Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
File:                     b937c1111990e7b39c1f43b075333acd225a29b1.cer (raw, json)
Hash identifier:          Pi8sYW/hY72r9IS9DpfeKu8tnKVN47OGpPy9FslWnts=
Subject key identifier:   1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CEBB38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Sun 03 Sep 2023 05:00:00 +0000
Subordinate resources:    AS: 28103
                          IP: 131.161.252.0/22
                          IP: 138.186.60.0/22
                          IP: 179.189.218.0/23
                          IP: 190.211.240.0/22
                          IP: 201.222.48.0/21
                          IP: 2803:c100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13548344 (0xcebb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Sep  3 05:00:00 2023 GMT
        Subject: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:a6:8d:5f:fb:58:ae:c6:5c:7c:54:f0:62:
                    07:f2:83:c5:fd:35:55:b7:25:ec:7e:62:0c:42:56:
                    23:05:e7:73:b1:b9:b3:b2:83:b3:a5:a8:07:61:fb:
                    3a:9b:b5:a4:5d:0f:4a:f9:38:d1:16:ed:32:00:d8:
                    8a:e7:76:b8:a4:75:9e:aa:2e:3e:79:f4:28:2a:8a:
                    2b:09:dc:f3:a2:82:e8:9b:7f:5b:cb:eb:4a:3a:4e:
                    1b:71:2d:48:55:54:0a:fa:61:7f:b9:b7:fa:b7:bb:
                    5d:91:6d:c6:a9:42:0d:5f:c0:6e:81:c0:e7:3d:b6:
                    98:7a:fc:b6:18:a6:ab:e8:3f:9d:b0:4d:b7:9b:e8:
                    a4:f7:56:2d:9c:b7:71:63:bb:f0:e4:ff:ff:14:49:
                    fd:3d:38:8d:ac:53:56:34:84:ef:af:9f:5d:54:1c:
                    5b:da:86:59:de:2c:86:12:93:e5:f1:42:d8:0b:40:
                    a2:d0:0d:2b:ae:c0:36:06:63:50:f0:bc:44:ec:39:
                    61:63:1b:3b:d4:29:a2:56:71:38:aa:de:a3:cb:8d:
                    ff:a1:e0:0b:81:10:58:b4:9a:52:62:35:40:a4:37:
                    6c:64:f2:9b:57:15:7e:04:1d:26:e8:53:6f:8c:65:
                    d5:dc:66:4e:3f:17:9b:00:40:2b:3a:dc:53:42:20:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.252.0/22
                  138.186.60.0/22
                  179.189.218.0/23
                  190.211.240.0/22
                  201.222.48.0/21
                IPv6:
                  2803:c100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28103

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:13:5c:31:f5:2a:f0:9b:87:6a:af:a5:c2:48:b6:bb:e0:
         01:64:30:c1:8e:90:32:36:f6:ea:7a:3c:b5:66:56:e4:f9:e3:
         ba:9a:4b:57:ad:18:fc:66:ed:a6:e0:6b:4e:56:ba:2c:22:4e:
         fe:5b:59:76:d6:d5:87:49:85:ca:7a:2d:df:62:b8:10:61:80:
         9d:67:25:71:71:bf:45:5a:93:05:25:14:df:4c:5a:21:be:60:
         7c:02:3f:10:9b:d8:db:3e:29:96:88:bc:c2:7c:49:77:d7:df:
         cc:12:69:a5:58:dd:1d:c0:ac:55:3c:6a:7c:d8:bb:69:d6:d7:
         a4:12:f6:d0:e3:d8:88:69:ac:13:1e:b1:21:de:fe:03:55:cb:
         e7:4c:88:10:cb:f9:a2:09:54:f9:fe:97:ee:8f:6e:3a:8f:9d:
         d0:eb:cf:6f:46:2d:e9:cf:03:0b:17:1c:28:24:33:d2:25:e9:
         3b:f0:e8:74:7b:16:55:04:2e:ff:ef:6f:11:5a:12:e7:5d:6c:
         c4:59:6e:3d:c0:16:e8:43:16:af:00:1f:cf:b7:f4:27:92:b5:
         79:e3:34:2a:ec:b5:0b:3a:ad:47:90:bf:24:c6:7d:4f:74:8a:
         a3:7a:07:3b:e6:01:44:09:24:7e:f0:95:17:44:63:cb:68:60:
         12:8d:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 11 00:55:58 2023 by rpki-client on console-ams.rpki-client.org