Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
File:                     7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer (raw, json)
Hash identifier:          iEbBl1rxxtOA2vEog+6ujvrZPjLyeWsJhqStLOB9OvY=
Subject key identifier:   5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE3DAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:20 +0000
Certificate not after:    Sun 10 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 20299
                          IP: 200.30.128.0/18
                          IP: 2803:16a0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14564779 (0xde3dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:20 2017 GMT
            Not After : Mar 10 15:00:00 2024 GMT
        Subject: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a4:a0:fe:cb:62:7d:56:44:39:29:21:7e:3f:
                    89:88:a6:96:4f:fc:f3:80:79:c7:c4:7a:7e:24:dc:
                    aa:2b:b3:ce:92:57:98:02:99:94:29:ec:9d:d7:c1:
                    aa:0d:7e:20:16:1c:94:cb:d1:08:0b:89:9a:9e:de:
                    b0:a0:e8:74:55:02:42:4a:ff:cb:f6:92:51:dd:12:
                    b6:e8:25:6c:77:6b:2d:e9:e2:40:df:c4:f8:0a:37:
                    6c:3c:3f:95:20:1d:47:8f:e7:e0:bf:47:27:be:df:
                    27:1f:06:90:92:e2:d7:55:19:87:fc:99:8d:81:11:
                    ca:cb:c3:32:ef:df:4d:51:a1:ce:57:fd:c4:e5:f0:
                    88:8d:e0:05:10:d4:95:67:6a:38:53:19:6d:e4:37:
                    e4:21:81:0f:81:30:c3:62:3b:18:da:cb:99:c8:97:
                    5a:43:14:2d:d4:05:84:89:73:30:ab:76:72:29:1b:
                    39:9d:70:a4:96:67:2f:26:50:1e:5d:e2:35:86:05:
                    54:33:c4:52:99:18:28:6a:f0:fb:6a:cb:2c:e0:1e:
                    c3:6f:86:66:0d:8b:f9:fa:5d:39:d3:c4:80:92:96:
                    40:bf:34:ef:12:08:74:7c:e6:d0:c7:63:b1:1d:3c:
                    3f:6d:8f:38:90:74:ba:3c:37:5c:ed:d2:86:7d:d3:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.128.0/18
                IPv6:
                  2803:16a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20299

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:29:5f:e5:6f:7c:cc:9d:8b:50:06:2b:66:15:97:19:9c:
         65:2a:9d:18:68:19:69:5c:6b:03:e5:b3:09:7d:00:a3:51:02:
         d3:50:fe:68:79:02:bf:c5:f1:b7:57:8a:72:a5:45:ed:f0:95:
         bb:d5:5b:c3:6c:68:f7:21:62:32:95:ae:62:15:ee:43:11:20:
         df:11:cf:df:9c:9f:79:a3:6e:af:97:0a:5c:a8:ff:7c:19:30:
         90:42:4e:74:8c:0e:5c:17:61:d0:40:c0:79:d6:95:a6:23:2c:
         c3:92:98:10:fd:0a:01:6f:5f:3d:7e:46:0b:b7:73:8d:23:75:
         e9:d0:63:6f:2d:0e:3d:33:0b:1c:b9:b2:7f:03:4b:97:30:a7:
         4e:86:0b:da:40:39:9c:f2:13:df:f2:d1:76:a1:22:ce:17:e8:
         ea:fa:76:22:51:00:27:fd:52:8c:51:88:7f:0b:45:9c:40:4d:
         2d:c4:5d:ad:cd:54:55:eb:4b:9f:b2:1e:cc:ec:c2:69:06:cb:
         26:ef:c4:45:8d:f0:8e:0a:d4:79:bb:58:34:ac:da:1d:7e:64:
         89:62:b5:dd:fe:ec:5e:ae:3e:33:70:ea:3b:3a:a8:65:32:1b:
         ff:0a:9f:55:f1:65:54:be:ba:e0:05:8d:4a:8c:3f:b7:12:86:
         51:af:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----