Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cb42c8f6d6731d93e137b62963133b0a6c2c089.cer
File:                     5cb42c8f6d6731d93e137b62963133b0a6c2c089.cer (raw, json)
Hash identifier:          ztyXMNsFIt+bRl08BoYiLaRxszkaEoBzvYrOkafz40I=
Subject key identifier:   AE:3A:EC:72:DF:99:B3:36:7F:32:25:0C:92:26:BD:1E:36:C2:64:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D8CCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/5cb42c8f6d6731d93e137b62963133b0a6c2c089.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Fri 11 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 27908
                          IP: 190.7.160.0/20
                          IP: 2803:d880::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17665231 (0x10d8ccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Apr 11 06:00:00 2025 GMT
        Subject: CN=5cb42c8f6d6731d93e137b62963133b0a6c2c089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:25:cf:46:db:bd:18:27:ab:59:df:90:5b:
                    5d:b3:c1:41:e9:cf:b2:a6:3c:1d:df:f7:07:98:81:
                    7e:60:27:06:b5:00:b4:ae:b0:e0:1d:72:4f:0c:7e:
                    e1:40:4d:16:88:cf:fe:50:cc:96:db:f0:2b:ce:df:
                    ca:6a:59:b5:66:58:d5:aa:bb:10:a6:63:10:be:6f:
                    64:dc:32:86:2f:34:01:b1:7b:0a:02:09:7f:d1:57:
                    6b:d5:61:2d:f8:56:d4:e7:86:2d:d5:5c:f7:66:ab:
                    5e:e2:f4:48:5a:47:c2:78:2d:1f:1b:61:81:38:6d:
                    cf:15:44:a5:51:1e:96:23:d3:87:59:68:f6:fb:ae:
                    f8:06:b4:cc:94:73:9f:76:63:a6:8e:c6:dd:4f:04:
                    b0:4c:78:3f:75:82:96:16:7b:2a:b0:a1:bf:8b:84:
                    8a:21:4f:07:ad:cb:d8:e1:ab:40:4f:54:22:f5:9a:
                    37:98:b5:c2:e2:66:3c:60:e7:be:58:99:51:9a:63:
                    3f:d0:6e:91:58:80:80:15:50:32:c9:ef:f8:6e:17:
                    6d:b1:60:3a:87:a3:4e:48:82:e3:50:0e:3b:7c:38:
                    4f:a9:f4:10:46:d5:65:50:01:2e:28:50:bb:b4:0e:
                    f3:3d:ea:93:c5:00:5d:46:75:a2:28:58:72:22:cd:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:EC:72:DF:99:B3:36:7F:32:25:0C:92:26:BD:1E:36:C2:64:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72ed62b6-6e7a-4c8d-a605-8de8055612a1/5cb42c8f6d6731d93e137b62963133b0a6c2c089.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.160.0/20
                IPv6:
                  2803:d880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27908

    Signature Algorithm: sha256WithRSAEncryption
         19:6b:88:11:14:96:b8:27:55:6e:02:01:66:31:fb:9a:cc:8b:
         32:60:0d:62:9a:0d:13:45:55:26:9b:08:c7:c4:3e:50:2f:3c:
         22:9f:8d:43:99:d5:69:87:a4:b8:90:ee:20:7b:19:cd:a5:11:
         46:6d:04:38:bd:89:40:45:54:0a:18:b5:dd:9e:70:83:f0:ac:
         fa:43:83:5e:05:44:8b:e4:66:50:bc:9b:62:22:53:b2:e8:ed:
         87:a2:55:5a:f8:9d:64:eb:dd:57:dc:1a:e4:cc:16:23:05:d2:
         60:16:bb:99:4f:8c:99:dd:fd:2d:4d:6d:cf:d1:a9:1b:d4:f5:
         87:6d:76:e6:bd:19:f9:bf:27:64:51:0c:0f:f9:dc:8c:08:cf:
         ad:7c:a4:05:8f:85:87:72:5c:ea:b9:1e:af:3d:31:91:38:6f:
         47:f9:3f:43:b9:3b:eb:79:0f:9b:e0:cf:23:71:bf:a4:a9:bb:
         5d:93:23:8f:9a:a3:b1:64:89:34:15:ce:d2:95:a7:8c:e8:58:
         0c:8c:96:2c:b0:7b:63:c0:f8:f3:c4:e3:e2:8b:38:d4:be:8e:
         1f:8f:5b:85:b8:ea:a5:81:e1:ca:2b:42:8d:20:3f:4f:a3:86:
         25:45:6c:8b:fa:f9:3d:c8:ed:d3:db:d0:ad:7b:9e:59:84:cd:
         22:79:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:56 2024 by rpki-client on console-ams.rpki-client.org