Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d94c98889c11e85957685af48de5e0fdac74bfe.cer
File:                     7d94c98889c11e85957685af48de5e0fdac74bfe.cer (raw, json)
Hash identifier:          F8nCERjzFbkgxOYxOz+g7IYhQ2olxnNN9hfnc3s/hRk=
Subject key identifier:   ED:6D:9C:F5:BB:6F:B7:89:97:26:69:06:9B:E7:83:C4:D7:B3:B3:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F0955
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d248e9f-ab56-4869-86cf-9888ee34801a/7d94c98889c11e85957685af48de5e0fdac74bfe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d248e9f-ab56-4869-86cf-9888ee34801a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Sep 2018 01:29:18 +0000
Certificate not after:    Thu 24 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 52236
                          IP: 138.0.156.0/22
                          IP: 138.186.212.0/22
                          IP: 168.181.204.0/22
                          IP: 190.106.128.0/19
                          IP: 201.222.16.0/22
                          IP: 2803:5980::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17762645 (0x10f0955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 01:29:18 2018 GMT
            Not After : Apr 24 06:00:00 2025 GMT
        Subject: CN=7d94c98889c11e85957685af48de5e0fdac74bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:a4:78:cd:9e:2c:3c:16:bc:55:dd:bb:7a:
                    e9:e9:fa:12:5f:13:05:ad:e9:c7:39:20:2b:dc:6e:
                    48:81:b2:ed:4c:07:8b:d0:94:f9:1a:1d:45:49:e8:
                    58:5d:ad:98:f2:ed:3a:58:c3:85:05:83:01:7a:4a:
                    b7:bd:17:43:9c:31:ee:97:d9:40:46:83:30:4b:9d:
                    da:20:ca:27:1f:fa:cf:2d:f9:f3:0c:0f:6c:df:9a:
                    03:41:54:94:12:0d:00:a5:12:b1:5c:5d:5c:41:e0:
                    ad:50:e2:5d:12:a1:d8:00:e9:79:42:cb:6a:b7:58:
                    9e:d9:b9:e2:9e:4c:86:16:ba:dc:e3:7b:13:9d:ce:
                    c8:57:c0:36:eb:8f:7b:74:51:31:8e:40:73:53:02:
                    1f:77:3f:1c:69:d0:32:8a:30:cc:df:b4:d9:79:10:
                    fe:e2:12:10:4f:ed:48:72:24:60:bc:9a:7f:30:28:
                    df:36:96:b0:0d:b8:70:39:34:e0:5a:16:2a:6c:37:
                    91:50:9d:02:69:e2:fa:1e:41:97:94:9b:29:2b:22:
                    1d:2a:ab:fe:4e:9c:4d:5e:36:b1:64:cf:91:10:fa:
                    b7:d4:59:f8:b2:02:4d:c2:4d:50:3a:6f:4d:58:7a:
                    c5:fa:37:31:5a:cf:c9:bf:1f:41:cc:06:6e:f8:47:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6D:9C:F5:BB:6F:B7:89:97:26:69:06:9B:E7:83:C4:D7:B3:B3:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d248e9f-ab56-4869-86cf-9888ee34801a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d248e9f-ab56-4869-86cf-9888ee34801a/7d94c98889c11e85957685af48de5e0fdac74bfe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.156.0/22
                  138.186.212.0/22
                  168.181.204.0/22
                  190.106.128.0/19
                  201.222.16.0/22
                IPv6:
                  2803:5980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52236

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:a2:15:e8:fa:17:d1:ac:94:41:f6:0e:54:41:32:d0:a6:
         0f:f3:59:fb:0c:21:cf:49:78:68:be:b8:c9:08:b5:85:f1:c9:
         7b:09:62:3b:b5:5b:2b:d4:de:24:3e:1e:3f:ed:30:d4:e9:a8:
         dc:eb:60:61:63:a6:ff:d6:44:fd:72:b8:d0:2a:be:81:ec:6a:
         99:af:55:35:43:cc:9c:74:8a:2a:9e:a8:13:f7:9f:db:29:d9:
         59:60:4d:29:79:77:8f:98:2d:fa:4b:38:c3:eb:69:62:e8:ea:
         0b:07:d5:32:77:83:af:a7:88:30:a7:63:2a:e0:eb:d0:42:20:
         88:9b:dc:7b:eb:3a:fb:f1:82:76:0e:69:f7:0b:18:2e:c7:90:
         71:d5:05:4c:33:09:4b:93:48:9d:76:f5:3e:3c:3b:e3:6f:ea:
         33:e8:3f:54:71:26:d1:bc:92:21:be:24:33:e7:00:bc:82:6d:
         a2:29:df:a4:38:50:ee:8a:22:db:85:e8:9d:db:24:09:99:87:
         6d:b7:78:b4:55:2e:8e:70:5a:fd:bd:c9:36:98:9c:92:4a:da:
         70:82:68:26:ff:1b:e8:de:fc:5b:be:1e:78:b0:c2:9a:2b:f9:
         bf:0c:f3:92:db:82:30:ad:2e:8f:0c:f3:5d:08:a5:12:3b:9c:
         cf:ac:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:05 2024 by rpki-client on console-ams.rpki-client.org