Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2A7D548E6C1F29C485254821C373BB1B727D7E5.cer
File:                     E2A7D548E6C1F29C485254821C373BB1B727D7E5.cer (raw, json)
Hash identifier:          QszHDZXy2sxZAgiIKCnLIWk4OXsAGNKWE2skYaVfMYc=
Subject key identifier:   E2:A7:D5:48:E6:C1:F2:9C:48:52:54:82:1C:37:3B:B1:B7:27:D7:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74AE08406D8DB0894441EF78E4E0E68A4635EFBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/E2A7D548E6C1F29C485254821C373BB1B727D7E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 20:48:49 +0000
Certificate not after:    Thu 09 Nov 2023 20:53:49 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ae:08:40:6d:8d:b0:89:44:41:ef:78:e4:e0:e6:8a:46:35:ef:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 20:48:49 2022 GMT
            Not After : Nov  9 20:53:49 2023 GMT
        Subject: CN=E2A7D548E6C1F29C485254821C373BB1B727D7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:7a:9e:ed:ec:7e:77:2d:3e:4f:12:f1:31:
                    53:2e:53:49:67:d5:cb:a6:cd:3c:c4:4a:13:81:80:
                    57:17:44:01:50:4b:66:2f:86:ff:d7:3b:56:58:77:
                    4b:5f:75:de:f0:92:85:9f:01:8d:0b:f5:ef:b6:71:
                    93:32:a0:8e:c3:1a:d9:71:5c:ac:c0:e9:6a:d5:7c:
                    09:86:06:56:16:7b:99:6e:d4:b5:c5:3d:2b:d5:02:
                    29:fe:5f:c9:82:98:6d:f7:23:3e:51:f7:2f:7d:d7:
                    46:d8:f6:82:bb:ce:42:a5:61:dd:e5:86:05:68:0e:
                    55:3d:50:da:09:b8:64:93:85:b0:a8:a7:ea:7f:a6:
                    f4:9f:c4:7b:6b:dd:60:a9:7f:df:e1:8d:f5:aa:5f:
                    f6:e1:46:b2:51:50:5f:fa:23:06:9e:35:c9:b1:5a:
                    09:ad:e7:1b:10:01:84:41:da:37:80:7a:37:d9:2a:
                    d6:e4:da:28:60:1e:10:75:7e:dd:3c:c0:af:10:63:
                    6f:09:ad:13:58:17:72:3c:46:99:fb:8e:48:ca:81:
                    a0:66:ac:04:3a:c2:f5:e1:eb:21:85:f6:23:67:1f:
                    cb:a8:96:0d:80:0d:fc:af:5d:3f:7d:a8:4a:eb:1a:
                    dc:0c:a4:92:d1:23:6a:aa:43:6f:62:97:29:ce:0b:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:A7:D5:48:E6:C1:F2:9C:48:52:54:82:1C:37:3B:B1:B7:27:D7:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/E2A7D548E6C1F29C485254821C373BB1B727D7E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         71:f3:99:5f:72:63:19:75:3b:bd:26:52:9c:8a:6c:c6:fe:98:
         17:dd:d8:cd:3d:20:3e:8d:2f:ec:67:6a:c5:21:50:44:08:97:
         90:12:e4:35:a7:8e:50:f8:8a:90:1c:5c:63:d6:2a:0e:96:5b:
         f7:ea:a4:a0:15:cb:2a:14:18:00:9f:89:70:c7:dc:5d:90:a9:
         aa:2d:28:5c:32:f4:bf:e1:a1:0f:e7:73:42:c5:fa:5d:44:e8:
         5c:b4:a7:54:be:97:dd:ab:e1:81:a5:83:cd:59:76:b3:89:ec:
         b7:0e:ee:f5:7d:0b:f9:3e:3d:75:15:10:5d:3f:32:f0:91:53:
         be:3c:ab:38:c7:d6:8a:e8:3a:35:e0:61:82:6e:93:ff:60:50:
         c7:28:44:7d:5a:77:3d:c0:50:31:57:e1:28:4b:fd:57:01:d1:
         72:84:83:1a:d0:71:d6:2c:95:a0:02:53:25:32:e9:65:3c:b6:
         e7:43:e5:fe:36:7c:a6:21:dc:20:0f:01:31:e2:23:e7:18:fa:
         ca:95:84:28:ea:fe:86:58:13:6f:3d:ab:0f:de:c0:49:26:a4:
         a5:32:e8:60:2b:12:53:34:e9:59:13:4b:f8:de:4f:ac:37:89:
         f0:da:b6:b3:8f:da:53:42:8c:09:d2:6a:18:1a:92:cf:88:24:
         75:fb:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----