Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
File:                     be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer (raw, json)
Hash identifier:          M+Ka0fzbeRzbxHPD5I140vk8WTMSIw/9cBpAMkNRivM=
Subject key identifier:   35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D67A94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Tue 05 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 26210
                          IP: 186.121.192.0/18
                          IP: 190.181.0.0/18
                          IP: 200.105.128.0 -- 200.105.223.255
                          IP: 2800:88::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14056084 (0xd67a94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Dec  5 04:00:00 2023 GMT
        Subject: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:36:65:d0:eb:c5:54:bc:5f:d5:56:00:67:
                    19:a3:53:46:cd:ec:8d:0b:03:2e:fa:56:2f:23:33:
                    97:90:e2:a9:0c:e0:5a:76:8c:07:99:3b:a7:ae:29:
                    cc:03:2e:26:b1:e6:48:67:89:07:d3:18:ee:a3:49:
                    2e:8c:1f:b1:69:9a:3c:3f:9c:91:13:2d:72:52:9d:
                    35:a3:30:f2:92:8b:19:e8:05:1b:45:20:9f:c6:89:
                    14:48:bb:fb:26:25:9e:ab:60:c0:31:f2:34:76:09:
                    ec:ec:6f:8b:57:0c:f2:49:9c:33:78:1a:b7:fd:42:
                    60:c1:da:13:c9:ba:7f:9e:63:77:c0:18:9c:7d:f3:
                    64:03:db:75:6d:3f:82:8a:5a:49:45:6c:5d:1c:40:
                    fb:f7:2d:d6:4e:b9:31:95:1b:bd:6a:98:e4:20:a4:
                    bd:c8:c8:69:ab:b1:8f:8e:cf:ab:09:c8:09:c5:92:
                    36:f1:fc:4d:9c:98:24:1e:a9:ad:77:16:52:b6:f6:
                    03:6b:06:d2:22:3f:e8:74:b1:5b:7d:dc:ab:eb:7c:
                    9a:38:9d:02:55:87:be:3f:4e:0b:8c:3b:50:95:e3:
                    ba:73:d0:30:f8:28:29:e9:6a:3e:d6:e9:27:bf:fe:
                    6d:60:d2:33:d0:91:85:4b:c4:02:39:b7:db:ed:2c:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.128.0-200.105.223.255
                IPv6:
                  2800:88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26210

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:0e:5b:ed:7a:62:37:f6:39:37:19:b8:84:89:0f:70:84:
         6c:59:f7:80:4f:45:05:c7:2e:8a:8c:15:b1:f2:2f:1c:be:3c:
         23:82:10:a5:a8:22:04:e7:0e:4c:7b:21:8e:78:71:60:62:b6:
         a0:b5:c0:e7:85:26:97:cd:62:4f:15:2f:5d:41:b5:b4:ea:2c:
         0c:5f:e2:4d:ec:d8:c3:7c:fc:5d:01:1e:e6:b9:c4:50:87:38:
         19:ef:42:0d:98:da:25:6f:8f:d7:bf:9b:b5:05:0b:76:ef:fd:
         6c:67:fd:3a:3f:3a:35:35:ee:00:25:d2:57:e8:d3:55:06:88:
         4b:9f:1e:49:4c:dd:a5:38:6f:ad:93:03:7e:02:0a:67:65:c8:
         cc:e3:3b:57:ac:92:a1:f1:85:7b:74:68:c0:1c:41:45:5e:99:
         36:18:7a:dd:d2:74:dc:1e:66:71:08:9a:41:43:50:7b:10:55:
         e6:c7:58:7a:86:a8:ad:2b:fe:15:d8:fe:e4:e6:d7:1b:f6:e9:
         e5:08:44:df:3e:6f:e1:ca:b1:ac:f5:4c:60:e7:96:b1:eb:98:
         c2:09:21:42:cd:fa:a3:6a:4a:1b:92:6c:cf:29:a1:9d:c6:c2:
         1f:dd:4f:23:f2:d3:17:b6:79:2d:30:66:5b:93:f5:13:bc:92:
         09:35:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 15:41:35 2023 by rpki-client on console-fra.rpki-client.org