Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.cer
File:                     F56A6439E006E61777F7E122C62E7B680CB8B66F.cer (raw, json)
Hash identifier:          pTAwTR/SUVHAAdCk1mUCfBewznkvEUu3e9Pz/+z03Ro=
Subject key identifier:   F5:6A:64:39:E0:06:E6:17:77:F7:E1:22:C6:2E:7B:68:0C:B8:B6:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4200A1E0A36617770E86092738405112776C03D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Mar 2022 04:39:48 +0000
Certificate not after:    Sat 18 Mar 2023 04:44:48 +0000
Subordinate resources:    AS: 61604
                          IP: 201.131.98.0/23
                          IP: 2804:7754::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:00:a1:e0:a3:66:17:77:0e:86:09:27:38:40:51:12:77:6c:03:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 04:39:48 2022 GMT
            Not After : Mar 18 04:44:48 2023 GMT
        Subject: CN=F56A6439E006E61777F7E122C62E7B680CB8B66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:2f:81:e2:2f:30:7c:51:fb:91:2a:82:58:
                    60:8c:ee:bd:14:4f:d7:f8:f2:a8:45:b0:f3:d8:01:
                    53:cb:ba:ad:b4:ec:7a:7a:f7:54:21:5f:0a:eb:b9:
                    02:e0:4a:3d:72:0e:35:6b:87:8e:6f:fa:cd:2d:1b:
                    4b:4c:d3:cc:4c:6e:b2:e6:4e:4a:25:82:21:20:e3:
                    87:43:18:2e:b4:3f:fb:25:28:51:10:48:b4:5b:c9:
                    22:1c:2c:e8:1a:03:b1:0a:fd:e3:f1:20:fb:f4:9a:
                    b1:55:88:18:86:8f:07:79:07:dc:89:79:6d:88:6c:
                    93:4f:24:60:2f:aa:fd:ad:a5:fb:02:c5:09:e2:4a:
                    f4:5e:77:d2:b7:62:de:8b:f8:94:b8:19:a7:a6:3d:
                    ed:44:df:7b:eb:19:f9:fb:7d:8e:96:eb:b3:f2:2e:
                    31:b5:82:81:26:af:72:00:2e:7f:9c:76:5d:2a:1d:
                    88:29:33:96:33:70:4b:50:7d:4b:0a:03:e7:67:2d:
                    13:8b:c6:40:ef:50:18:91:e4:84:73:27:e6:66:8f:
                    4b:e4:c0:03:fc:63:07:d0:f6:6c:f7:65:28:9d:00:
                    63:24:46:10:68:fc:ed:1e:99:23:05:ba:35:88:cb:
                    6f:a0:30:ab:73:c4:b0:b5:40:b4:a6:58:41:12:83:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:6A:64:39:E0:06:E6:17:77:F7:E1:22:C6:2E:7B:68:0C:B8:B6:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23
                IPv6:
                  2804:7754::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61604

    Signature Algorithm: sha256WithRSAEncryption
         92:38:24:32:5c:16:94:8a:3d:25:3c:1e:ee:e5:3e:c5:c1:d5:
         3c:91:eb:f8:e3:6c:24:df:fb:d7:bc:41:7f:90:df:19:db:75:
         a2:0f:e7:90:7b:3c:7d:04:04:ef:8b:cc:d4:e6:50:8f:34:30:
         60:7e:3e:bf:3f:b3:e7:5c:cc:e9:62:14:ff:fa:5a:b1:15:94:
         27:4f:3f:23:82:17:6f:eb:3a:bc:2a:27:e7:bf:68:e1:cc:cc:
         a9:10:4c:70:87:d7:cb:59:76:9f:43:63:38:f7:ab:c6:1a:f5:
         72:0e:fa:82:31:1c:6b:12:63:91:dd:cc:52:1f:00:ad:36:cd:
         9d:94:57:6e:92:15:7c:99:83:c5:e0:ed:3b:f8:ff:11:d1:fe:
         29:fc:8a:e4:a6:aa:f7:3a:72:7b:3b:64:42:ea:de:d4:66:36:
         92:a1:6d:08:83:f3:ff:72:4a:31:ec:94:c5:b7:70:80:ba:4d:
         03:1f:a6:0b:fa:12:71:da:06:2e:c4:03:31:aa:07:c3:b1:40:
         d9:0e:b5:91:bd:0d:ee:57:9b:c3:94:55:d3:27:99:87:3e:a4:
         59:ca:f9:bb:57:ea:91:4c:0e:6c:cd:54:4e:98:e1:34:60:83:
         2a:d1:e6:74:09:95:d5:c9:d9:e9:fa:0b:ac:60:8e:41:c5:ba:
         a3:c5:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----