Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
File:                     5842a35efb02d60e07426e0d03b3de78f9d908db.cer (raw, json)
Hash identifier:          skRvxXX0+SYS1rsZakMA1O6lIF5rjDTDmWAdd7IRAhU=
Subject key identifier:   ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01019569
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Mar 2021 19:23:57 +0000
Certificate not after:    Wed 18 Dec 2024 20:27:54 +0000
Subordinate resources:    AS: 264769
                          AS: 265704
                          AS: 267720
                          IP: 138.36.220.0/22
                          IP: 168.181.176.0/22
                          IP: 2803:cf80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16881001 (0x1019569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 10 19:23:57 2021 GMT
            Not After : Dec 18 20:27:54 2024 GMT
        Subject: CN=5842a35efb02d60e07426e0d03b3de78f9d908db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:16:af:b9:24:10:1f:30:1a:2b:49:44:d1:
                    c4:21:b2:7f:a8:49:b0:75:3e:f3:bc:03:e1:43:30:
                    e3:a8:f7:e7:73:c8:4f:d1:30:60:2c:cb:bf:22:60:
                    e2:60:84:f3:e1:92:c8:7f:90:a5:c6:66:a5:7d:5c:
                    19:1a:7f:b4:8b:ae:77:56:30:09:b6:66:bb:cd:23:
                    87:ac:87:2c:75:76:51:74:fc:2f:a8:29:39:70:6b:
                    f9:18:8c:c9:88:9a:d7:7f:4b:50:91:89:8f:4e:f7:
                    0b:df:79:79:18:8e:9d:94:10:83:21:b1:da:fa:c0:
                    49:5c:d9:7d:58:29:f7:a4:40:bf:11:f3:0f:fa:61:
                    b6:eb:5d:41:19:5e:b0:aa:67:b7:08:5a:d0:e5:f3:
                    2d:00:20:37:ef:c6:31:f4:72:d6:3f:51:bd:44:6f:
                    2c:c2:a4:60:e4:c1:6c:89:d8:36:01:b0:77:e4:a4:
                    5a:c2:9f:fa:6b:f4:ac:7f:0c:2f:e9:dd:5d:c7:d0:
                    5c:22:7c:2e:bc:4a:9a:b8:e4:3b:d2:01:e6:ca:dc:
                    a8:08:8b:b0:89:b9:75:b2:82:15:e1:17:f2:75:a8:
                    c7:28:55:e7:fb:f0:22:a1:c4:62:98:56:09:17:7d:
                    1f:ef:17:15:aa:f6:f0:4b:88:09:d3:20:63:67:e1:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.220.0/22
                  168.181.176.0/22
                IPv6:
                  2803:cf80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264769
                  265704
                  267720

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:7c:d7:64:66:80:12:99:86:70:dc:b1:bf:be:a7:2f:cd:
         e9:c9:09:5f:d3:bb:98:23:9a:ec:d8:35:cd:3f:a5:66:52:be:
         0e:e2:4b:ed:85:a1:3b:32:2e:09:12:78:8f:2a:3c:f4:04:2c:
         65:69:6e:88:7d:3d:81:99:26:8a:3b:ae:3b:2c:4b:dc:93:b1:
         18:60:58:8f:84:20:1d:64:8c:a9:36:28:6b:22:ad:13:50:94:
         50:7a:e2:f9:27:2c:5a:55:d8:78:8c:4d:4a:9e:f5:2c:dc:8b:
         b4:73:9b:1d:19:75:da:3f:1c:00:d0:08:b7:76:42:d4:0e:1c:
         6d:07:fc:a5:7a:69:0e:55:4e:1a:b6:db:de:b8:76:a4:4a:26:
         c6:28:3d:9a:0b:15:fa:db:f3:b6:0e:82:9c:32:71:d7:ea:d4:
         17:70:25:7d:4b:68:57:38:55:57:79:0f:88:bd:50:f8:a9:21:
         3c:74:b6:d5:e3:d9:1d:b0:ab:db:a2:0b:7e:f6:0c:f9:10:bd:
         e6:ca:12:f9:57:0f:18:e0:4e:59:66:d4:87:3c:da:a2:ce:43:
         e2:86:e2:77:62:be:d3:dd:37:55:dd:73:ff:02:e2:ec:9b:f7:
         ab:67:07:3b:85:d1:05:04:bd:b5:a7:61:8f:2a:2e:cf:5b:fa:
         17:d3:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:00 2024 by rpki-client on console-fra.rpki-client.org