Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
File:                     fd59a2161d14de91096d6cf6cd532d586f95771c.cer (raw, json)
Hash identifier:          uBSfzUQrli9K5FlFrWuQNHPYtCmV/4/cynKhESOnNT8=
Subject key identifier:   45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D600D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 May 2020 22:01:43 +0000
Certificate not after:    Thu 30 Nov 2023 13:39:18 +0000
Subordinate resources:    AS: 269924
                          IP: 207.191.164.0/22
                          IP: 2803:12e0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14024913 (0xd600d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 22:01:43 2020 GMT
            Not After : Nov 30 13:39:18 2023 GMT
        Subject: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:aa:a6:4d:b1:c8:c6:ab:f5:b9:c8:c2:17:
                    60:ad:83:af:da:c1:ce:7d:e1:34:5a:38:8b:5f:01:
                    5b:5f:dd:9d:a2:9c:2f:9a:f8:dc:d3:84:8a:de:5d:
                    f9:5c:e3:03:32:f9:0a:78:28:66:72:e2:4a:63:b8:
                    3a:bc:c4:ae:48:52:1b:9b:40:e9:f4:b9:da:5e:4d:
                    af:ae:bd:7f:b4:e2:21:ae:4f:e3:ca:c2:3a:a5:19:
                    cc:b3:41:b5:4d:03:49:75:2d:46:26:d5:93:25:c5:
                    39:09:3a:f4:6f:dd:a4:f4:04:44:d6:e8:ec:6c:2e:
                    c9:de:36:a3:fd:c1:de:37:08:f6:74:fa:ac:fd:bf:
                    27:6a:d0:4c:26:d3:67:ee:d4:b0:a5:c6:cb:7b:3e:
                    99:4d:bb:87:62:53:c3:7b:ec:86:f0:55:be:4f:00:
                    ad:28:50:71:5a:fb:31:af:9c:27:28:e3:ad:7f:28:
                    d6:40:ee:14:03:b1:a5:38:38:4e:49:1a:97:61:07:
                    43:1e:5f:a0:6b:8c:25:ba:7c:78:1d:2b:83:05:18:
                    75:4a:22:df:31:03:75:37:ed:57:60:ca:3f:3f:25:
                    6f:a1:65:a4:6e:bc:c1:66:e6:d3:b4:63:84:39:a6:
                    c6:58:da:67:e0:c0:7d:13:fc:d9:fa:f1:8b:ec:a1:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.164.0/22
                IPv6:
                  2803:12e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269924

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:56:21:0f:75:3a:d2:ff:77:04:ab:69:65:c8:eb:de:25:
         07:74:94:fe:88:cf:87:b8:ba:19:9d:6f:e4:ee:d5:66:95:5a:
         5c:5c:3a:a3:f5:0b:63:04:a0:7b:cb:84:51:6f:59:cf:f6:75:
         1e:63:7c:1b:e8:02:28:b8:6d:85:d1:06:ce:00:7c:95:7e:32:
         ab:c4:f4:ed:11:7f:22:9c:e7:f7:2f:a9:12:d5:15:09:98:9e:
         cd:1e:67:b9:a9:b3:63:b8:6d:44:9e:87:dd:8f:c8:9f:18:fc:
         57:69:91:5b:e3:4c:6d:83:1e:1b:bc:78:14:4e:36:70:10:09:
         62:fb:bf:06:0c:d9:f9:94:45:c2:49:8a:ad:ce:0a:03:8f:c9:
         88:3a:41:f8:af:30:a3:87:15:da:33:b3:91:ce:63:d2:8e:5c:
         74:f9:55:86:99:29:52:c4:2f:81:66:38:c1:55:d9:c1:ed:a4:
         7c:05:23:32:bd:7f:75:58:78:f8:38:17:02:56:58:9d:cf:da:
         ff:5a:81:f5:3c:1f:59:e1:27:a1:e0:77:c2:47:41:b2:86:65:
         48:53:da:59:c8:1a:32:bb:d2:c4:9e:20:a5:aa:fc:fe:25:ff:
         50:77:14:1a:ec:cd:f3:82:3b:bc:db:fc:cd:10:fa:66:2f:2f:
         c7:9e:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----