Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b542116cf9b5c5eac8afc75573b247026d5e7aa.cer
File:                     9b542116cf9b5c5eac8afc75573b247026d5e7aa.cer (raw, json)
Hash identifier:          99+MN9GP/B8TFEMqSR5u3C6kBqWrW0aXiRblj3BVq3E=
Subject key identifier:   AE:F8:35:9E:3B:EE:5B:E8:C1:4C:A4:47:0D:17:FA:28:11:10:8B:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC6664
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/9b542116cf9b5c5eac8afc75573b247026d5e7aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:41 +0000
Certificate not after:    Thu 04 Jul 2024 20:54:43 +0000
Subordinate resources:    AS: 263834
                          IP: 138.121.88.0/22
                          IP: 168.228.144.0/22
                          IP: 170.79.252.0/22
                          IP: 2803:c640::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15492708 (0xec6664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:41 2017 GMT
            Not After : Jul  4 20:54:43 2024 GMT
        Subject: CN=9b542116cf9b5c5eac8afc75573b247026d5e7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:8c:39:15:1e:18:60:b2:ab:15:19:c3:c7:
                    d6:f6:9c:db:ba:61:bb:ba:12:0e:83:84:f5:78:23:
                    33:89:d1:39:62:0a:69:eb:f3:03:c2:06:b7:c5:3b:
                    47:cd:6d:10:bf:7c:61:63:ce:89:94:e9:01:9e:ee:
                    06:7e:9c:9b:ad:71:d9:91:c4:34:0a:9f:7f:67:b1:
                    8b:bf:6b:b5:1c:43:04:47:02:e8:ed:4d:bd:fc:06:
                    f8:ef:f6:ca:40:24:c6:89:3a:a3:ae:58:8a:f5:30:
                    ed:bc:44:d7:31:f0:81:30:59:d8:75:88:1b:e3:49:
                    a6:2f:6a:cb:eb:a4:34:2c:09:a6:b3:18:11:43:22:
                    62:cb:a3:2d:bf:82:b8:af:4f:7f:f3:00:31:84:cc:
                    dc:c4:f0:96:2c:76:35:26:89:f8:da:3b:f4:a3:da:
                    d5:83:7e:30:71:ac:08:dd:1d:a1:99:a6:d4:67:7f:
                    62:a6:cf:4a:c4:82:26:a3:1a:b4:5a:2e:19:d9:68:
                    39:f9:44:00:23:97:f2:29:87:7f:ab:2f:57:e9:b8:
                    cf:88:99:b3:85:f2:56:0c:b7:3a:04:a5:36:cf:cb:
                    99:fb:be:9f:23:75:07:15:75:c4:67:83:17:0d:ab:
                    f1:9f:21:0c:e1:07:b2:54:57:87:17:05:7f:d2:a0:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:35:9E:3B:EE:5B:E8:C1:4C:A4:47:0D:17:FA:28:11:10:8B:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/9b542116cf9b5c5eac8afc75573b247026d5e7aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.88.0/22
                  168.228.144.0/22
                  170.79.252.0/22
                IPv6:
                  2803:c640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263834

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:a7:e7:5f:56:18:68:67:8f:30:a8:af:be:62:8e:11:7f:
         a4:4f:40:00:1a:0f:56:dc:20:45:d7:ee:ea:3a:50:84:1e:e0:
         6e:eb:86:bb:39:ec:02:55:17:0f:aa:53:27:e8:17:74:b4:9e:
         b2:ae:8e:b2:41:49:6b:9b:86:34:7b:af:97:f2:ea:3d:fe:85:
         0e:92:2d:8d:05:58:2c:5a:b7:05:c9:ef:9c:eb:1d:fa:0c:58:
         d9:df:4e:25:47:49:12:90:92:57:ab:f2:9a:b1:32:c5:c3:fc:
         60:c4:c2:c4:e5:35:f5:5a:85:59:df:9b:8e:c7:73:39:50:6f:
         9b:ad:ef:52:96:f6:c8:9a:03:25:ba:b7:15:74:e2:f5:6a:79:
         7f:21:4a:63:21:b1:fc:b6:3a:35:92:12:85:e5:23:cd:3c:54:
         bd:e8:c2:db:75:30:d9:68:c3:d2:77:3c:f8:5d:a8:34:5a:74:
         38:53:6a:e0:d9:3f:35:d9:f1:cf:99:01:c1:2c:86:1e:3e:a4:
         a7:06:8f:f5:bd:af:6d:5a:15:ca:20:bb:2f:8a:3b:2e:80:b7:
         9b:54:f4:34:e8:de:1a:63:52:60:24:97:87:05:ba:ed:97:d6:
         22:87:f8:fe:81:b6:52:bf:79:0d:42:87:66:d1:3f:ac:ec:48:
         3e:8a:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:12 2024 by rpki-client on console-ams.rpki-client.org