Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.cer
File:                     EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.cer (raw, json)
Hash identifier:          ZVah3VGISuAsTCzLSuXb0V6dkZ8h5DPrmlU5NXUyhmU=
Subject key identifier:   EE:C1:2D:F4:45:74:CA:D2:F7:0F:A2:61:D1:75:4C:89:4C:2B:5C:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FFFA74685243E11945E322EF881FB9E90A1DB06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Aug 2022 19:31:57 +0000
Certificate not after:    Thu 10 Aug 2023 19:36:57 +0000
Subordinate resources:    AS: 267657
                          IP: 45.224.112.0/22
                          IP: 2804:44d8::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ff:a7:46:85:24:3e:11:94:5e:32:2e:f8:81:fb:9e:90:a1:db:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 19:31:57 2022 GMT
            Not After : Aug 10 19:36:57 2023 GMT
        Subject: CN=EEC12DF44574CAD2F70FA261D1754C894C2B5CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:06:68:91:bd:41:e5:70:f8:08:b3:2f:64:29:
                    4c:9a:ed:2a:62:85:0a:ca:14:53:cb:46:52:30:4e:
                    ec:b3:8f:ba:db:94:01:32:1f:b2:f3:1c:92:5c:4d:
                    33:27:3f:fa:0f:6a:93:32:ba:ce:b4:8b:38:e2:51:
                    f3:ea:f0:af:f5:2d:e2:76:43:2e:3c:8c:94:3b:a6:
                    50:dd:fb:55:a3:68:48:a4:73:ed:af:d8:a3:c5:a5:
                    22:d2:1f:db:a0:ac:8c:29:2f:f5:ba:b9:34:67:ed:
                    4d:1c:ba:75:9f:aa:d6:ba:b3:52:af:e5:5c:85:b5:
                    c4:47:b6:d0:93:84:6f:dc:d8:c7:b5:5f:3d:40:26:
                    96:a1:59:b8:2e:9a:e4:45:b5:a2:57:fd:86:34:0a:
                    9e:0c:61:6b:64:3b:d9:85:5d:be:ac:1b:e8:a0:3e:
                    5e:72:9d:99:cf:29:4a:22:62:ef:ec:3c:4e:a0:2a:
                    01:f4:5e:df:08:55:3e:19:20:8f:c7:51:8f:0c:dc:
                    04:db:bc:e5:35:e0:7a:94:e4:30:ed:0f:68:5e:dc:
                    6c:6c:d3:29:ac:69:98:98:70:4a:ac:4c:61:d9:50:
                    e8:98:0a:e3:72:ca:62:7d:55:a2:c0:ec:23:06:27:
                    82:8e:00:8a:d5:77:68:21:e3:9f:26:5d:6f:a0:5b:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:C1:2D:F4:45:74:CA:D2:F7:0F:A2:61:D1:75:4C:89:4C:2B:5C:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22
                IPv6:
                  2804:44d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267657

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:ff:ed:41:40:98:ad:84:f1:13:70:7f:fc:bf:23:24:70:
         01:cb:0a:27:b3:32:0e:53:69:2b:29:e3:45:bd:aa:7d:36:05:
         11:43:a8:c0:53:c7:85:47:45:a0:51:5e:97:bd:99:34:8a:55:
         b1:ae:5d:15:8d:0c:66:49:5f:d5:a5:1e:92:b1:ed:28:ed:22:
         40:6d:9d:4f:31:71:91:22:c4:ea:fb:42:03:b3:bc:36:f7:d8:
         ea:fe:bf:86:4b:cf:8a:68:d4:b2:52:b6:60:cc:4f:6e:0c:14:
         d4:c3:a5:d8:58:a0:ca:da:d9:c1:78:d0:c9:a1:bf:dc:48:e0:
         48:63:24:6e:ef:d4:db:f5:b5:c4:64:0e:7e:ea:1c:3d:09:da:
         d2:4e:71:73:84:74:31:7e:fb:9d:1a:31:e6:b9:b8:73:c1:67:
         c6:5c:33:48:65:92:94:8b:1c:7e:94:e6:59:55:96:bb:24:23:
         7f:61:fb:4e:7c:e9:31:c9:d4:73:36:af:9d:4e:aa:76:5d:50:
         5d:6b:6a:48:3f:f3:a3:65:cb:3a:4b:7a:04:41:dc:d7:8b:98:
         81:67:d5:54:ee:4c:ab:9e:6e:4a:b8:dc:fb:9f:81:90:8d:43:
         67:d2:bb:a3:a4:96:f4:87:52:61:f4:ed:a7:ec:b7:23:f7:09:
         f7:90:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----