Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.cer
File:                     8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.cer (raw, json)
Hash identifier:          LIrI40pU5UbvmyQlc7M+aWMBODr4CHlmFADw/b2++8g=
Subject key identifier:   06:37:D9:3C:2F:AB:14:CB:DF:82:2A:F0:DC:67:51:1A:2A:BF:9D:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E18946
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Aug 2019 15:42:42 +0000
Certificate not after:    Sun 26 May 2024 19:22:31 +0000
Subordinate resources:    AS: 269734
                          IP: 45.180.240.0/22
                          IP: 2803:f160::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14780742 (0xe18946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 21 15:42:42 2019 GMT
            Not After : May 26 19:22:31 2024 GMT
        Subject: CN=8a5b0be2b83d31931f58011a4ff6a710bbccd0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:79:b3:2a:10:aa:cc:ce:c6:42:7a:06:eb:
                    3a:63:e1:db:fb:01:50:e2:af:4b:17:47:fd:a1:44:
                    20:92:ff:a6:ad:49:82:64:5b:1b:5e:ab:5e:76:aa:
                    d7:dc:ca:2b:e6:e4:3b:e5:62:3a:c4:7d:01:7f:ec:
                    79:38:64:c7:a0:2d:de:e0:75:34:28:9a:41:a9:08:
                    9b:63:60:88:f3:15:31:f9:b1:ab:7a:c6:59:21:65:
                    88:ed:36:72:1d:1a:d1:2b:c5:c5:9b:76:40:2d:49:
                    91:a5:40:cd:08:7c:18:3f:f2:db:fa:07:1a:4d:8f:
                    d4:e2:f8:e8:ae:0d:ae:79:fd:9f:6c:6b:98:4a:a2:
                    da:43:81:59:43:ea:a8:18:25:7a:37:a1:7e:e5:21:
                    bb:1d:05:0c:58:c3:f9:ca:62:b2:05:0f:4d:68:8d:
                    79:dc:45:d9:f8:8f:8e:a6:80:75:3a:1c:6f:0c:8e:
                    49:67:7f:a6:4f:84:fa:45:1f:5c:c7:02:95:5c:75:
                    fc:8c:73:12:a6:bc:54:9c:f5:1f:4b:3b:d6:4b:f4:
                    35:58:01:ef:17:23:43:11:6a:5d:1a:5a:a7:8c:9c:
                    a4:7c:d0:f4:cf:7e:24:03:8d:58:40:26:22:e2:ba:
                    8b:61:97:1b:cc:ad:8c:7c:94:78:22:cd:ec:70:f7:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:37:D9:3C:2F:AB:14:CB:DF:82:2A:F0:DC:67:51:1A:2A:BF:9D:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.240.0/22
                IPv6:
                  2803:f160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269734

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:67:c7:f3:bf:de:d7:fd:5e:f1:40:05:a2:11:17:d2:a0:
         79:61:88:0e:0f:bf:a0:9e:1d:b7:10:c8:d6:08:2d:17:73:cb:
         b8:77:92:d9:f3:0d:8f:19:c8:0e:54:c4:15:a7:cd:42:5f:62:
         c8:a6:34:87:d2:72:b0:cc:59:ca:3f:48:81:90:0f:fd:55:d1:
         d4:29:51:13:cd:b5:c5:ab:62:c4:0f:4b:07:45:24:6c:9a:e9:
         93:96:fa:f7:66:d2:f0:3b:b6:ff:12:f8:cd:93:05:27:99:29:
         f0:59:0c:ee:bd:5f:23:9c:78:00:9a:84:d6:22:3e:c5:39:40:
         ff:85:ed:45:a1:2f:4a:5f:77:85:c1:34:cc:d8:da:26:94:65:
         30:09:6a:19:6e:c6:12:0e:fd:a4:b4:27:a5:d4:f3:4d:56:ac:
         5b:2a:2c:11:73:77:a7:de:66:b1:21:c9:1e:fa:fe:50:03:34:
         34:32:17:f6:e5:9b:92:33:d1:47:7f:16:98:c2:8c:d2:34:05:
         21:a4:04:f0:fa:7a:95:3b:74:b1:ea:dd:b1:64:3f:a5:e8:40:
         15:23:55:cf:74:36:f1:87:71:e5:46:3d:0b:46:c1:bc:65:8d:
         ba:86:0e:1e:44:ec:d5:59:21:c8:e9:b6:38:5d:e8:d1:cf:ac:
         e9:f1:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:45 2024 by rpki-client on console-fra.rpki-client.org