Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer
File:                     b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.cer (raw, json)
Hash identifier:          YktSkBgXkHCTO8prAkqvJKKkwYKKjvgppFUNC3M6X6I=
Subject key identifier:   2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE373D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Sun 10 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 27806
                          IP: 200.13.136.0/21
                          IP: 2803:c700::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14563133 (0xde373d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Mar 10 06:00:00 2024 GMT
        Subject: CN=b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:e9:5f:b8:17:88:49:7b:50:f5:70:f7:d9:
                    61:18:c5:72:eb:7c:73:d9:42:d7:fb:73:d1:e7:68:
                    2b:67:1e:e5:2e:50:02:4c:af:7b:be:6e:64:fc:95:
                    c4:30:a3:17:86:69:ab:be:d9:cf:ef:00:be:46:49:
                    6c:df:92:a3:1c:55:59:2d:b9:35:69:62:32:2d:ca:
                    d6:a3:b4:83:44:b7:1d:d7:b7:1f:09:44:94:26:5c:
                    a8:2d:0f:41:21:5b:56:5b:ea:28:15:a6:16:69:71:
                    98:0c:2f:68:0d:4a:fa:36:d3:3f:8e:72:0a:89:aa:
                    67:6f:cb:e1:c9:56:ab:7c:3f:65:42:e7:ee:a2:b4:
                    cd:1d:ea:1d:e5:d2:42:4f:cd:fe:59:ee:b4:87:71:
                    35:ab:d0:26:c0:23:fd:96:6e:ca:0a:6d:73:64:6e:
                    ab:d2:44:f4:3a:60:20:01:ca:39:7b:e5:b5:5c:8a:
                    b9:49:66:69:9d:a9:d7:6f:74:48:e2:39:c8:7c:15:
                    3f:dd:06:c2:47:36:e2:d2:ca:b2:84:27:41:96:7a:
                    a5:78:eb:b0:84:11:2b:8b:6f:00:cd:2b:d7:d9:4c:
                    59:70:13:64:e0:b0:d6:cf:fe:92:7a:18:55:48:4b:
                    53:97:93:21:15:85:45:c4:d9:b6:78:7b:98:01:06:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1E:B6:2A:68:B7:1E:98:C5:3F:97:1A:91:9C:F5:FE:2F:B3:DB:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/b8cb6d034bc4b225fb632157a1aa9d67c69f1e6f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.136.0/21
                IPv6:
                  2803:c700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27806

    Signature Algorithm: sha256WithRSAEncryption
         28:18:14:7c:f8:05:a0:b2:27:88:39:81:32:c3:07:bf:f7:af:
         eb:8a:d1:90:d0:ba:27:c1:63:19:25:2d:48:c9:bb:9a:c3:ef:
         e6:55:da:25:e4:ac:e4:b8:6e:a9:6c:bb:1e:68:b4:a1:9d:9b:
         3c:2b:29:b4:c1:79:24:57:91:11:51:0c:9b:11:53:41:1e:7e:
         dd:02:3a:39:94:ae:30:28:60:53:69:dc:3d:34:b7:de:84:4b:
         88:3b:88:2a:41:cf:bd:14:d7:a5:91:75:77:f5:36:78:c0:f5:
         62:9a:65:81:9f:e9:e2:35:52:9b:0a:87:6b:52:f1:49:e2:b3:
         9b:57:d1:fa:94:52:39:8e:b6:39:ce:d2:7b:a6:21:00:d3:cb:
         43:34:eb:9e:71:44:5e:34:a0:16:9d:74:e3:04:70:3a:cf:c9:
         4d:67:29:69:55:01:7d:88:e9:fb:43:9a:5b:2f:3f:76:c0:e7:
         2d:c8:b3:0a:cc:05:f2:a5:3a:15:c5:f2:9b:a3:37:72:7a:41:
         78:06:1a:ac:ce:b4:82:83:64:f7:35:e4:f5:26:8b:20:90:96:
         d1:cd:19:05:e9:9b:14:40:31:30:b7:c3:ca:93:3b:d5:a6:e5:
         90:ab:59:d9:6c:c0:dc:08:7c:63:60:be:01:58:15:ba:22:ee:
         dd:6a:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----