Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f53fcfde23625867afb2a1134998b78d084d178.cer
File:                     4f53fcfde23625867afb2a1134998b78d084d178.cer (raw, json)
Hash identifier:          +nntceaJyJlUFLNYtTL6gI3U/znD2pGjkI55590in4I=
Subject key identifier:   30:64:58:57:D8:52:31:DA:3F:40:12:99:3F:66:02:A4:76:40:23:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CA5D83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/4f53fcfde23625867afb2a1134998b78d084d178.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Tue 18 Jul 2023 15:00:00 +0000
Subordinate resources:    AS: 262161
                          IP: 170.247.160.0/22
                          IP: 190.52.48.0/21
                          IP: 200.107.240.0/21
                          IP: 2803:8ec0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jun 2023 11:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13262211 (0xca5d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Jul 18 15:00:00 2023 GMT
        Subject: CN=4f53fcfde23625867afb2a1134998b78d084d178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:0d:66:67:54:39:6c:e1:52:df:04:04:05:
                    54:20:14:59:29:ad:26:a5:55:c1:b1:f7:b3:7e:c7:
                    8b:f5:f8:92:45:5d:f1:e9:20:12:48:a4:15:98:86:
                    08:b3:19:c9:95:c4:17:fd:62:de:ff:7d:f0:09:58:
                    e6:69:47:0e:3f:dc:68:0f:22:86:1f:f0:c3:66:1a:
                    2a:9a:48:26:37:37:f6:d2:78:03:79:34:8d:b3:4f:
                    19:8e:79:34:f0:39:65:0b:bd:84:62:38:ae:c5:e1:
                    4d:45:28:ab:d6:fb:d6:b6:05:26:78:1c:1f:1c:55:
                    f6:0d:64:b0:c1:96:08:07:32:8c:1a:02:45:eb:51:
                    97:3e:b2:43:aa:74:7d:40:6d:34:07:7e:8b:e9:57:
                    a4:d2:67:47:3d:ea:e1:71:ab:c0:17:89:30:e4:51:
                    a3:8e:08:a1:bb:58:c0:1d:47:af:0a:b5:60:9d:99:
                    e5:0e:45:5f:90:76:d7:5a:ce:26:f1:bf:dd:23:ec:
                    68:96:b0:2f:bc:86:dc:de:8c:e4:50:20:8f:8e:5a:
                    1e:b6:dd:fc:c8:18:37:90:d5:ab:5a:26:6e:c0:7b:
                    e9:ee:98:78:f0:e8:f8:66:e4:a3:5d:61:fd:85:28:
                    22:ca:4c:79:55:4b:ee:5b:47:19:26:25:72:ea:dc:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:64:58:57:D8:52:31:DA:3F:40:12:99:3F:66:02:A4:76:40:23:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/4f53fcfde23625867afb2a1134998b78d084d178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.160.0/22
                  190.52.48.0/21
                  200.107.240.0/21
                IPv6:
                  2803:8ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262161

    Signature Algorithm: sha256WithRSAEncryption
         4c:f5:65:1c:eb:90:e2:4f:f6:2d:02:7c:76:d6:b7:1a:00:3a:
         3a:6f:5c:a7:97:ac:96:ac:98:6a:38:bd:43:25:55:da:e3:75:
         c1:08:2c:dc:9d:3e:22:e5:08:56:0d:23:2e:bb:37:0e:c3:7e:
         af:62:23:fa:4c:d5:a2:fb:99:db:56:aa:7e:e7:fb:b9:8d:56:
         a2:b1:0d:24:05:9c:76:90:56:c9:00:0a:21:aa:88:07:40:ee:
         bd:00:70:e2:80:37:ba:91:e8:6a:f7:6b:84:36:ae:93:36:c2:
         71:a2:ab:a6:5d:75:6b:da:3d:93:f0:04:6b:f7:e2:70:ee:12:
         75:07:aa:a1:5e:75:e9:3a:e8:b4:d0:72:36:58:b7:fc:27:82:
         fe:49:57:4f:30:e6:5c:a9:b1:5e:0e:e2:40:a7:a5:23:bb:fe:
         23:3b:cd:36:f9:34:57:f2:33:55:ca:8f:ee:8c:04:2e:34:43:
         6f:8e:f1:bc:0d:07:c1:f9:c4:c1:70:82:27:4c:17:89:d6:c0:
         33:39:2b:df:ac:0c:f2:e3:a2:d2:4b:79:36:83:35:4c:35:1d:
         45:17:8d:80:d4:eb:dc:4f:52:67:bd:ea:d0:3c:4f:13:a9:32:
         6d:dd:5c:dd:45:41:9d:cd:4c:21:81:3e:3c:7e:6e:72:84:3d:
         1c:d8:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 6 14:13:33 2023 by rpki-client on console-fra.rpki-client.org