Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer
File:                     b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer (raw, json)
Hash identifier:          J0YLKhSjCKbld4yBZZUOWvtcuEVAB8N4d2Ozjyqphkw=
Subject key identifier:   B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106FB22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/b5d933e43bb68e4aa0afa4157c889b4b406113c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 19:35:19 +0000
Certificate not after:    Sun 16 Feb 2025 20:33:25 +0000
Subordinate resources:    IP: 161.0.192.0/19
                          IP: 186.32.128.0/19
                          IP: 186.32.224.0 -- 186.32.247.255
                          IP: 190.53.48.0 -- 190.53.95.255
                          IP: 190.53.192.0/18
                          IP: 190.99.0.0 -- 190.99.23.255
                          IP: 190.181.192.0/18
                          IP: 2803:f400::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17234722 (0x106fb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 19:35:19 2019 GMT
            Not After : Feb 16 20:33:25 2025 GMT
        Subject: CN=b5d933e43bb68e4aa0afa4157c889b4b406113c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:2d:d2:44:25:11:a6:b5:f6:c5:b3:f6:c0:
                    ae:f2:9b:8a:0f:4f:73:0d:a4:aa:22:1a:8d:f2:b7:
                    fc:4b:ad:2f:a9:dc:66:1b:55:14:cb:8a:f2:31:99:
                    72:1d:c8:7a:4d:9c:ec:49:07:dd:26:69:ef:2d:b0:
                    a4:3a:7d:53:bd:dc:0a:df:de:c1:ec:f9:11:9b:78:
                    b7:34:20:a2:1b:a3:34:1c:65:04:c0:66:3b:39:a4:
                    da:93:9c:03:2c:a3:f3:0e:3d:69:65:82:ee:50:71:
                    aa:1a:c6:bc:d7:e1:63:2f:9a:c9:59:51:41:d0:cb:
                    29:60:e9:22:4e:b3:46:14:60:6e:9a:84:38:2e:3d:
                    13:a3:e4:be:03:48:c0:0c:ab:b9:bc:2b:f6:61:d7:
                    5e:6d:59:a8:95:61:88:5f:ff:99:56:47:67:53:5f:
                    4b:c0:75:5b:e2:f3:83:8b:19:98:3a:39:f9:1a:53:
                    9c:39:01:b2:9a:ee:5e:a3:64:c0:14:55:40:f9:1e:
                    4d:1c:d2:35:11:d1:90:b9:82:55:90:2f:66:bd:2f:
                    2e:ac:dc:5f:8f:67:17:e9:73:86:7f:97:18:54:c6:
                    10:99:27:bc:e9:b8:77:9a:06:46:c4:57:b7:83:25:
                    66:25:cc:48:3f:df:40:58:12:9e:a5:50:cf:74:05:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/b5d933e43bb68e4aa0afa4157c889b4b406113c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.192.0/19
                  186.32.128.0/19
                  186.32.224.0-186.32.247.255
                  190.53.48.0-190.53.95.255
                  190.53.192.0/18
                  190.99.0.0-190.99.23.255
                  190.181.192.0/18
                IPv6:
                  2803:f400::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:13:8a:0b:03:96:c3:79:32:cc:70:07:5a:2c:f8:84:90:
         bf:eb:37:1f:96:bf:12:89:a6:12:01:1f:24:29:cb:8e:ee:e8:
         94:95:ec:26:d3:fd:cd:6d:a1:cd:60:44:d6:7f:77:2f:a8:99:
         a5:4b:c3:a1:da:f7:ba:aa:77:54:60:4b:f3:de:a7:1d:f0:b7:
         d1:6d:29:37:76:d9:1c:09:d6:62:ad:7c:33:a8:8a:89:2d:bd:
         5d:18:33:60:6c:29:e9:3f:35:80:f3:78:ec:8c:dd:d4:0c:a7:
         ea:23:9e:05:6c:fe:d8:f4:e0:f5:3e:c8:41:ed:37:a8:c3:34:
         20:90:e0:d3:cf:44:72:02:dd:6b:95:8b:ce:64:82:28:6d:05:
         c9:1b:b3:7d:d4:08:07:56:bb:48:0d:c6:d6:4a:cf:6e:ce:bc:
         96:ed:fb:05:32:3b:3e:a8:83:7d:ee:30:8f:2e:14:c0:9a:18:
         4b:bd:c8:d6:53:05:b2:93:ac:c4:f7:32:6d:e5:66:e9:4a:98:
         6d:c5:c5:85:9d:9a:20:ff:56:9f:2a:da:44:4a:24:7d:3b:e7:
         f3:b3:a3:e0:85:4e:0e:43:56:4c:39:b7:cc:6f:a6:8f:87:e8:
         42:54:f3:a8:72:c9:8c:82:e0:f7:aa:14:55:2e:d8:65:7d:c1:
         c8:1b:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:45 2024 by rpki-client on console-ams.rpki-client.org