Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BEFF6639FC58B1189EDA451C37510D6D3942B33E.cer
File:                     BEFF6639FC58B1189EDA451C37510D6D3942B33E.cer (raw, json)
Hash identifier:          5h+Kzirgspz7rpUNhO13TLB0VsANlRV/wtHpPzLzLts=
Subject key identifier:   BE:FF:66:39:FC:58:B1:18:9E:DA:45:1C:37:51:0D:6D:39:42:B3:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       277AECD161B7E739DB28847BBE2FDC28EB5753A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/BEFF6639FC58B1189EDA451C37510D6D3942B33E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Aug 2022 11:45:33 +0000
Certificate not after:    Tue 08 Aug 2023 11:50:33 +0000
Subordinate resources:    AS: 268355
                          IP: 45.239.72.0/22
                          IP: 2804:4fe0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7a:ec:d1:61:b7:e7:39:db:28:84:7b:be:2f:dc:28:eb:57:53:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 11:45:33 2022 GMT
            Not After : Aug  8 11:50:33 2023 GMT
        Subject: CN=BEFF6639FC58B1189EDA451C37510D6D3942B33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:4a:b1:d7:f1:3e:c5:f0:73:c0:f2:c3:fc:
                    cc:6e:9d:94:31:23:cd:0d:5d:66:f9:2e:de:82:3e:
                    fd:10:c9:6a:1a:e5:66:0b:6c:81:ca:df:77:47:e7:
                    2b:5d:79:41:e9:a4:5e:e1:93:cd:ea:80:c8:7f:5e:
                    ab:49:fb:3f:68:a8:09:31:25:f3:5c:53:aa:76:1d:
                    df:22:9f:c8:cf:97:3f:1e:e3:b4:15:c5:e0:ba:a5:
                    ea:8b:bc:a0:41:e7:85:45:a3:8c:9d:0f:27:da:51:
                    01:50:8a:8f:c8:82:d2:e6:47:40:0d:1d:44:fd:b1:
                    c9:69:8c:93:98:85:e2:b5:6a:29:ef:61:ac:e9:9f:
                    be:5b:ac:ab:bb:81:d1:4c:95:15:55:79:58:83:56:
                    d1:ee:4d:cf:b6:cf:d0:37:8b:dc:2d:ad:7b:51:99:
                    d2:55:a4:8d:c5:55:70:fc:23:30:20:9b:4c:1b:89:
                    e1:62:d0:95:24:3a:59:84:3c:13:60:6c:d4:98:7a:
                    3a:0a:f9:1a:37:f1:de:fb:dd:d3:9a:5c:fa:45:e4:
                    72:c1:77:5b:68:96:2f:31:7f:c1:56:51:52:04:84:
                    c4:e3:0f:2b:c3:58:3d:ee:97:dd:eb:50:79:93:4e:
                    de:1d:7a:57:f9:f5:7e:17:2a:5c:ab:56:47:01:b0:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:FF:66:39:FC:58:B1:18:9E:DA:45:1C:37:51:0D:6D:39:42:B3:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/BEFF6639FC58B1189EDA451C37510D6D3942B33E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.72.0/22
                IPv6:
                  2804:4fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268355

    Signature Algorithm: sha256WithRSAEncryption
         90:58:06:ef:27:3c:57:41:ec:64:22:a4:4b:a1:bb:a2:a4:c2:
         a4:04:0a:69:b2:aa:9b:79:85:d4:8c:2a:d7:b5:de:a6:1d:9c:
         4c:3c:9b:a2:53:e9:be:e4:9d:78:f9:a4:83:37:15:a5:f9:b6:
         e3:83:6a:ae:27:52:c6:6c:91:50:31:c0:05:a3:d6:fb:ec:45:
         22:f2:c4:38:15:dd:40:14:f2:bb:8f:34:85:17:2a:bc:5b:9e:
         48:0e:74:d1:c7:0d:1c:61:32:f5:77:46:88:5e:26:a8:57:85:
         1e:6e:94:55:4c:f8:16:41:fc:c3:a0:85:78:b9:58:4c:6a:bc:
         4b:3a:fd:f8:d7:ee:26:5b:f6:cf:58:17:eb:5e:16:f4:4b:c0:
         52:c6:21:b2:d0:f5:29:66:3b:45:a8:ce:68:33:74:a9:d8:2b:
         b0:fe:56:17:a8:62:d8:3e:00:77:ba:ab:8f:15:66:9f:0c:db:
         02:84:d0:b2:28:5c:cf:37:42:3c:28:69:3a:5a:3c:90:fa:82:
         4c:0c:6d:d7:99:b9:81:4f:f0:51:ef:51:42:21:2e:d1:61:b9:
         d6:e5:d4:5f:4f:05:07:2d:95:a6:b6:66:c4:ab:5d:08:c3:16:
         4d:35:cd:6b:86:a1:5a:c5:ae:9f:49:06:a1:f0:31:23:b5:16:
         71:bb:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----