Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
File:                     83e071b73134e99e61c3db9163fa966ff3118e3c.cer (raw, json)
Hash identifier:          JMd4gPfxBSAObXXN+91fwOfcpRtLlVzxAKJS4FynCj4=
Subject key identifier:   45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE8523
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 13 May 2019 12:56:14 +0000
Certificate not after:    Wed 13 Mar 2024 15:47:12 +0000
Subordinate resources:    IP: 45.175.64.0/22
                          IP: 2803:bc60::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14583075 (0xde8523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 13 12:56:14 2019 GMT
            Not After : Mar 13 15:47:12 2024 GMT
        Subject: CN=83e071b73134e99e61c3db9163fa966ff3118e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:e0:20:13:91:6f:ba:86:d0:d4:04:b3:b5:
                    58:53:b5:e3:34:db:ee:ea:e7:61:7f:2a:ed:05:07:
                    a9:7c:d6:12:4c:a5:af:20:93:c8:f1:11:71:6a:8d:
                    df:4e:2c:28:ee:71:e7:cb:48:4e:84:46:e1:a6:2a:
                    67:66:d1:95:f7:06:37:72:58:50:c9:9a:6e:d2:56:
                    52:dd:de:67:8c:2f:96:25:2b:a2:2f:91:c0:e8:12:
                    f5:da:5e:5f:2b:40:9b:a4:47:53:09:77:d7:c0:6e:
                    32:cb:0e:a5:0f:17:f3:f6:b4:45:34:18:1c:14:e2:
                    f9:a8:a6:06:b8:2d:92:60:da:82:ff:19:fb:10:95:
                    88:7f:d9:c7:51:17:c9:be:a8:6b:a6:5c:eb:bf:a2:
                    70:7e:4f:27:3a:ec:56:10:5b:b6:b1:5e:d9:48:40:
                    a8:c3:64:85:46:8a:88:d1:58:19:5b:47:8d:53:de:
                    b4:9f:42:4d:6e:e2:8c:84:d8:67:8e:2f:1f:4b:d0:
                    83:b3:af:2f:f3:4c:df:0a:65:dc:cf:90:7a:fc:4d:
                    b7:95:ea:12:52:7c:d6:06:d1:f8:4b:6f:e1:22:1c:
                    a5:18:7a:f0:f2:a8:18:92:c0:0e:d8:5f:18:6f:6b:
                    37:7e:00:bd:ed:8f:c7:ab:e3:5d:0f:4d:8f:af:28:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.64.0/22
                IPv6:
                  2803:bc60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:fa:87:f8:0c:ce:8d:63:19:cd:2a:c9:27:f0:e2:e8:dd:
         1c:26:f9:fa:30:ba:98:0d:f9:8e:19:16:f0:90:4f:a5:9a:ca:
         75:16:8b:62:4e:51:d0:40:46:cc:7e:12:e9:77:a5:f0:79:a4:
         7b:90:3c:56:d5:e1:be:39:3b:62:e0:11:89:ab:6c:dc:01:4e:
         93:cd:dc:b4:3e:d1:60:1e:75:ca:14:68:4a:fb:84:e6:e3:37:
         b4:e3:e3:2d:c3:73:30:54:f9:a5:b1:75:40:18:5b:4d:38:16:
         3a:53:d1:05:48:82:26:67:60:4c:85:f9:80:76:5b:f4:e9:00:
         82:bd:49:05:f9:94:76:42:cb:26:63:d3:eb:ba:87:db:5a:57:
         1e:26:7a:47:c6:6f:e6:d4:6d:04:c4:3b:c2:11:16:35:5f:1c:
         05:4c:8c:1e:e8:2f:06:86:ba:b3:f4:af:c0:38:0c:90:9d:0d:
         1c:19:10:b2:8c:ec:1f:b0:e7:1b:ca:79:a7:a8:81:fc:e5:06:
         46:06:00:57:be:66:ab:d1:19:62:f7:42:94:a6:41:60:94:8b:
         c9:0e:ab:1e:e3:86:e0:b6:25:70:6f:35:aa:2d:20:b7:66:56:
         75:15:e5:98:64:0a:93:2b:c7:72:13:d9:dc:0b:8c:7b:03:1b:
         b1:fe:3f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 11 00:55:47 2023 by rpki-client on console-ams.rpki-client.org