Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31480d682bda17ab78ca3f47aea189a61a30fa3c.cer
File:                     31480d682bda17ab78ca3f47aea189a61a30fa3c.cer (raw, json)
Hash identifier:          rzQliTtbEzD+LOSy53W8kpvN3CmsMRwJfhITca6M+v8=
Subject key identifier:   AC:90:25:4D:45:33:61:D6:E7:C8:BE:7A:86:1E:AD:80:B8:65:6C:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1E316
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/31480d682bda17ab78ca3f47aea189a61a30fa3c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Thu 15 Aug 2024 18:38:13 +0000
Subordinate resources:    AS: 264618
                          IP: 143.0.100.0/24
                          IP: 2801:16:1000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15852310 (0xf1e316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Aug 15 18:38:13 2024 GMT
        Subject: CN=31480d682bda17ab78ca3f47aea189a61a30fa3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:97:60:2d:b5:2a:54:19:36:ce:c1:ce:c0:
                    ea:d1:90:f2:0e:fb:ba:f5:aa:28:cf:02:c9:80:3c:
                    a3:9b:e5:97:5f:67:61:86:b5:7c:c4:bb:1c:2a:c0:
                    da:66:45:0a:0e:95:36:94:d7:e0:32:d6:a0:e2:2a:
                    bf:20:a6:f0:13:53:1e:15:a8:fc:59:39:94:06:3d:
                    db:71:3f:41:49:71:fc:cb:2a:be:e9:c0:e2:80:f1:
                    42:69:eb:72:5e:6c:0d:60:ca:2a:37:70:de:96:5b:
                    82:83:1d:b1:53:d6:39:53:56:65:59:53:92:39:73:
                    4f:a3:c6:53:c2:a9:9a:52:b0:42:ee:45:2d:bb:47:
                    df:fb:c7:e8:d1:c5:0c:a6:74:45:49:8b:2c:43:cd:
                    d6:c2:43:45:72:c2:25:ef:4a:ef:81:b4:87:e5:03:
                    81:96:d3:ce:02:9a:70:6e:a6:62:1e:f1:d7:a2:51:
                    91:da:51:fe:34:de:dc:c4:6a:ff:ae:ce:0f:be:41:
                    a4:f3:0b:43:2d:ab:cb:22:30:2e:b9:0a:98:65:a9:
                    4d:c7:02:a4:db:2e:f6:d0:cf:b5:ef:51:b9:d6:b9:
                    54:24:f8:51:1a:bf:f8:54:40:c5:00:4d:b8:13:4a:
                    c6:c3:50:d8:01:e6:bb:8f:2b:15:e0:64:4b:60:32:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:25:4D:45:33:61:D6:E7:C8:BE:7A:86:1E:AD:80:B8:65:6C:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9ed530f-ab59-4c7a-a9e0-05a5cefc7d12/31480d682bda17ab78ca3f47aea189a61a30fa3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.100.0/24
                IPv6:
                  2801:16:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264618

    Signature Algorithm: sha256WithRSAEncryption
         ba:8c:ca:51:03:b4:df:18:89:11:e6:56:17:45:cc:c1:f2:56:
         fc:ea:07:6f:70:35:74:41:1e:2d:1e:03:5b:2d:5c:e5:59:d4:
         43:1e:2a:76:d0:45:6f:fa:56:d8:dd:7b:78:cd:d3:e6:30:6d:
         05:62:10:04:8e:d4:5e:4c:1b:32:b8:e3:4b:37:c2:d1:5e:1d:
         a4:15:5a:a0:d3:5e:3e:03:18:0b:67:60:65:f3:d0:25:3a:1b:
         46:f5:4e:2a:64:eb:90:87:57:42:ca:64:cf:33:29:6a:98:2a:
         e8:d2:34:70:47:29:d3:4b:b0:ba:de:76:49:d0:f8:3f:a3:58:
         13:b6:60:7c:97:0f:81:76:09:77:08:77:e8:da:a1:43:b9:cb:
         80:81:a2:0a:a9:68:48:4d:29:e2:a8:12:8e:bb:52:71:e6:48:
         dc:95:41:48:98:b6:cb:5e:75:f5:e0:18:66:3f:8f:81:39:7d:
         be:52:e7:e9:62:13:70:f1:6f:a8:2e:81:22:4a:5c:81:af:8d:
         1f:48:7b:e2:00:26:95:b0:41:6c:8c:ab:ab:b7:b8:07:84:e5:
         4f:5b:58:b4:f2:14:42:40:74:5e:a9:df:9f:c1:49:d4:d1:f6:
         02:12:f5:c9:d7:01:f8:40:63:79:20:7b:be:2f:14:e6:03:d5:
         8a:72:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:13:14 2024 by rpki-client on console-ams.rpki-client.org