Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acbcc335140e03f3496bf0d53c0820b47ef82ea6.cer
File:                     acbcc335140e03f3496bf0d53c0820b47ef82ea6.cer (raw, json)
Hash identifier:          9IIjk7B4b8iiCIQCbggqEF2n4xicrvBulI0sXGrrGyY=
Subject key identifier:   04:A0:1A:C7:10:0C:80:37:43:ED:CB:47:56:0A:70:9B:62:BD:B2:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB76D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/acbcc335140e03f3496bf0d53c0820b47ef82ea6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Aug 2020 17:53:18 +0000
Certificate not after:    Wed 26 Jun 2024 22:31:12 +0000
Subordinate resources:    AS: 270104
                          IP: 190.171.80.0/22
                          IP: 2803:17e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15431377 (0xeb76d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 27 17:53:18 2020 GMT
            Not After : Jun 26 22:31:12 2024 GMT
        Subject: CN=acbcc335140e03f3496bf0d53c0820b47ef82ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:d6:8a:e1:0b:28:9c:ea:ad:65:cc:d9:e6:
                    e6:01:ab:f0:60:3e:11:84:9b:9a:c7:19:7a:c1:00:
                    52:db:01:77:a7:cc:36:30:a3:26:98:13:75:f7:f7:
                    39:03:19:3a:e8:b8:4d:7e:41:e1:5d:ab:c3:a7:fd:
                    93:64:13:4f:c9:79:ad:fd:9b:2a:75:88:58:91:f1:
                    c5:86:27:21:d5:a3:b7:86:ef:66:22:23:24:e7:76:
                    54:6d:56:35:23:2f:d6:99:b2:b1:2c:13:3e:2d:00:
                    2d:c7:27:92:fb:ed:11:33:aa:6c:ff:f4:84:d9:a5:
                    ad:64:42:64:f5:6e:59:5a:d7:d4:c6:53:9b:9a:69:
                    6d:80:41:b3:b1:86:45:b1:ed:25:35:17:20:37:34:
                    86:db:6e:19:74:4d:e8:14:40:dd:7c:6b:1a:4d:2f:
                    c9:99:c4:f8:01:0a:ca:ed:66:b9:a9:78:6b:6b:76:
                    0b:b2:17:1e:c4:ad:0b:94:38:ca:95:d8:c8:17:b2:
                    ad:22:af:e4:a2:08:00:c5:5f:06:07:bf:e5:30:30:
                    05:57:28:10:b0:94:e7:98:06:59:47:ff:68:58:97:
                    c9:5f:ee:70:bb:cd:bf:8e:f8:a9:05:35:53:8c:68:
                    df:47:ba:c5:7e:a5:f1:af:92:93:24:ca:f4:2d:a3:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:1A:C7:10:0C:80:37:43:ED:CB:47:56:0A:70:9B:62:BD:B2:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92140193-e487-40b2-9d2d-928f7d97e4aa/acbcc335140e03f3496bf0d53c0820b47ef82ea6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.80.0/22
                IPv6:
                  2803:17e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270104

    Signature Algorithm: sha256WithRSAEncryption
         be:2d:50:4f:bb:47:9b:bd:6a:35:60:54:90:95:41:03:a0:cf:
         9d:e8:c9:18:7a:3e:a0:f0:98:65:78:23:ed:89:75:c9:23:2d:
         35:e1:8f:1a:b8:25:77:52:68:c7:3d:9e:e9:51:f7:0e:27:7c:
         63:2a:5d:7c:e1:d6:a0:1e:0f:48:5b:e3:c2:c1:01:a9:e7:57:
         36:71:a2:ad:d9:b2:7a:c4:9f:3e:2c:53:d4:d6:b4:29:1a:b0:
         1d:00:47:cb:3a:fd:6a:c0:cb:75:0d:51:72:60:fe:b6:62:bb:
         2f:2b:15:e6:25:bb:f7:d6:43:de:3d:ba:06:9c:fc:05:5e:64:
         ca:d8:9c:8a:76:8f:41:33:a8:dc:a0:b2:2d:df:33:ce:d9:9c:
         4f:42:4c:41:a6:62:bd:da:bb:27:0a:98:94:0b:3e:78:07:07:
         ef:8a:3d:1d:f0:ab:7a:5f:57:19:08:49:2c:5f:2b:f4:db:9e:
         c5:c0:5f:9a:02:0e:4f:f1:1f:6f:b5:dd:a3:fb:ba:16:2a:45:
         44:b1:26:d8:89:e7:30:05:f1:65:3c:98:44:fc:c1:0a:79:5f:
         c4:58:3f:e4:3d:2c:91:b5:b9:ae:09:64:91:fb:13:41:f3:c4:
         e4:df:11:ba:61:f2:d7:ed:04:1a:79:3a:30:ce:e4:0c:f9:32:
         25:77:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:55 2024 by rpki-client on console-fra.rpki-client.org