Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
File:                     E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer (raw, json)
Hash identifier:          6SOcVyKlXZLfCF19EYhd+ML/jFfD06S4C7Jzu6ORiHo=
Subject key identifier:   E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AA33C4368860168D9D206A89325551C012DBDA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Feb 2022 19:04:23 +0000
Certificate not after:    Wed 22 Feb 2023 19:09:23 +0000
Subordinate resources:    AS: 264566
                          IP: 138.0.144.0/22
                          IP: 2804:21ac::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:3c:43:68:86:01:68:d9:d2:06:a8:93:25:55:1c:01:2d:bd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 19:04:23 2022 GMT
            Not After : Feb 22 19:09:23 2023 GMT
        Subject: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:54:5b:45:3d:31:39:3a:18:cb:c4:bc:1e:
                    34:c8:ab:04:8a:d1:3a:96:78:63:b2:79:05:4a:1b:
                    e6:af:82:ea:9d:23:3d:95:4b:0a:ba:da:a6:24:bc:
                    e8:3c:b5:37:ea:db:e9:d4:b8:3c:15:87:18:b6:dd:
                    bf:49:26:0e:e6:17:b0:26:cf:c7:5f:1d:5a:80:53:
                    de:a4:54:42:bf:a1:3c:24:45:11:51:fc:86:07:24:
                    b3:cb:40:08:27:56:4d:26:89:d5:9e:0a:48:74:3b:
                    50:d7:ac:ba:ec:83:e8:71:b6:46:31:ab:7b:27:66:
                    a2:25:54:81:f1:6e:24:2a:21:79:b4:dc:8b:79:f3:
                    7f:40:31:47:bd:d8:4e:48:ba:d9:af:46:ac:4c:2a:
                    a6:38:01:a5:0a:f2:99:14:b9:b4:58:8d:06:4b:58:
                    f2:aa:d1:8c:cd:53:29:20:fb:1b:14:38:7f:b3:74:
                    ba:88:38:01:f5:fc:1d:44:e8:df:5e:f2:90:79:2d:
                    e1:14:74:23:75:3d:b8:d2:f2:5e:40:fb:fd:d4:99:
                    e7:76:99:e6:e7:59:6d:6e:11:65:0c:60:b2:f8:f2:
                    85:c7:b5:00:c0:80:46:82:ef:7e:d8:17:2b:02:22:
                    79:22:40:f7:89:6b:4f:a9:bd:31:02:a3:dc:a6:c8:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/22
                IPv6:
                  2804:21ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264566

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:89:22:e4:12:da:a3:ca:31:a1:06:d3:9b:02:69:1a:64:
         f5:22:1a:9f:ca:6d:29:14:9d:3b:38:93:36:54:6c:0d:18:cb:
         99:46:3e:89:29:b4:11:1f:0d:e5:23:fb:dd:e1:48:91:8d:0c:
         d9:7a:96:22:3e:c3:b8:ad:92:69:23:2e:2d:54:ea:f0:dc:50:
         b9:47:f0:97:51:e2:98:31:0e:c9:57:20:6d:2d:46:37:31:4c:
         1f:98:e2:63:1a:4e:54:5e:d6:27:79:f8:90:61:12:06:37:b8:
         5e:b9:cf:30:5e:de:74:4e:07:cc:35:ed:fb:e5:34:b4:b9:87:
         2f:2c:08:7b:ed:8b:d8:dd:88:dc:82:ad:e4:dc:57:d0:f0:e6:
         7d:83:1e:5f:f5:22:7b:c8:30:ec:53:ec:57:d1:95:de:96:b2:
         6d:38:80:f5:cf:93:7d:56:cb:1c:55:9a:b1:70:85:07:31:66:
         7d:5e:38:da:e8:8d:ee:16:61:42:69:1b:c3:d1:08:a1:8f:34:
         73:5e:41:2b:5a:58:7f:97:d5:3b:85:3b:ee:de:8a:ab:40:64:
         96:f1:62:c5:0d:a2:1a:2e:92:d2:7f:86:22:a7:b6:00:87:97:
         96:a9:63:ce:49:1c:dc:7f:9b:84:f2:e6:db:21:ef:93:7f:3d:
         99:1c:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----