Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
File:                     9288132902323827f44806de3061debd517a8fd9.cer (raw, json)
Hash identifier:          0VnveYlAaQeN/KL7mWKx7J0dQyVllVJu43BB3fYgqqM=
Subject key identifier:   AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CE43F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2018 08:49:58 +0000
Certificate not after:    Sun 27 Aug 2023 20:24:58 +0000
Subordinate resources:    AS: 265858
                          IP: 45.225.204.0/22
                          IP: 2803:7a20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jun 2023 11:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13517811 (0xce43f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 26 08:49:58 2018 GMT
            Not After : Aug 27 20:24:58 2023 GMT
        Subject: CN=9288132902323827f44806de3061debd517a8fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:30:ac:f2:ed:fa:aa:f1:7f:35:71:f0:6d:
                    a1:f1:27:d5:33:a6:5a:74:00:42:7c:4d:f2:bf:4a:
                    25:fd:47:98:89:24:1c:48:d7:9d:0a:45:83:9e:23:
                    ec:2c:15:3f:b4:07:d3:db:76:17:41:53:e0:fd:73:
                    e1:db:cb:d6:0f:84:39:c6:c7:b3:b7:0f:9d:0a:bd:
                    65:a5:07:22:14:05:b6:ee:6a:f6:c6:74:62:1d:79:
                    bb:22:49:c0:50:9d:15:48:ad:1b:d0:0f:a1:d2:bb:
                    79:86:74:31:88:dd:c6:de:6a:54:17:42:f3:a6:02:
                    ea:a8:a5:49:f7:97:fe:96:df:b1:61:05:8a:2d:64:
                    83:4a:d5:13:94:10:49:30:82:f0:69:02:37:97:e5:
                    86:63:1c:f1:49:57:a2:70:ef:01:56:ec:54:92:a2:
                    a0:e1:8e:1f:45:62:48:1d:80:0a:8b:9b:4c:36:25:
                    79:00:ac:4f:04:47:d7:29:a5:13:d1:bc:ce:c5:8d:
                    e6:b2:5a:e8:52:f4:2a:b6:0a:e8:cb:9d:bd:cc:1e:
                    ee:ca:8e:b2:fc:bc:75:c5:01:97:32:9e:8f:89:d7:
                    6c:d5:e5:47:a3:39:e7:ed:1d:aa:f0:22:77:0c:d2:
                    4d:7e:39:d0:aa:0c:69:6a:44:c5:8a:3e:d1:90:57:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.204.0/22
                IPv6:
                  2803:7a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265858

    Signature Algorithm: sha256WithRSAEncryption
         14:49:0b:21:5e:8c:6a:33:7b:aa:e5:d6:66:16:89:3b:f1:7e:
         ef:18:0e:18:cd:72:eb:36:54:59:d5:48:45:36:38:b1:4c:e0:
         11:83:3f:b6:46:23:1b:e8:94:5f:63:be:5b:46:56:5f:fc:e6:
         da:c9:3f:d1:06:85:c2:9e:24:66:e8:d1:6b:3b:28:fd:c9:c5:
         ce:6a:41:08:ed:7f:11:cf:98:82:b9:68:d5:49:66:1f:4f:65:
         bc:f9:2c:71:83:a0:1a:fa:11:3f:c2:20:64:5a:29:8f:29:da:
         06:e4:8a:33:0c:8a:d9:cc:ec:93:1c:58:3e:f6:45:fc:58:86:
         8b:91:ba:1b:17:50:39:46:a0:66:de:72:71:99:18:60:36:90:
         a0:ba:19:53:83:af:7d:2a:ab:41:d0:f8:96:63:26:1c:f3:6c:
         4d:86:35:aa:a4:d9:48:fa:55:b4:7c:0d:c1:6d:81:10:ca:d8:
         6e:86:7f:f8:56:3c:49:0e:23:41:35:98:55:7d:d2:0a:0d:39:
         49:a0:de:12:8a:15:35:c6:e8:3f:f5:22:43:43:5c:2b:4c:ed:
         bb:77:33:95:64:04:f1:f1:d2:26:d3:46:30:c5:66:c2:0f:2c:
         d6:5f:ea:b5:f5:b0:46:c2:af:7d:98:44:db:9c:a8:f4:73:e6:
         11:f9:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----