Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55040cfb32568a53c16b8ccd785750a784554ebd.cer
File:                     55040cfb32568a53c16b8ccd785750a784554ebd.cer (raw, json)
Hash identifier:          JZgignTdXj6+IAYiSKJWsNZFwCE10V3gC0aN1nB/Qts=
Subject key identifier:   54:18:B3:A7:9C:04:4B:FE:8B:36:CB:6B:9B:E5:A1:22:91:D5:A9:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107F578
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/55040cfb32568a53c16b8ccd785750a784554ebd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Sun 23 Feb 2025 17:34:34 +0000
Subordinate resources:    AS: 263757
                          IP: 138.117.48.0/22
                          IP: 2803:4840::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17298808 (0x107f578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Feb 23 17:34:34 2025 GMT
        Subject: CN=55040cfb32568a53c16b8ccd785750a784554ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:26:37:f4:6e:04:f1:18:61:d8:8a:47:70:d8:
                    c0:46:c8:a1:da:1f:4c:83:33:d5:44:2a:6d:74:78:
                    73:96:78:d8:4d:0a:a7:a9:6b:bc:3b:c8:20:61:8c:
                    1d:61:06:41:f6:d1:1a:b1:f1:06:4f:2b:32:c5:54:
                    fa:76:f4:2b:f8:ad:20:b7:9c:76:b1:54:d5:fc:34:
                    f4:7b:b8:7b:1b:8f:96:55:02:0b:87:16:0e:30:b9:
                    fd:87:af:e1:51:8d:d7:0a:ca:bb:3d:07:c2:66:66:
                    e5:c5:1d:30:8f:c8:df:29:c8:6f:f8:44:c6:31:ec:
                    93:c8:38:16:e1:64:e1:46:99:a2:8c:34:37:b4:39:
                    49:7a:23:ac:f5:64:17:98:40:62:c3:45:c7:ca:68:
                    5b:ac:c3:a0:15:8f:46:6d:e3:dc:ca:6b:4f:0d:5f:
                    bc:54:ea:7b:13:9b:07:51:dc:4d:f0:98:8b:7d:2e:
                    e4:a3:59:4b:eb:f2:66:19:fd:56:3e:59:f5:12:89:
                    e3:22:85:1e:c3:2d:64:f7:20:af:45:2b:06:68:b6:
                    7f:3d:b8:a8:8a:20:d8:04:72:39:ea:e4:e1:40:e0:
                    73:5a:60:f3:9c:e8:5f:d4:4d:cb:95:be:12:ab:f9:
                    ee:ca:bb:71:7b:a3:10:21:f0:d8:6a:3d:42:c2:5b:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:B3:A7:9C:04:4B:FE:8B:36:CB:6B:9B:E5:A1:22:91:D5:A9:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a208d5b9-380b-4da1-a45a-01eba51ee139/55040cfb32568a53c16b8ccd785750a784554ebd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.48.0/22
                IPv6:
                  2803:4840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263757

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:f8:ec:cd:3c:77:20:c4:4e:f5:08:83:06:99:63:fe:4b:
         36:a2:8d:b0:11:12:5b:cc:1e:27:e0:f5:de:56:58:25:f7:fb:
         ca:a5:c4:57:9e:8b:f1:2d:c8:e6:9d:e7:2a:47:b6:dd:5f:dd:
         26:e3:1d:68:ae:8b:36:e5:32:47:c8:1e:b7:97:af:13:3c:b1:
         cd:86:d2:6f:04:c9:5d:53:92:12:55:ed:d7:12:2f:6e:0d:70:
         f2:f6:48:52:9e:ed:ca:c0:af:da:a3:1f:bb:17:68:fc:93:e1:
         dc:70:7b:dd:dd:d6:0d:3f:36:a1:85:3e:e5:f1:40:d6:47:b8:
         75:0e:a8:4f:23:c3:c2:04:a8:80:25:e1:6f:30:16:8b:9b:4f:
         5a:e4:af:19:a9:18:4b:29:d2:a2:0a:f0:dc:42:90:76:96:41:
         5d:28:2e:e7:ff:9b:ac:75:15:5b:4a:c2:39:f0:c5:47:50:1a:
         3c:e3:7b:0e:d9:20:0f:43:f6:c3:be:2d:33:2f:d5:14:1b:55:
         92:b9:e3:2f:56:3f:c5:73:64:12:4f:49:1d:c6:b5:34:ee:d8:
         61:1d:72:d9:56:a8:73:d8:10:58:d9:eb:4f:85:16:8b:ff:94:
         d4:34:d2:23:a5:bf:42:cf:15:85:48:26:55:06:d1:66:34:b8:
         41:9c:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:48 2024 by rpki-client on console-fra.rpki-client.org