Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
File:                     22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer (raw, json)
Hash identifier:          KVDH1cbPBj5lHUIymXz+m9PglDWtRgRy7yP3/WmdNf4=
Subject key identifier:   DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD7FD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:38:00 +0000
Certificate not after:    Wed 20 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 264844
                          IP: 170.244.88.0/22
                          IP: 191.97.16.0/22
                          IP: 2803:8280::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16613331 (0xfd7fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:38:00 2017 GMT
            Not After : Nov 20 04:00:00 2024 GMT
        Subject: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:de:54:7d:df:5a:77:1e:9a:1b:53:9e:9d:
                    74:1e:d9:94:64:02:1e:76:5b:db:a5:5a:c6:4d:c2:
                    4f:b4:11:92:81:93:f9:80:d3:96:21:0a:0c:dc:da:
                    56:2d:b9:b2:c9:53:c1:2f:76:13:a8:c5:5b:e1:53:
                    52:1c:6d:11:08:1b:eb:94:fa:1d:00:ff:27:93:95:
                    a3:9e:81:ba:37:5e:06:9c:29:19:65:15:2c:15:40:
                    b5:39:23:b0:1b:d0:b6:de:79:01:01:9b:11:2e:28:
                    64:d3:af:c0:75:21:b9:dd:45:97:30:88:be:85:04:
                    92:0d:5c:eb:86:77:62:62:9d:a0:17:7b:99:94:b5:
                    7e:ab:da:5e:71:01:a4:d8:b6:e2:a1:c4:bd:3c:ca:
                    f1:b3:84:4d:a0:b5:52:9a:83:17:d9:3e:82:d7:1c:
                    c3:8d:9c:59:f6:e7:15:04:71:58:29:ab:19:2e:63:
                    96:7b:3f:43:53:62:d4:1e:2f:cb:f0:78:e9:8c:d0:
                    99:30:78:6a:3d:82:51:99:e3:92:87:a7:b2:a7:3e:
                    8f:91:46:ab:f7:6b:25:16:c9:63:90:ef:59:ec:51:
                    85:bf:9a:c2:92:70:ec:2e:d6:bd:ca:d7:ea:40:4b:
                    b2:c6:00:40:11:06:48:40:62:3b:d8:25:18:bc:d2:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.88.0/22
                  191.97.16.0/22
                IPv6:
                  2803:8280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264844

    Signature Algorithm: sha256WithRSAEncryption
         97:81:0e:31:68:25:a3:cf:03:c7:75:ef:d8:a2:4b:13:0f:8a:
         e7:50:a1:97:d8:46:2d:06:26:10:c2:79:3b:8e:05:2b:f1:e4:
         e8:ae:9d:00:a5:8d:cc:15:fa:aa:e7:cf:69:c7:dc:e7:cd:a7:
         ec:68:30:7a:75:20:bc:f1:54:1e:3f:c9:58:d5:f3:51:de:ff:
         2f:a7:45:a7:b6:5a:62:11:68:4e:5d:31:fa:38:8a:0d:1a:70:
         ad:cd:9c:c4:2b:4c:1d:c4:f9:fa:c9:a4:a9:58:21:60:e2:62:
         54:c6:7f:e8:25:fa:7f:e7:bc:fa:cc:27:7a:9d:90:43:6b:97:
         12:84:22:81:60:df:ba:47:43:96:1e:29:e4:12:fc:f6:2b:e9:
         fd:4d:48:51:a2:45:60:d8:86:2e:91:6b:f9:3a:3b:b1:6a:ff:
         73:8a:6d:91:0a:8d:b7:4b:c6:02:ec:f7:7d:a4:a1:66:92:79:
         81:40:19:45:4a:c2:d5:c1:28:8f:c8:e6:0a:2b:00:0f:78:f8:
         71:86:b2:44:c9:e4:6f:81:fa:14:4d:84:d8:db:db:24:12:08:
         04:e1:ed:25:ff:37:eb:5c:9a:89:8c:ce:78:f7:46:3c:b1:c8:
         8d:2a:db:74:a2:2b:b3:73:bd:a8:03:da:94:74:70:16:b7:61:
         ea:71:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:14 2024 by rpki-client on console-fra.rpki-client.org