Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E02448058F35572EB96BE33E4D064E6FCB08D436.cer
File:                     E02448058F35572EB96BE33E4D064E6FCB08D436.cer (raw, json)
Hash identifier:          GckHau/ZIehwqko9MxS0bvi5sSo+QtpFwDL0/P30dcA=
Subject key identifier:   E0:24:48:05:8F:35:57:2E:B9:6B:E3:3E:4D:06:4E:6F:CB:08:D4:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FEE0523F3D4582C29E927336431FD6FD18D27A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/E02448058F35572EB96BE33E4D064E6FCB08D436.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jun 2022 12:05:40 +0000
Certificate not after:    Fri 02 Jun 2023 12:10:40 +0000
Subordinate resources:    AS: 267668
                          IP: 45.224.72.0/22
                          IP: 2804:4508::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ee:05:23:f3:d4:58:2c:29:e9:27:33:64:31:fd:6f:d1:8d:27:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  3 12:05:40 2022 GMT
            Not After : Jun  2 12:10:40 2023 GMT
        Subject: CN=E02448058F35572EB96BE33E4D064E6FCB08D436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:96:5c:88:45:1a:d9:a0:7a:16:af:a6:b3:
                    76:11:86:83:53:e5:29:0d:53:71:5d:fc:6f:6a:22:
                    b5:c7:9f:cc:78:5f:8b:00:53:ec:79:3b:4d:25:07:
                    4b:e9:a0:89:e8:41:5b:2c:c4:9e:7a:cd:30:4e:bc:
                    21:05:80:ff:3c:2a:12:bf:b4:00:d7:79:2c:3f:b7:
                    3d:1f:1d:ea:9c:3e:37:c0:9c:ad:1b:ca:f8:c6:56:
                    d9:87:83:d1:0f:d4:1b:c5:e9:1c:8b:97:02:07:ff:
                    90:48:c4:f8:74:d7:1c:9b:22:41:8b:e6:01:27:a2:
                    0a:6b:4b:f7:69:63:f0:02:6a:dd:3a:83:e1:02:ef:
                    c3:50:7e:b9:31:b8:e2:ef:81:61:8d:c7:f6:98:37:
                    53:83:6f:cb:e6:fe:73:76:20:9f:bf:b1:c3:ab:9c:
                    c7:25:d5:7d:85:4f:ae:8c:9f:29:4e:98:95:63:b4:
                    a0:fa:5f:ff:87:53:c2:0f:b4:ee:21:6a:31:51:5e:
                    ca:ad:9a:41:ba:2d:33:da:0f:27:e6:ed:99:ce:5c:
                    e2:63:97:d4:60:48:cb:fd:97:56:ab:f8:c0:49:fd:
                    8a:5f:32:16:1f:d4:d9:d8:8a:89:70:68:df:17:bb:
                    89:3d:8e:90:19:ec:75:f6:41:f2:9b:99:d5:68:f3:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:24:48:05:8F:35:57:2E:B9:6B:E3:3E:4D:06:4E:6F:CB:08:D4:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/E02448058F35572EB96BE33E4D064E6FCB08D436.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22
                IPv6:
                  2804:4508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267668

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:2a:ae:f8:5c:87:57:19:f9:a0:29:39:a8:d8:50:07:20:
         1c:9f:7e:8f:73:05:b9:fa:f4:c8:98:5c:3c:2a:93:8a:6d:f7:
         f7:80:68:c4:c0:fb:d5:5f:37:59:36:a5:60:c0:1c:db:cd:c2:
         4f:67:eb:fe:de:0f:16:91:20:29:55:9b:15:93:1e:7f:56:39:
         c1:7b:2a:dd:5d:83:99:92:6b:65:e6:8c:7d:d0:d3:c1:34:9b:
         bb:56:fd:09:f1:b2:1b:f3:5c:b6:2c:b7:45:08:7a:1b:77:4c:
         45:75:6d:00:f2:53:04:ad:b4:e3:7b:c1:74:09:75:5d:b7:61:
         3d:a7:d1:6a:36:6f:98:55:c6:1e:5f:d7:8c:8b:fb:d2:7e:33:
         32:eb:82:56:69:0c:c6:d5:a2:2e:b6:fb:46:3a:6b:22:b9:13:
         12:7d:13:33:89:4a:7a:aa:12:b1:42:6c:94:a6:2f:3c:d1:e0:
         7c:9d:22:c4:93:f3:e4:9b:72:74:d0:15:f3:1f:fa:a4:f4:ef:
         aa:64:ba:07:50:c4:e9:c8:3d:0b:c3:3c:30:2c:c1:27:23:5c:
         7c:74:ab:5f:e2:a8:7e:09:6d:0d:78:9a:14:2d:d1:42:58:ed:
         2d:c3:3c:2d:a3:e1:ff:ef:50:d6:48:92:c0:e7:b3:cf:95:7d:
         df:46:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----