Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c9a685c651c7dbc1b745783be477a3e3d647d2c.cer
File:                     5c9a685c651c7dbc1b745783be477a3e3d647d2c.cer (raw, json)
Hash identifier:          JOqbGpcX1iwplHuR+I3aWPwseeg/lqjRnnQAlbIJ1h8=
Subject key identifier:   06:F0:F8:7C:30:B4:36:12:2F:12:23:43:FC:82:A1:80:FD:A7:55:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2FCA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/5c9a685c651c7dbc1b745783be477a3e3d647d2c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Mar 2021 20:02:00 +0000
Certificate not after:    Mon 26 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 262159
                          IP: 138.36.76.0/22
                          IP: 143.137.112.0/22
                          IP: 168.228.132.0/22
                          IP: 170.239.120.0/22
                          IP: 179.60.112.0/20
                          IP: 190.211.224.0/20
                          IP: 2803:2880::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15924388 (0xf2fca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 22 20:02:00 2021 GMT
            Not After : Aug 26 05:00:00 2024 GMT
        Subject: CN=5c9a685c651c7dbc1b745783be477a3e3d647d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:18:d5:bf:84:ed:fd:1a:52:c5:a9:2d:6e:
                    db:d4:58:94:59:2d:d8:4a:95:fc:dd:44:c5:5d:65:
                    81:1f:02:16:d8:48:a1:d4:eb:15:a5:26:7c:76:53:
                    60:70:5f:04:cc:a2:90:eb:3a:65:f8:bd:a4:c7:e1:
                    62:49:0b:c1:f8:96:43:f5:57:f2:05:bc:e2:c1:6a:
                    10:3c:23:2a:be:c8:1c:20:8c:c1:c9:74:29:04:8e:
                    e5:6a:4b:39:bf:b4:0a:7f:4c:f2:40:89:de:5d:f2:
                    53:18:86:30:9f:96:0c:fa:c3:47:ea:79:5f:84:39:
                    5c:a2:d6:30:7e:08:c3:cf:eb:7a:f3:42:54:d9:96:
                    25:bb:42:ef:f9:7d:45:bc:be:1e:a8:f1:e2:a7:0f:
                    e6:3c:7b:fd:7c:7f:6b:7d:a3:df:7e:37:78:80:bd:
                    05:9c:b1:1b:43:b7:1c:6e:c5:19:4c:cb:62:e9:23:
                    54:64:02:6c:b4:32:31:4d:45:a2:eb:fa:26:38:26:
                    4b:67:b0:75:d6:9e:c3:22:af:14:7e:39:51:ba:de:
                    3c:74:34:fc:90:16:6e:a3:15:58:5e:a4:10:d1:be:
                    c6:a1:e9:a2:43:93:07:8e:f4:f1:1e:bd:0a:ae:d5:
                    72:87:63:bf:ee:97:c2:ca:55:54:b9:4f:a6:b6:d8:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:F8:7C:30:B4:36:12:2F:12:23:43:FC:82:A1:80:FD:A7:55:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/5c9a685c651c7dbc1b745783be477a3e3d647d2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.76.0/22
                  143.137.112.0/22
                  168.228.132.0/22
                  170.239.120.0/22
                  179.60.112.0/20
                  190.211.224.0/20
                IPv6:
                  2803:2880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262159

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:b1:ac:4f:46:86:79:dc:51:d2:12:68:5a:98:89:65:ef:
         3d:66:6d:41:01:af:94:f8:ab:cd:d8:a7:11:ae:36:b4:57:6c:
         a8:19:8d:f3:e0:c4:80:9b:b8:3f:5f:b1:cb:3f:0a:92:f7:a2:
         4b:72:b6:c2:52:0a:89:aa:a1:85:13:0f:2a:17:0c:ef:b5:71:
         3b:bf:a3:04:11:00:cd:fc:3b:4e:d2:1b:40:63:78:57:e3:8f:
         1b:11:53:e1:80:2c:96:34:fc:18:b7:6b:67:4d:59:53:57:5e:
         f3:70:0b:be:b0:e5:d5:22:56:e8:6f:65:e2:9c:ae:d3:0e:97:
         59:4c:30:89:d1:7b:6e:db:ee:20:ee:12:8a:32:eb:56:10:a3:
         6c:b4:38:9c:4d:d2:4a:4d:d2:48:e4:a4:1f:42:b1:8f:24:08:
         8f:db:88:a6:0c:fe:b9:20:2a:f8:f1:7c:47:f1:13:91:75:6f:
         fb:f9:15:7b:98:3f:59:f6:5c:9e:99:08:7c:3a:b6:74:11:d0:
         e0:8a:4b:f1:cb:c2:8e:92:03:d3:77:b6:ab:de:05:28:e2:b0:
         a7:58:bd:ac:28:bc:b8:8b:30:27:73:f9:61:83:e1:55:98:a5:
         db:ad:ad:8e:74:0f:7c:1e:f6:b2:af:0e:d0:4d:37:51:4f:85:
         d4:cb:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:32:40 2024 by rpki-client on console-fra.rpki-client.org