
        Subject: CN=96F1D02F451D1A1561711A9E6C09A2168371C08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:1a:7b:ba:09:90:15:2b:22:6c:1e:80:2e:
                    c0:b8:38:8f:e5:32:6e:b1:d0:61:e5:dd:8e:a6:f9:
                    5a:e4:ba:e2:c2:a2:11:e3:88:06:b3:79:ef:df:fd:
                    77:44:04:4d:5e:46:e7:c8:a9:ae:55:5e:98:bd:c8:
                    39:06:ad:1e:66:a0:7b:72:f8:c7:f6:b0:15:ab:20:
                    9a:ee:3c:4c:f0:ad:19:66:b0:f6:1a:6b:df:e0:a0:
                    15:28:a0:79:5a:d3:84:ea:77:f9:12:45:e6:ec:78:
                    19:be:55:36:80:af:5a:05:6d:e3:fd:28:ec:a1:22:
                    19:65:d3:54:5e:6c:ab:6e:0e:88:e3:d6:3b:de:bc:
                    94:67:95:34:2e:64:fa:6d:ef:79:fd:91:c4:b3:ec:
                    e3:22:71:91:90:7b:f5:c1:11:b6:22:cf:7c:d7:7b:
                    c3:59:a4:61:cb:85:1c:3e:95:0e:e6:64:0e:b1:69:
                    1d:b7:43:d3:b5:58:23:8c:f7:65:39:8a:8d:45:fa:
                    41:90:cb:6e:c1:bc:ef:e7:9b:a1:44:11:41:0c:b9:
                    c2:53:75:fe:7f:49:9b:8f:bb:15:e0:d8:d0:09:19:
                    ae:64:55:77:98:39:23:89:fc:e4:86:13:b9:74:29:
                    98:90:d5:8f:14:5f:44:07:0d:0e:91:e7:0e:c9:23:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:F1:D0:2F:45:1D:1A:15:61:71:1A:9E:6C:09:A2:16:83:71:C0:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         13:72:f6:dc:47:8f:20:81:1f:06:a7:93:73:94:25:21:dc:f0:
         a3:7f:4b:31:a0:cb:26:8e:4d:99:15:3f:06:9d:bf:16:fb:88:
         9a:75:b8:cb:5a:1a:fc:f1:fd:5a:00:f7:62:ac:bc:e4:b6:67:
         d2:a6:b6:37:d4:ca:85:d8:f5:28:eb:2c:5f:8f:45:00:e8:ea:
         76:ca:7a:1b:15:58:89:02:01:52:04:89:be:ca:9c:f5:92:35:
         d8:5c:48:dc:af:da:c2:8d:78:5d:63:e3:91:53:4a:a6:ed:c4:
         3b:31:5f:d6:c9:87:8b:83:34:aa:55:54:37:ab:f0:bf:0f:83:
         a5:24:9d:bd:e3:0e:9e:e1:59:8b:7f:7c:ed:f3:d9:61:1b:92:
         46:9f:24:5b:13:9d:48:1f:ae:44:3b:07:f7:06:2c:f3:41:e4:
         41:29:5c:0b:96:87:42:26:ec:99:09:66:89:90:43:02:99:20:
         51:b7:53:92:a2:bd:14:a0:a3:24:75:55:6f:9e:41:9a:29:8e:
         24:42:50:a8:6b:20:ea:56:62:5f:b1:93:a8:7c:51:e6:19:2a:
         c5:f4:a0:96:03:7c:56:5c:69:0c:5c:ca:81:9f:79:e6:a6:aa:
         69:71:15:68:a2:c8:a4:50:fd:bb:36:2d:95:24:1c:7f:2f:ab:
         1e:67:5b:4d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUODInnasSmFdFZDPx71a+iYQqpUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMDMxMzMzMzZaFw0yMzEwMDIxMzM4MzZaMDMxMTAvBgNV
BAMTKDk2RjFEMDJGNDUxRDFBMTU2MTcxMUE5RTZDMDlBMjE2ODM3MUMwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwxp7ugmQFSsibB6ALsC4OI/l
Mm6x0GHl3Y6m+VrkuuLCohHjiAazee/f/XdEBE1eRufIqa5VXpi9yDkGrR5moHty
+Mf2sBWrIJruPEzwrRlmsPYaa9/goBUooHla04Tqd/kSRebseBm+VTaAr1oFbeP9
KOyhIhll01RebKtuDojj1jvevJRnlTQuZPpt73n9kcSz7OMicZGQe/XBEbYiz3zX
e8NZpGHLhRw+lQ7mZA6xaR23Q9O1WCOM92U5io1F+kGQy27BvO/nm6FEEUEMucJT
df5/SZuPuxXg2NAJGa5kVXeYOSOJ/OSGE7l0KZiQ1Y8UX0QHDQ6R5w7JIwFxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSW8dAvRR0aFWFx
Gp5sCaIWg3HAjzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IcWZUdEt3ZDFZSE1IVXBGNXcyOEJzaThiZ0NEUHN5S0hO
UGI5eTE2SFFxZC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IcWZUdEt3ZDFZSE1IVXBGNXcyOEJzaThiZ0NEUHN5S0hO
UGI5eTE2SFFxZC8wLzk2RjFEMDJGNDUxRDFBMTU2MTcxMUE5RTZDMDlBMjE2ODM3
MUMwOEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2ygDANBAIAAjAHAwUA
KAReUDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGuEwDQYJKoZIhvcNAQELBQAD
ggEBABNy9txHjyCBHwank3OUJSHc8KN/SzGgyyaOTZkVPwadvxb7iJp1uMtaGvzx
/VoA92KsvOS2Z9KmtjfUyoXY9SjrLF+PRQDo6nbKehsVWIkCAVIEib7KnPWSNdhc
SNyv2sKNeF1j45FTSqbtxDsxX9bJh4uDNKpVVDer8L8Pg6Uknb3jDp7hWYt/fO3z
2WEbkkafJFsTnUgfrkQ7B/cGLPNB5EEpXAuWh0Im7JkJZomQQwKZIFG3U5KivRSg
oyR1VW+eQZopjiRCUKhrIOpWYl+xk6h8UeYZKsX0oJYDfFZcaQxcyoGfeeamqmlx
FWiiyKRQ/bs2LZUkHH8vqx5nW00=
-----END CERTIFICATE-----