Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
File:                     88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer (raw, json)
Hash identifier:          PjLhR57Wx0uEQTywfquq1i31V90ym+oUVF6Fb0xM+S8=
Subject key identifier:   FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E32741
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:19 +0000
Certificate not after:    Fri 03 May 2024 06:00:00 +0000
Subordinate resources:    AS: 28075
                          AS: 61515 -- 61516
                          IP: 131.72.0.0/22
                          IP: 138.204.0.0/22
                          IP: 143.202.192.0/22
                          IP: 168.90.8.0/22
                          IP: 168.194.204.0/22
                          IP: 181.118.64.0/18
                          IP: 186.189.64.0 -- 186.189.68.255
                          IP: 190.113.128.0/18
                          IP: 198.12.40.0 -- 198.12.63.255
                          IP: 201.190.128.0/17
                          IP: 2803:6600:: -- 2803:6604:ffff:ffff:ffff:ffff:ffff:ffff
                          IP: 2803:c140::/32
                          IP: 2803:ea40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14886721 (0xe32741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:19 2017 GMT
            Not After : May  3 06:00:00 2024 GMT
        Subject: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:0c:4b:d3:a1:ab:2c:4e:46:90:d1:8c:6f:
                    37:e8:8f:96:5f:95:02:e8:64:c6:9f:b9:d7:04:26:
                    d4:54:66:cb:28:ea:9f:81:c4:2e:2f:d4:c9:2e:6f:
                    f2:39:44:71:8b:24:55:0c:5c:8b:42:95:12:2f:cb:
                    dc:ea:0a:65:ef:e4:3d:69:4a:68:ef:c0:7c:13:bb:
                    14:7e:67:84:cd:fa:86:6c:1f:a4:a8:1d:65:4b:f0:
                    86:26:cf:82:10:be:1a:f7:83:4a:64:70:af:f5:39:
                    c8:0e:46:64:5a:18:ff:bf:c5:7e:e9:20:7a:88:4d:
                    84:4f:57:53:48:cf:31:5e:ed:23:50:b0:6a:1d:f6:
                    b7:cf:c5:d3:74:f8:6a:64:d1:65:cd:f2:ed:c2:c1:
                    1f:bc:bb:74:b5:71:01:62:f8:de:95:73:33:ba:51:
                    56:65:23:69:27:26:4d:d5:80:57:09:f5:ec:80:c8:
                    6d:74:30:4f:e1:bb:33:b8:fd:ec:75:7d:21:a7:98:
                    ca:6d:bb:b4:d6:9c:db:e2:0a:ed:61:42:64:7f:8f:
                    51:d2:2c:38:f9:01:29:95:c0:62:2d:46:0a:00:58:
                    43:94:6e:0a:fc:18:c6:ea:59:c9:a5:85:f8:20:01:
                    34:80:82:0c:90:7b:f0:63:ec:fe:c2:81:04:67:f1:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.0.0/22
                  138.204.0.0/22
                  143.202.192.0/22
                  168.90.8.0/22
                  168.194.204.0/22
                  181.118.64.0/18
                  186.189.64.0-186.189.68.255
                  190.113.128.0/18
                  198.12.40.0-198.12.63.255
                  201.190.128.0/17
                IPv6:
                  2803:6600::-2803:6604:ffff:ffff:ffff:ffff:ffff:ffff
                  2803:c140::/32
                  2803:ea40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28075
                  61515-61516

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:d2:fa:50:87:6c:6a:5c:5f:df:e1:d5:31:c9:99:73:94:
         96:34:71:4e:a4:80:62:76:79:43:c2:a7:37:6f:5e:cb:e1:ed:
         03:72:96:6a:9a:f7:50:27:9e:4d:b2:f1:f0:75:3e:fc:d6:50:
         98:93:22:cb:fd:be:4f:f4:78:51:8b:a9:5a:03:63:75:36:f1:
         37:c3:9e:05:03:ef:25:f9:bb:39:fe:cb:d1:e6:ee:1a:ae:21:
         80:6d:c1:3d:e4:98:93:32:7b:d1:59:7c:07:5f:ff:b8:62:18:
         4f:d8:38:f6:09:1f:64:5e:87:57:10:d0:3c:9b:25:f1:26:28:
         5a:37:09:21:1f:d7:29:52:1e:a5:c8:d7:db:c9:b1:2b:a5:83:
         2d:63:72:66:5d:d4:34:49:00:45:9b:04:a2:10:9a:e8:e8:0a:
         84:fa:d2:96:ce:b9:75:10:cc:02:08:5c:46:3b:88:c0:e0:da:
         2e:6f:e4:dc:ab:c4:7b:7a:75:2e:cc:ff:f2:51:03:c0:35:1a:
         23:aa:69:da:1d:52:ce:9f:6e:da:c0:6b:96:55:97:67:27:09:
         15:34:e5:bc:eb:ac:d6:79:bb:ed:19:94:cc:7a:2d:dc:ac:f7:
         fb:c1:42:ee:0e:6c:e3:fe:a5:f3:aa:58:16:4d:64:28:0c:8a:
         ae:9e:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:13:37 2024 by rpki-client on console-ams.rpki-client.org