Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer
File:                     6adbd36382f8fdc7486124fdd6ad414b2241421a.cer (raw, json)
Hash identifier:          rp7kBvoZc7LEyP457uxgnHvhmIW/X5HDMAuvj+HHjwI=
Subject key identifier:   0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CD954C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/6adbd36382f8fdc7486124fdd6ad414b2241421a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Jul 2022 18:49:23 +0000
Certificate not after:    Sun 10 Mar 2024 22:47:14 +0000
Subordinate resources:    AS: 272141
                          IP: 45.171.164.0/22
                          IP: 2803:1090::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13473100 (0xcd954c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 18:49:23 2022 GMT
            Not After : Mar 10 22:47:14 2024 GMT
        Subject: CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:55:4b:84:1f:b1:b8:8c:3f:f4:be:21:ba:
                    64:3b:16:3c:ed:c2:66:2a:9a:8e:ce:37:8f:5c:5c:
                    44:42:fd:3c:2d:6a:5e:12:6b:aa:14:f1:b1:81:fe:
                    a7:01:79:7b:ba:4f:5a:ea:da:ee:33:23:a4:6e:23:
                    80:39:df:ec:8e:60:15:a2:0f:f9:c8:90:d1:25:f5:
                    42:8b:a7:ef:12:71:a8:26:5d:42:63:57:3f:c8:4c:
                    a8:23:56:13:a6:8d:a2:1a:71:b1:62:63:a9:fa:65:
                    45:66:ea:70:46:ec:58:c9:b7:76:08:e1:45:81:b6:
                    8b:0c:72:e2:27:da:11:00:d4:43:48:4a:2f:e7:30:
                    6f:fb:f0:1f:57:43:cd:80:5e:d0:96:f1:a4:ac:11:
                    73:cf:42:95:74:37:c5:0f:8b:6e:3d:23:39:8a:8c:
                    f6:d8:8d:3d:86:c2:1f:90:a7:82:64:7a:0f:79:57:
                    65:7c:38:b1:8f:cf:f2:1c:bb:2e:d3:8f:c4:60:6a:
                    21:46:9f:18:e9:0f:7d:d2:d7:ba:e4:70:d2:90:df:
                    d4:b6:21:79:75:9c:e5:63:bb:c3:dd:84:0f:ad:1b:
                    02:ce:0c:b9:2f:c0:d3:ad:ab:63:a9:dd:88:29:fc:
                    14:63:7a:06:1b:90:d1:f1:73:17:e8:43:fc:32:2a:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/6adbd36382f8fdc7486124fdd6ad414b2241421a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22
                IPv6:
                  2803:1090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272141

    Signature Algorithm: sha256WithRSAEncryption
         bc:37:9b:99:52:82:4c:82:9e:c7:cb:f8:a8:a3:8c:68:a5:96:
         6b:07:f9:0b:77:98:21:47:6c:67:3c:3e:63:41:28:59:ac:e3:
         73:67:84:4f:f7:d7:87:46:54:64:c2:e7:cd:32:40:74:2d:a4:
         ee:ad:75:c3:00:86:dd:78:5b:12:6b:72:c3:f2:a3:e0:8c:9d:
         03:3c:a8:79:a4:09:b6:4d:69:bc:c3:f7:01:c3:25:2d:e1:a7:
         36:98:de:d7:81:72:b7:09:4c:2a:5d:b6:2c:e8:cc:dc:1c:67:
         8b:6f:8c:4f:88:55:77:51:8e:87:71:11:52:b2:4c:55:c3:99:
         c5:b9:c4:c7:72:61:8e:ce:a6:68:55:5b:da:5b:1e:93:ab:59:
         9b:01:61:6d:d3:b5:1e:5c:08:0b:2c:54:a2:cb:1d:2d:e9:cc:
         a3:39:b9:43:ad:86:a9:b4:0d:5d:5f:06:8a:1d:ea:ad:c7:a3:
         d6:cc:ad:f3:9d:17:58:9f:89:f3:b5:ac:52:e6:cb:88:f8:a5:
         a3:be:93:03:d5:6e:09:f1:ed:75:8f:76:68:93:86:0f:50:09:
         40:03:4e:ef:99:0a:02:4d:a9:aa:ea:1b:a7:9d:b9:ea:53:35:
         b7:d3:02:6c:d8:c9:ce:58:20:f2:81:fc:72:bd:ab:57:6d:10:
         1e:de:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----