Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer
File:                     7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer (raw, json)
Hash identifier:          KMi3u9y/Xe6MoqZJNTlvM8W9269iqswiHest9fATyAY=
Subject key identifier:   5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2F745
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 13:27:01 +0000
Certificate not after:    Tue 30 Apr 2024 20:36:11 +0000
Subordinate resources:    AS: 265758
                          IP: 131.196.180.0/22
                          IP: 2803:5bc0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14874437 (0xe2f745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 13:27:01 2020 GMT
            Not After : Apr 30 20:36:11 2024 GMT
        Subject: CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:77:4d:0f:47:bd:c1:14:51:57:9d:39:f4:
                    e9:45:32:e0:1e:3d:28:45:19:57:4b:a5:4c:75:ad:
                    17:91:2e:bb:78:89:7e:5d:67:3e:59:c4:71:d9:30:
                    19:75:65:35:db:2a:12:ae:b4:91:a2:a5:3a:19:a5:
                    e2:38:46:ba:7e:63:29:8e:91:48:03:94:26:3c:20:
                    5f:f5:da:4f:54:4c:59:88:35:5e:59:18:7d:f7:3f:
                    43:30:5d:9e:e1:e7:a9:b3:ea:29:1e:d7:70:48:96:
                    16:4b:5e:d5:e1:8f:10:c7:a8:f1:12:54:83:80:1e:
                    de:d0:8a:14:80:6e:aa:3b:6c:7f:3a:62:f4:c8:ac:
                    5b:b7:29:3d:fe:29:2c:c3:c6:3b:ab:5e:42:17:d6:
                    a4:28:68:47:3a:24:57:59:1b:ce:6a:8c:9b:0c:87:
                    2d:11:1f:9a:66:d2:3c:02:62:66:31:70:02:77:c9:
                    33:82:1e:1d:88:ee:14:09:5d:0e:83:ea:6f:e7:82:
                    19:d0:8c:e1:12:73:95:b8:38:83:a9:25:92:23:fc:
                    14:4a:1d:d3:39:89:07:3b:c8:9a:90:15:2e:ed:b1:
                    e3:68:47:d3:04:dc:c1:59:6b:1d:a7:92:cb:55:f0:
                    cc:f2:49:bd:07:50:b0:48:d3:e8:df:ce:ed:4f:ab:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.180.0/22
                IPv6:
                  2803:5bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265758

    Signature Algorithm: sha256WithRSAEncryption
         22:75:84:24:fb:0d:eb:53:79:47:69:f4:15:87:6c:52:53:15:
         f1:e7:1c:d6:a7:54:ba:90:81:d8:1c:af:d2:c0:f7:f5:77:6b:
         b2:ae:3d:d9:76:71:39:f8:91:72:ab:bc:43:d9:6a:0d:fc:6b:
         6d:b8:f9:94:0e:83:c6:54:ba:bf:dc:eb:7b:0a:2f:d3:d5:b4:
         62:f6:3b:b9:a9:b4:59:d7:c4:d8:8c:eb:99:f5:37:fa:81:96:
         ca:d5:00:63:5c:e9:14:ae:4c:76:13:4a:29:17:dd:e9:8d:bb:
         39:1e:3a:8f:46:b6:5b:23:bb:ed:c0:d6:69:b2:42:06:d8:09:
         23:94:08:06:a9:88:3e:60:a9:a5:e5:af:1d:66:99:30:4e:54:
         78:ce:dd:06:aa:50:25:41:3d:33:e8:20:a8:9c:76:a5:19:cb:
         c6:9d:c4:66:66:75:57:29:f3:86:15:a5:d5:de:9c:eb:1b:a4:
         67:3d:b6:ee:44:97:d7:00:70:8f:e4:d8:b6:89:2d:de:a7:3e:
         ca:e2:18:da:96:ac:d0:10:ed:76:cf:fd:3a:f3:a5:3a:c0:e3:
         53:8e:3c:49:b7:d6:6a:47:f3:52:4d:63:10:e8:f6:84:5e:5a:
         37:b6:de:b2:da:e0:04:55:46:ce:50:4a:a8:d0:d3:00:65:16:
         f1:8c:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:55 2024 by rpki-client on console-fra.rpki-client.org