Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91b1e48227e2bbda9d2cb732746aa69540bc1c54.cer
File:                     91b1e48227e2bbda9d2cb732746aa69540bc1c54.cer (raw, json)
Hash identifier:          dCxtKxNahZW/cF0TJ8fKJFZP611bxvUwsvOIDo68UfQ=
Subject key identifier:   90:4A:D1:DB:DF:7A:3D:25:8B:0C:7C:B1:B4:73:F4:2B:4A:3D:38:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010423EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/91b1e48227e2bbda9d2cb732746aa69540bc1c54.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2019 19:49:35 +0000
Certificate not after:    Thu 16 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 52320
                          IP: 138.0.40.0/22
                          IP: 138.204.236.0/22
                          IP: 200.16.68.0/22
                          IP: 209.127.212.0/24
                          IP: 2800:6e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17048555 (0x10423eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 19:49:35 2019 GMT
            Not After : Jan 16 05:00:00 2025 GMT
        Subject: CN=91b1e48227e2bbda9d2cb732746aa69540bc1c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:c8:51:23:ec:58:47:f9:e2:fe:6e:8b:f7:
                    65:9c:67:f3:84:ea:2c:cc:44:e4:1d:0e:60:54:2f:
                    25:69:b0:94:d9:b6:66:86:76:c0:bb:1d:75:9f:ab:
                    99:83:e8:52:0e:d8:23:e3:c6:66:70:3f:00:03:56:
                    79:5c:2c:f1:72:5a:51:c7:97:10:78:19:ab:7e:d3:
                    0e:d7:51:da:41:4a:d9:5f:c7:b0:bb:4c:43:f2:ca:
                    55:5a:c2:52:96:15:1b:de:72:3f:3e:a8:30:9e:0d:
                    3b:ec:58:ce:6a:68:90:c4:0f:aa:60:67:4f:8c:ea:
                    d7:6f:c2:96:a4:49:02:dc:4a:aa:f1:77:8d:96:5b:
                    03:50:1e:2e:f2:5e:25:e9:ab:8d:7b:0e:60:0a:85:
                    ed:6b:80:07:55:f6:6d:2e:21:27:f3:49:eb:c0:ab:
                    b1:db:15:a1:a7:23:c7:8e:b4:7b:10:e3:c5:30:da:
                    5c:da:48:6e:88:1b:96:26:53:60:3c:8c:3c:86:a0:
                    a7:19:94:a6:d1:33:ce:87:45:2e:dd:75:d2:67:96:
                    ed:44:85:f2:39:01:22:14:1e:9e:0f:8e:5e:d3:1c:
                    b6:25:2b:4a:29:b6:cb:24:71:c8:9e:38:b5:79:c3:
                    04:2a:20:e2:60:01:22:0d:0a:01:8e:c1:5f:81:29:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:D1:DB:DF:7A:3D:25:8B:0C:7C:B1:B4:73:F4:2B:4A:3D:38:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/91b1e48227e2bbda9d2cb732746aa69540bc1c54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.40.0/22
                  138.204.236.0/22
                  200.16.68.0/22
                  209.127.212.0/24
                IPv6:
                  2800:6e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52320

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:5b:85:a9:36:22:3d:9f:52:80:4f:cd:f9:19:34:93:46:
         45:c1:5b:40:86:ed:a8:a0:5f:44:ea:6a:af:7c:b2:f8:e1:21:
         d1:0a:05:d2:19:17:f7:11:50:e2:13:51:a6:1b:0c:da:47:af:
         68:b4:cd:4d:43:c3:76:2f:4f:76:47:e0:3e:e3:30:08:ec:6b:
         3f:0a:68:6d:e4:31:45:6a:f7:c2:6c:66:7e:bf:52:80:05:7d:
         41:97:d6:02:b1:a2:00:11:fc:4c:c5:3b:ca:07:e3:b2:03:cc:
         12:e3:7e:eb:78:87:b4:ac:94:66:8d:44:a6:65:9c:d4:bf:1b:
         5e:38:da:ef:6b:ab:c8:93:ff:b0:41:e9:49:b0:01:73:9b:d2:
         f7:b3:3e:9c:15:3d:50:36:5a:91:93:1d:59:28:5d:75:8f:f7:
         50:cd:45:ef:8a:93:4f:5d:fb:f5:d1:30:77:86:d3:c7:ba:a0:
         02:63:5e:28:79:f8:a7:ca:29:5a:3f:fe:44:85:e3:23:e2:b6:
         bf:18:78:51:c3:7e:bf:6b:6d:a2:a3:f6:0a:66:1a:f7:00:33:
         ca:3c:fc:58:f6:c2:f0:35:62:9a:a3:d6:88:90:e2:88:6f:b2:
         c6:4e:a9:48:66:8c:f7:d8:09:18:3f:e2:d7:5d:f3:fa:e9:14:
         38:17:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:18 2024 by rpki-client on console-fra.rpki-client.org