Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f89fa4fc43e783372b14c8fc33ac921186ae859.cer
File:                     5f89fa4fc43e783372b14c8fc33ac921186ae859.cer (raw, json)
Hash identifier:          ndVJmsgFjFynT5UCZVAxdcp2Qwe6p2HTjXqCPk56r9U=
Subject key identifier:   15:41:72:1B:1A:96:86:8A:5D:C9:07:39:C4:B8:F8:36:39:F5:77:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC7708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/5f89fa4fc43e783372b14c8fc33ac921186ae859.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:23 +0000
Certificate not after:    Fri 05 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 27920
                          IP: 181.115.0.0/17
                          IP: 190.105.128.0/20
                          IP: 190.107.128.0/19
                          IP: 200.107.120.0/21
                          IP: 201.190.0.0/18
                          IP: 2803:4600::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15496968 (0xec7708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:23 2017 GMT
            Not After : Jul  5 15:00:00 2024 GMT
        Subject: CN=5f89fa4fc43e783372b14c8fc33ac921186ae859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:39:ca:bd:9e:87:5c:ba:2a:92:30:16:f1:
                    d8:fd:3b:fe:40:27:3b:38:b0:f3:89:2b:c6:66:62:
                    7c:27:a1:f0:34:13:82:7e:07:3b:ac:1b:8a:8c:aa:
                    f5:55:a4:70:c0:b5:2c:cf:f4:94:29:2a:4f:0f:08:
                    e8:3f:f9:c9:ce:37:de:c1:a2:39:a2:87:9c:b6:9a:
                    84:a5:ff:06:83:73:ae:09:ca:86:a9:27:d9:76:d3:
                    93:d1:91:f6:4b:97:f2:d1:bc:e2:6e:f5:92:6b:d9:
                    c0:ce:b4:2b:96:6d:33:3d:05:d1:06:5d:6a:43:ac:
                    0f:e8:2c:73:ff:9f:24:e0:03:6d:c2:e5:e3:45:7d:
                    c2:95:fd:ed:57:30:63:43:d7:e1:27:c2:84:1d:be:
                    3f:cb:ca:14:94:d7:b3:6c:73:69:8e:1f:31:1c:fc:
                    d6:97:18:16:27:f1:b2:50:6c:f0:f1:02:ab:06:39:
                    0c:cb:ae:af:95:d7:e6:be:5d:ca:48:2c:cd:0b:be:
                    07:6b:41:0c:dc:53:92:76:8c:6f:c6:02:59:f4:0e:
                    9d:d4:f9:f3:d3:11:37:7b:86:db:4f:5a:12:74:ba:
                    44:ea:bf:d1:c5:d3:87:be:5d:52:86:99:24:78:ce:
                    3e:c0:db:cc:86:b9:af:1b:3d:49:0c:9e:f8:e7:e7:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:72:1B:1A:96:86:8A:5D:C9:07:39:C4:B8:F8:36:39:F5:77:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/5f89fa4fc43e783372b14c8fc33ac921186ae859.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.115.0.0/17
                  190.105.128.0/20
                  190.107.128.0/19
                  200.107.120.0/21
                  201.190.0.0/18
                IPv6:
                  2803:4600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27920

    Signature Algorithm: sha256WithRSAEncryption
         83:24:19:53:7d:9b:10:81:9d:75:37:76:f7:38:87:5d:69:f5:
         fd:a4:e2:56:ce:be:17:ab:52:6c:d7:b5:db:b5:35:a9:e3:9b:
         fc:9a:78:1e:d3:59:31:86:16:a8:78:5e:01:c7:a0:ae:17:25:
         4d:f2:85:28:f9:db:3f:31:08:de:f3:c2:58:df:7a:ea:6e:1f:
         a8:7c:a3:29:25:68:20:6d:2b:c7:de:ba:7a:ff:d8:ef:1b:8b:
         98:eb:b9:76:ab:20:ec:57:08:18:ed:5e:4b:89:87:67:4c:f7:
         34:a0:fa:c3:39:74:a2:31:f4:7a:5c:09:75:2c:fb:78:f0:1d:
         f5:c1:63:78:c1:b6:13:51:e8:6c:a3:46:9a:02:ee:b3:11:07:
         d1:90:f5:27:3d:f3:88:e7:4b:ea:52:d2:c8:68:f6:5f:db:ad:
         ff:0a:de:71:2d:26:cc:cb:2f:cc:85:d3:6f:87:85:8f:87:25:
         e4:75:95:cf:69:53:d7:01:65:92:b4:7e:21:2d:ab:4c:19:01:
         20:c1:3e:14:6f:e4:9b:9c:1f:d4:52:02:c5:11:1b:d5:88:e6:
         90:81:6f:65:21:4a:bd:b8:fb:0e:f2:2a:26:ce:26:d0:58:26:
         fd:08:89:90:34:8e:d0:62:00:1a:34:6f:ae:2d:53:c0:8a:a5:
         86:9e:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:57 2024 by rpki-client on console-ams.rpki-client.org