Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
File:                     aae8cbe9904f103232c002483204f9f2ae04d026.cer (download)
Hash identifier:          FS7E7xmGUAcJpp7hr+nQrK8OWnfGjL7wKPSj+Y1GYQw=
Subject key identifier:   9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       B5D3B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate valid until:  Feb 28 06:00:00 2023 GMT
Subordinate resources:
    1: AS: 28041
    2: IP: 190.9.179.0/24
    3: IP: 190.9.181.0 -- 190.9.191.255
    4: IP: 200.125.128.0/24
    5: IP: 200.125.130.0 -- 200.125.159.255
    6: IP: 2803:a400::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11916211 (0xb5d3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:15 2017 GMT
            Not After : Feb 28 06:00:00 2023 GMT
        Subject: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:10:ef:e1:6b:e2:e6:48:4a:a5:b1:0c:c2:
                    12:a1:a9:bc:fb:61:0c:5a:5a:92:68:4b:9f:5b:9e:
                    d9:0c:8e:3f:f9:1e:16:52:c8:31:14:aa:4b:76:26:
                    1d:bb:2e:5e:5d:c9:cf:87:18:a7:4c:3d:c8:bd:6e:
                    cb:38:e1:9f:07:7a:1b:07:36:63:8b:71:c1:15:e7:
                    2e:04:7c:f2:57:37:d6:8c:63:89:41:37:bb:3b:e6:
                    39:56:bd:92:14:0c:24:f1:cb:3c:68:39:0e:c1:8c:
                    fa:b6:56:52:77:e2:d8:78:2e:f7:be:bd:15:b3:4d:
                    ed:41:bb:b8:82:5f:81:98:57:d4:a7:be:2e:30:96:
                    d6:b0:36:ad:59:84:71:f2:08:41:97:5f:b2:0d:ae:
                    a1:dd:a4:2e:97:c7:ea:10:bc:6b:c7:70:9d:a4:04:
                    7f:6d:15:14:b4:9a:46:6f:85:fd:0c:72:c5:ad:86:
                    be:4e:90:d6:8f:33:f7:75:4b:aa:b5:3a:35:1a:e4:
                    5a:7d:37:c8:61:6d:58:36:25:89:f5:fe:c8:cf:41:
                    1b:27:87:47:ae:e8:85:e2:fb:9b:b1:71:86:ed:15:
                    80:3d:e5:0f:e6:2d:54:4d:5f:fd:e9:3d:53:8c:c5:
                    58:de:1f:2a:7b:ed:f5:c0:73:71:40:b5:34:7e:7b:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.179.0/24
                  190.9.181.0-190.9.191.255
                  200.125.128.0/24
                  200.125.130.0-200.125.159.255
                IPv6:
                  2803:a400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28041

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:cd:ea:72:6b:ea:93:f2:25:c9:51:01:38:99:ad:c7:18:
         40:9b:1b:04:87:99:42:b0:8c:20:16:41:af:9f:bb:1f:41:92:
         ff:9d:7a:3a:2a:95:8b:a8:e2:cd:34:87:f2:0d:8d:10:a4:87:
         4e:38:46:e4:78:26:87:5b:6b:3e:c2:ee:15:da:40:43:e8:e6:
         46:8e:43:2e:27:d9:40:91:6e:f7:98:e7:2b:2d:f2:90:70:74:
         05:63:18:04:19:31:ac:5d:b2:ca:35:6f:06:43:69:7c:ed:a3:
         8c:76:21:05:04:8a:51:2c:6a:2f:ad:d9:54:c7:dc:67:c1:be:
         64:29:66:23:63:40:70:2f:dd:b7:cd:49:3f:45:8f:4f:45:93:
         c8:c9:78:9c:8b:38:e4:29:ec:ee:22:4c:38:f4:ba:ff:72:1c:
         56:7b:f1:3f:d2:92:82:8b:17:0d:8f:08:2a:03:f6:2d:4d:ff:
         63:0e:8e:3f:e7:78:97:60:12:23:66:8c:99:01:4e:43:7a:66:
         e7:e3:8a:ff:87:e4:7f:27:d8:3c:28:74:cc:b8:8a:00:4c:80:
         f4:8e:cd:5d:aa:19:1c:a5:62:ef:7b:24:a9:38:2a:70:21:bc:
         dd:86:c7:cf:74:81:13:e9:6a:80:a1:83:72:85:c0:8a:70:1d:
         a5:f2:94:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Dec 8 05:56:31 2022 by rpki-client.