Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer
File:                     a7656fd167ae72596f765a4f9b74e1606a1dea00.cer (raw, json)
Hash identifier:          P2e6xUBgTqUkjTu8Wh315ErTq3tqoZ7/7Gep7KYMHrQ=
Subject key identifier:   94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E788D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Mar 2021 03:03:57 +0000
Certificate not after:    Tue 28 May 2024 15:00:00 +0000
Subordinate resources:    AS: 19863
                          IP: 181.41.64.0/18
                          IP: 181.199.224.0/19
                          IP: 190.80.0.0/17
                          IP: 2800:3c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15173848 (0xe788d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 10 03:03:57 2021 GMT
            Not After : May 28 15:00:00 2024 GMT
        Subject: CN=a7656fd167ae72596f765a4f9b74e1606a1dea00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:16:3d:51:67:cb:79:c1:0e:7e:2d:ce:4d:
                    38:e4:e6:a9:97:15:53:ac:e7:8b:cc:48:0e:11:dd:
                    1d:74:d7:f3:38:15:b9:fd:4b:4d:d6:be:61:72:4e:
                    88:b5:3f:cc:9b:8f:25:8c:1f:07:80:63:0a:ae:72:
                    18:16:49:12:da:0b:06:51:17:ad:91:70:0a:f4:eb:
                    b9:98:cc:c5:f1:3e:26:4c:72:b5:22:bc:1f:ec:e0:
                    63:8c:d5:ac:10:ff:c2:4b:dd:4b:7e:18:22:77:d1:
                    a7:d1:95:0e:61:a8:3c:55:55:b2:5e:ed:c5:9f:be:
                    00:ff:0b:89:ba:62:d6:77:81:31:b2:8a:2c:e3:bc:
                    f3:82:4b:14:52:58:b2:cb:5c:30:a9:65:0c:aa:18:
                    62:fa:b8:96:98:58:d3:76:b5:2f:e4:d0:17:8a:dd:
                    71:d4:bb:4e:21:ba:50:37:49:03:6b:34:4d:a3:2c:
                    b6:30:9c:28:eb:ca:80:56:18:78:9a:b5:75:48:18:
                    ab:8c:90:1b:b5:46:25:79:88:3b:3e:e8:d0:7b:65:
                    55:cf:64:b6:07:5c:51:f1:55:1a:13:14:d3:3f:eb:
                    86:b2:0a:a5:40:e0:5d:91:af:49:19:c2:26:09:ee:
                    fb:02:b7:fd:22:74:75:37:0d:c6:33:53:9f:2b:ad:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.64.0/18
                  181.199.224.0/19
                  190.80.0.0/17
                IPv6:
                  2800:3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19863

    Signature Algorithm: sha256WithRSAEncryption
         35:01:d4:df:1f:f1:c0:c6:e0:07:58:36:33:ac:9d:d9:2a:0c:
         1c:90:30:ef:1c:02:90:85:db:cd:28:f9:53:c9:ce:6a:f8:2b:
         f3:1c:73:cc:0c:4c:2d:28:41:ca:76:13:b1:19:43:14:d5:d0:
         59:e6:39:1e:2d:9d:b8:39:31:4a:4e:a8:c1:bf:fe:72:a4:a2:
         6d:3e:dc:d8:15:f3:8e:6d:38:5b:56:4e:6f:13:ba:46:5a:6e:
         bf:7a:14:63:63:06:8a:18:80:cb:39:f4:be:17:3c:2c:46:b0:
         31:85:a8:90:f7:eb:9a:93:4a:c4:44:28:d7:ba:93:46:63:42:
         63:0d:ba:e8:25:9a:f3:ab:8a:97:ca:17:7e:04:e5:85:db:21:
         ee:e5:90:77:c4:f4:63:aa:28:f3:a9:88:14:67:e0:74:70:20:
         ed:80:58:1c:a8:eb:ef:b8:8f:d2:59:ea:29:cd:b0:6f:e1:6b:
         90:88:d8:34:44:6b:8a:b8:10:7d:a1:eb:f1:6c:26:9a:26:61:
         8d:f6:60:e7:42:a3:34:03:f1:6d:06:da:c1:d0:a9:2a:f7:cd:
         d2:ec:c4:b1:0a:bb:3e:60:23:b6:16:68:d9:a7:64:8b:b8:8e:
         d2:e2:06:a1:bf:09:3a:91:ea:05:3b:d2:13:89:a8:43:a5:27:
         bc:bf:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:25 2024 by rpki-client on console-fra.rpki-client.org