Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
File:                     c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer (raw, json)
Hash identifier:          ItGv7A5K4JN5ujK7uToZ6q7cv3EOIx73IhI1kkENG78=
Subject key identifier:   ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D16BCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2019 20:58:35 +0000
Certificate not after:    Sat 07 Oct 2023 17:12:00 +0000
Subordinate resources:    IP: 181.78.0.0/15
                          IP: 181.119.0.0/16
                          IP: 186.33.0.0/18
                          IP: 2800:c00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13724619 (0xd16bcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 20:58:35 2019 GMT
            Not After : Oct  7 17:12:00 2023 GMT
        Subject: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:27:e3:65:85:b5:2a:80:36:0e:e7:db:13:
                    f7:a9:3b:bb:8c:38:61:28:c5:c4:95:a5:d3:e6:6f:
                    cd:7f:53:3b:c4:ad:40:56:e9:94:f6:ac:cf:54:ba:
                    2a:43:b6:d7:fe:e5:3b:27:be:9b:7b:95:1f:d3:08:
                    b4:44:99:0b:d9:78:39:05:a9:1b:3c:0f:a2:4c:7b:
                    57:55:c9:26:6d:d3:17:5c:cb:20:ef:15:5e:bd:07:
                    c5:b7:42:dc:ae:53:77:51:97:90:4b:74:87:ca:bf:
                    5c:ff:c0:2a:24:be:ce:57:3f:a1:42:57:88:7e:39:
                    ad:a0:7e:b4:6b:be:68:cf:2f:35:c6:f5:cd:65:04:
                    bc:b4:a6:18:46:04:1a:ee:cb:36:42:fb:c4:c8:7c:
                    72:e2:d8:ab:47:ad:7c:d4:fd:a6:1e:78:8e:ac:86:
                    93:8c:b0:66:fb:13:38:a2:75:34:74:b8:d4:01:e0:
                    61:48:8a:35:b7:11:06:e7:0f:7b:b3:fc:7d:bd:b9:
                    39:3a:a7:2a:f2:e8:6a:37:54:5f:9d:ea:33:ab:de:
                    7e:7c:81:5f:73:87:17:fd:ce:74:01:43:0f:82:81:
                    c1:63:a7:91:9a:dc:c5:c9:91:14:d1:bb:65:e4:0f:
                    b3:ee:75:f7:ce:a1:2b:1e:c7:cf:16:50:d0:62:3f:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/15
                  181.119.0.0/16
                  186.33.0.0/18
                IPv6:
                  2800:c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:1e:3a:b6:d8:c4:f6:1e:c1:8d:4a:b1:e2:96:b4:39:d2:
         18:19:b2:c8:b7:e9:a0:fe:bf:f6:f7:07:e5:a5:b3:08:75:3b:
         3e:5d:74:94:88:9b:06:c6:e5:c1:4a:6e:1d:87:40:8d:56:d1:
         6a:a7:bb:88:a2:c6:59:f1:17:d0:de:2a:70:ee:51:06:e8:d8:
         38:f3:28:a3:07:ba:c4:89:a1:2c:cd:7c:a5:e5:ba:fb:e4:e4:
         9c:cf:b0:fc:0f:5c:5b:26:15:e2:49:e5:e4:bb:c3:8f:49:49:
         b6:48:26:7f:e2:e6:0e:6f:a2:0d:c4:3f:0c:15:c7:ae:2a:3d:
         65:7b:72:41:16:0d:4a:d2:a6:91:04:eb:b3:b4:72:df:fd:a6:
         c0:d9:fe:85:2f:7c:7f:59:ee:62:9f:9c:74:31:64:32:62:ad:
         08:74:dc:b5:be:4f:54:3e:e8:d4:f2:f0:ba:8b:63:99:92:2f:
         41:cc:07:7f:e6:45:11:7a:aa:90:10:8c:50:24:62:40:57:fc:
         66:5c:13:2e:ce:47:9a:17:7b:1f:06:5d:2b:81:97:23:5c:9e:
         11:b4:b0:be:1f:50:87:04:5c:35:c3:37:ea:ba:83:e9:2e:6b:
         48:eb:28:27:81:92:63:e3:58:90:9c:84:4e:da:62:01:8e:ba:
         b5:1d:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 11 00:56:01 2023 by rpki-client on console-ams.rpki-client.org