Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
File:                     84a7a446b5912a684e23e2c1eb2619b25184f613.cer (raw, json)
Hash identifier:          fJ9oP7C+t+aWfuWAv3atUZPYKLK/bqd78Qr624vnD5c=
Subject key identifier:   93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D82EB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Apr 2018 18:13:15 +0000
Certificate not after:    Tue 26 Dec 2023 16:14:32 +0000
Subordinate resources:    IP: 45.231.148.0/22
                          IP: 2803:cb20::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14167733 (0xd82eb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 18:13:15 2018 GMT
            Not After : Dec 26 16:14:32 2023 GMT
        Subject: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:b5:c4:b8:58:f4:6c:7c:5c:ee:ac:77:52:
                    4a:5c:c5:6a:1a:a5:7d:e4:a7:78:bd:e2:63:6d:5e:
                    4d:5a:79:41:4f:af:76:47:53:af:45:31:49:3b:6f:
                    19:02:7e:fd:29:08:28:55:6a:68:f7:15:d1:28:be:
                    df:21:a1:0d:29:6a:ce:77:3d:c5:cb:39:5b:dc:69:
                    ae:bc:2e:49:c5:c7:32:1c:3b:82:3d:9f:4d:1c:01:
                    89:98:25:8a:03:db:07:85:d1:3c:7d:b3:ef:0e:d2:
                    4b:f4:2e:a7:ad:f5:c5:e8:73:9e:5d:ee:31:c4:5b:
                    22:a8:7f:6d:43:ed:81:4f:6d:c4:89:f6:ea:31:24:
                    57:4b:93:17:aa:b3:79:e2:21:c7:f3:40:b4:c9:b8:
                    51:c4:01:d2:d3:eb:98:a5:12:cc:62:d2:30:64:23:
                    0b:ae:9f:ce:1d:11:ac:2a:e4:69:4c:6f:a3:2c:ae:
                    87:65:5a:08:5e:8e:e6:8a:b3:55:68:44:62:04:fd:
                    8a:72:cb:18:b8:9f:1b:b7:06:44:ae:8f:bc:aa:29:
                    10:ab:ec:45:e4:2e:aa:55:30:07:c2:3b:f8:9f:67:
                    e7:eb:73:42:8a:36:ba:46:0a:1a:f5:d2:37:36:6b:
                    39:13:80:86:47:f6:be:b3:d5:da:aa:bd:cd:68:1f:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22
                IPv6:
                  2803:cb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:93:3c:86:7d:97:f0:66:78:20:c8:65:6f:c8:cf:21:06:
         3d:8e:2d:a9:b4:3b:34:bd:de:f8:84:5e:a4:50:6f:9f:69:27:
         6d:b6:b7:3c:80:61:23:b0:9d:95:ed:b1:69:89:a2:15:77:7e:
         9a:67:b3:97:8f:aa:c3:f7:1f:ab:95:ac:ab:83:08:4b:db:82:
         25:10:3e:41:38:33:1f:65:90:e1:fc:e5:bb:fd:41:d0:79:fa:
         cf:5d:d1:93:7a:14:f7:7b:63:e5:d0:db:31:fe:05:bc:2f:76:
         85:65:85:c2:a9:b5:dc:b8:11:9f:2b:bc:73:ab:bd:b4:8a:f2:
         db:7e:d1:51:cf:e6:de:6d:24:d0:d4:6f:df:14:de:3d:84:2d:
         b0:8f:dc:21:d1:b9:f2:d3:92:aa:7c:76:cb:0f:1f:a4:3a:07:
         5c:ee:5e:76:0a:32:73:51:e9:30:9c:9f:72:4f:b2:5b:16:f1:
         4a:6d:1f:ae:b8:2d:b9:30:5d:04:a7:27:d0:0e:e2:26:15:db:
         63:c9:81:65:10:8e:ae:31:e6:3b:44:4c:5c:77:a7:7d:75:95:
         0b:42:4a:78:00:16:2d:1a:d6:c9:63:cd:05:35:8f:b8:0b:12:
         93:9a:b4:b6:28:81:7c:71:11:06:2f:88:69:da:1a:33:db:8c:
         7b:5f:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----