Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
File:                     53fe257dcf8bca4ea5c613680400a9cf495caccb.cer (raw, json)
Hash identifier:          Bgxgsc4ppYeJkVc7epViC4Kn4DzYTiDyTsjwxeZCTaI=
Subject key identifier:   C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CFFCA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Thu 21 Sep 2023 05:00:00 +0000
Subordinate resources:    AS: 262168
                          IP: 138.117.160.0/22
                          IP: 179.49.64.0/21
                          IP: 200.115.20.0/22
                          IP: 2803:500::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13630632 (0xcffca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Sep 21 05:00:00 2023 GMT
        Subject: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:1a:2f:97:08:d2:76:7a:42:df:42:45:63:
                    e7:81:8c:04:c2:63:6d:44:ee:aa:68:a5:71:16:82:
                    23:2a:8e:ea:57:7e:5e:4a:ea:a8:5f:51:9b:33:d4:
                    26:1a:ed:e9:22:6c:59:22:de:04:94:08:39:b9:56:
                    86:e4:a1:62:8a:8c:af:34:5d:02:e8:3b:93:f3:c5:
                    8f:cd:31:30:f2:37:39:94:99:96:3d:6e:7d:4b:d5:
                    ea:54:cf:ea:5d:da:5a:92:fd:0f:c4:fe:0b:d8:8e:
                    55:c7:13:25:73:d7:08:b3:73:84:c5:21:41:0b:fb:
                    ff:0e:85:90:37:94:8f:2c:98:be:f0:a0:80:41:4a:
                    93:8d:b3:dc:f9:a0:2d:b5:1b:eb:43:88:a9:54:ce:
                    78:da:ea:0d:5c:9c:ee:08:16:f3:af:0a:80:2f:7b:
                    2b:b7:72:fe:be:8b:66:22:38:d2:ce:b2:70:8f:8e:
                    6b:77:05:e0:39:f8:6b:3d:54:09:63:57:4a:29:ef:
                    d4:b8:3e:d4:0b:2b:f7:3d:35:1e:21:89:ca:5d:91:
                    37:05:a2:ed:f2:ff:1c:10:05:dc:a7:c6:7e:a7:61:
                    ee:90:6c:dd:53:73:b7:44:bc:42:59:c2:62:e2:4d:
                    d7:59:5f:f5:64:d4:e1:ab:e6:fd:75:d9:60:2d:bb:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.160.0/22
                  179.49.64.0/21
                  200.115.20.0/22
                IPv6:
                  2803:500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262168

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:4a:71:fa:f8:df:5c:c6:4c:64:42:65:4f:ad:ed:49:72:
         40:97:20:7d:c1:36:e0:f4:12:99:fd:a5:d6:ae:5d:52:99:ff:
         60:79:16:97:58:76:7f:8c:d2:1d:3b:3a:38:35:76:b9:6f:49:
         fd:79:71:5c:85:ac:d3:80:dd:87:9a:48:d0:7e:e3:41:ea:7d:
         61:dc:2b:26:a0:c8:44:a7:df:78:70:e6:58:e4:1c:2e:eb:99:
         15:0d:d3:43:31:f5:a8:45:cc:fa:cb:b9:16:2b:6c:37:23:a9:
         38:21:d3:e7:b9:19:83:cd:3c:22:36:e4:05:fd:83:dc:9d:ef:
         ab:24:0a:cb:20:75:09:a9:6e:53:46:4b:3f:19:c7:85:9f:49:
         b0:b2:f8:f6:54:be:8f:75:f5:31:e9:6a:89:12:e7:37:3f:96:
         d6:74:d0:8f:c3:47:cc:6c:a6:74:84:bf:b3:ae:a3:40:29:3d:
         77:2c:ca:5f:cb:b3:e8:28:b0:ac:f9:2f:b1:b4:e5:bf:d0:ad:
         a9:e9:83:fe:ff:d4:5f:a1:f5:f2:fa:c4:d6:b0:62:92:bc:a4:
         11:ad:27:dc:ff:2a:db:27:fe:68:3e:b5:81:92:08:d4:e5:d6:
         6e:c5:7f:f9:1b:e5:1e:53:ba:ed:09:8e:b6:39:99:b1:42:da:
         58:bf:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 11 00:55:37 2023 by rpki-client on console-ams.rpki-client.org