Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F195F9C596ADB608642A133DA471E40CFD879710.cer
File:                     F195F9C596ADB608642A133DA471E40CFD879710.cer (raw, json)
Hash identifier:          dQKtLFp2/6fW+fX9dmIoTrzX6SqyoAVSZP0QLYOwuaA=
Subject key identifier:   F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C5BBF1E8C65DA2AFA9CCF1A0CC1EBB376E9E4F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Feb 2023 13:35:21 +0000
Certificate not after:    Fri 09 Feb 2024 13:40:21 +0000
Subordinate resources:    AS: 265438
                          IP: 168.195.212.0/22
                          IP: 2804:3424::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5b:bf:1e:8c:65:da:2a:fa:9c:cf:1a:0c:c1:eb:b3:76:e9:e4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 13:35:21 2023 GMT
            Not After : Feb  9 13:40:21 2024 GMT
        Subject: CN=F195F9C596ADB608642A133DA471E40CFD879710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:9e:6d:d2:c6:49:f1:05:09:cf:41:7a:90:
                    53:06:30:5f:b2:a3:eb:33:23:2f:7d:5d:bb:fb:2e:
                    07:cb:7f:98:38:c7:15:7e:9d:9d:37:b0:5f:aa:a5:
                    5f:05:f5:7c:77:a4:71:92:7c:fd:69:b4:e6:03:d8:
                    45:64:42:00:c4:f5:48:45:08:fa:84:ab:ca:c2:4e:
                    f3:04:90:5e:db:5b:f2:e5:b1:18:85:04:fb:10:a3:
                    ce:e0:41:50:dc:3b:e6:bb:86:f6:06:8f:da:45:9c:
                    f3:f4:b2:6f:2e:10:dc:3d:9e:40:ef:94:77:d0:f1:
                    6c:f2:48:b9:52:df:54:07:e7:50:df:d5:cb:6c:b5:
                    ad:3a:92:87:ba:ca:d2:78:84:5b:50:1b:1e:c7:7d:
                    33:12:df:f3:fa:8e:0c:da:54:4d:55:32:e7:1d:3b:
                    04:4e:f4:ad:ee:46:46:c6:da:c2:5c:79:4d:e1:77:
                    ef:aa:75:7c:18:f8:f0:8e:21:de:2d:7c:40:59:69:
                    5d:94:98:0c:83:51:dd:64:77:f6:09:a6:ab:db:6a:
                    da:24:a8:b5:99:75:8d:20:94:16:e1:62:2e:71:61:
                    e9:78:29:f1:c7:f6:50:75:50:48:35:12:58:58:88:
                    fd:77:07:01:df:a7:38:3d:61:79:ec:f3:a5:78:65:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:95:F9:C5:96:AD:B6:08:64:2A:13:3D:A4:71:E4:0C:FD:87:97:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/F195F9C596ADB608642A133DA471E40CFD879710.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/22
                IPv6:
                  2804:3424::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265438

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:db:fa:d8:72:d4:6a:c3:a9:05:96:34:b0:2a:fa:4d:51:
         50:4d:12:0e:3e:95:ca:ce:8c:cc:49:b9:23:1c:ee:70:8f:8d:
         68:c3:9a:de:6c:0a:f2:aa:5c:05:72:2b:96:7b:09:2f:5c:2e:
         03:c7:bb:6a:9b:a3:35:e8:ca:93:77:53:63:f4:76:94:ec:86:
         62:3e:06:a5:9b:dd:9f:57:8b:01:75:23:d9:0e:e9:62:dd:46:
         0c:3c:b8:0a:a3:5f:8c:dc:89:1e:d9:a5:05:d0:14:5e:7a:7a:
         48:e0:96:fd:1a:7b:97:b0:3f:70:29:b0:e7:7c:3e:8e:30:79:
         8c:ba:a0:0d:da:19:f4:8c:0a:63:b9:06:ec:87:25:68:9e:46:
         12:ea:8f:37:6d:92:27:6b:fa:6b:47:6b:ed:3a:d1:71:e2:bd:
         aa:f4:18:6e:67:b7:bc:30:6b:eb:5c:1a:92:7d:10:cf:a9:4f:
         14:a9:39:92:8d:71:23:30:22:bd:71:de:33:37:9a:74:67:53:
         dd:f8:77:65:25:b2:cd:cf:1d:af:55:59:51:d9:d1:4a:4b:8e:
         b8:da:85:0d:03:4c:a3:0b:ab:3b:94:8a:6a:aa:25:df:95:df:
         d1:d2:21:6f:b1:cc:98:87:b6:d7:29:91:09:bf:e4:14:4a:b1:
         a0:f6:90:cc
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbFu/Hoxl2ir6nM8aDMHrs3bp5PgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMTAxMzM1MjFaFw0yNDAyMDkxMzQwMjFaMDMxMTAvBgNV
BAMTKEYxOTVGOUM1OTZBREI2MDg2NDJBMTMzREE0NzFFNDBDRkQ4Nzk3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVZ5t0sZJ8QUJz0F6kFMGMF+y
o+szIy99Xbv7LgfLf5g4xxV+nZ03sF+qpV8F9Xx3pHGSfP1ptOYD2EVkQgDE9UhF
CPqEq8rCTvMEkF7bW/LlsRiFBPsQo87gQVDcO+a7hvYGj9pFnPP0sm8uENw9nkDv
lHfQ8WzySLlS31QH51Df1ctsta06koe6ytJ4hFtQGx7HfTMS3/P6jgzaVE1VMucd
OwRO9K3uRkbG2sJceU3hd++qdXwY+PCOId4tfEBZaV2UmAyDUd1kd/YJpqvbatok
qLWZdY0glBbhYi5xYel4KfHH9lB1UEg1ElhYiP13BwHfpzg9YXns86V4ZcJ9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxlfnFlq22CGQq
Ez2kceQM/YeXEDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82YUZ5VXpzUXY1MTVSQnVZYWFwZzdvdDh2MnlCV3l0Y3Bm
bjU3c2hSRWdIWS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82YUZ5VXpzUXY1MTVSQnVZYWFwZzdvdDh2MnlCV3l0Y3Bm
bjU3c2hSRWdIWS8wL0YxOTVGOUM1OTZBREI2MDg2NDJBMTMzREE0NzFFNDBDRkQ4
Nzk3MTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjD1DANBAIAAjAHAwUA
KAQ0JDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDN4wDQYJKoZIhvcNAQELBQAD
ggEBAFfc2/rYctRqw6kFljSwKvpNUVBNEg4+lcrOjMxJuSMc7nCPjWjDmt5sCvKq
XAVyK5Z7CS9cLgPHu2qbozXoypN3U2P0dpTshmI+BqWb3Z9XiwF1I9kO6WLdRgw8
uAqjX4zciR7ZpQXQFF56ekjglv0ae5ewP3ApsOd8Po4weYy6oA3aGfSMCmO5BuyH
JWieRhLqjzdtkidr+mtHa+060XHivar0GG5nt7wwa+tcGpJ9EM+pTxSpOZKNcSMw
Ir1x3jM3mnRnU934d2Ulss3PHa9VWVHZ0UpLjrjahQ0DTKMLqzuUimqqJd+V39HS
IW+xzJiHttcpkQm/5BRKsaD2kMw=
-----END CERTIFICATE-----