Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16cac609d27670b5b41abda1b583a7f15ce48526.cer
File:                     16cac609d27670b5b41abda1b583a7f15ce48526.cer (raw, json)
Hash identifier:          fdzhe955Gsy7SJUR7eyW/ICwG/ggu6YKx2kmEfWeV4Y=
Subject key identifier:   5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE0F5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/16cac609d27670b5b41abda1b583a7f15ce48526.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 13:06:46 +0000
Certificate not after:    Thu 18 Jul 2024 23:36:05 +0000
Subordinate resources:    AS: 267680
                          IP: 45.163.36.0/22
                          IP: 2803:1ea0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15601503 (0xee0f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 13:06:46 2020 GMT
            Not After : Jul 18 23:36:05 2024 GMT
        Subject: CN=16cac609d27670b5b41abda1b583a7f15ce48526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:65:5b:4d:9b:1f:a2:f9:95:f2:59:84:cb:
                    02:8c:e4:0b:83:ec:31:49:d6:8e:ba:4b:a3:e6:35:
                    73:37:ab:7a:f7:69:22:76:1e:86:82:ba:c3:02:03:
                    50:f1:76:1f:1d:90:c8:f0:68:8d:67:e0:2a:dc:cf:
                    a0:86:dd:6d:bf:f3:f6:67:7e:3b:af:3c:b4:6d:f5:
                    fa:b5:bc:58:af:2a:c7:04:82:ef:fb:8c:09:61:1c:
                    1b:1e:97:e8:74:60:4e:d5:34:5f:eb:9b:f9:7a:d6:
                    5c:ec:a5:1c:0c:dc:b8:5f:b0:45:1f:16:62:b2:a4:
                    53:9f:17:bb:c0:35:9e:b4:55:c2:68:f7:96:4b:2c:
                    7e:67:e8:36:2b:0a:71:46:84:7a:dc:da:3b:08:e1:
                    75:be:80:34:2e:7a:45:89:c9:be:ca:87:15:47:39:
                    d1:d8:26:70:ab:55:c1:90:8b:72:d0:8b:80:15:32:
                    ed:dc:57:19:27:b0:49:72:b0:33:7f:ba:f0:82:f4:
                    7f:dc:12:8e:63:00:79:c7:a1:60:8f:19:2c:36:71:
                    4b:8f:17:73:be:1c:09:fc:ab:af:da:61:cd:67:95:
                    cc:75:31:2c:f5:38:38:58:58:6b:ab:7a:91:7a:19:
                    63:91:5d:53:28:8d:e3:84:5c:3a:7e:a4:00:5f:3e:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:ED:ED:D2:B0:8C:CB:53:5E:F1:A2:2A:34:3F:36:E3:88:8B:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df0eb027-ca29-435f-8169-7bcda2d1c92c/16cac609d27670b5b41abda1b583a7f15ce48526.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.36.0/22
                IPv6:
                  2803:1ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267680

    Signature Algorithm: sha256WithRSAEncryption
         70:91:13:2e:fd:28:2d:82:ff:47:7a:ba:fa:3c:c9:a5:87:8b:
         b7:5a:a1:31:8f:f6:b0:ee:01:3c:57:61:5a:e8:4d:2e:5d:14:
         c1:dd:7a:27:58:1f:0f:91:15:3a:74:2d:8c:72:69:75:62:58:
         84:4c:df:95:f1:f7:98:49:2b:ce:b8:4b:ac:63:f5:bd:06:e8:
         cb:f2:94:14:0f:57:77:53:86:38:3e:79:d2:bf:92:c0:96:fc:
         25:e0:2a:99:a4:b7:57:98:91:63:75:c3:82:20:6e:79:d3:a6:
         b5:fe:44:88:b9:b5:95:8f:db:65:e2:16:e5:52:3d:68:25:1b:
         c6:3f:ab:c9:48:02:f9:19:f1:73:2f:9f:53:a4:be:5e:f4:90:
         2f:be:60:2f:0f:36:7b:5a:f9:b9:29:2c:a0:cb:bd:f3:c2:4b:
         6a:7e:e3:6c:c7:fc:02:8b:2a:12:1c:1b:7e:f8:1d:a2:e7:24:
         5a:db:a4:10:d9:df:b2:d4:22:b7:fb:b8:0f:c8:04:11:cc:dc:
         a7:43:a4:b4:fd:23:3e:f2:32:cd:2c:1f:0a:8e:66:71:45:00:
         15:96:dd:c6:84:60:f0:2e:a2:7f:a8:73:56:9b:3d:e8:bb:25:
         cd:9c:aa:a7:0d:42:f9:b7:87:95:3c:a6:a0:0a:e3:68:78:8c:
         46:be:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:36 2024 by rpki-client on console-ams.rpki-client.org