Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c852da8e6bb5beba55af1f3e439b76d81d468f5a.cer
File:                     c852da8e6bb5beba55af1f3e439b76d81d468f5a.cer (raw, json)
Hash identifier:          EmBTkc8HgFrMAsQs3O54G+2KBwdCtXnj3s9whzk7UqM=
Subject key identifier:   88:E4:98:B0:92:7D:A4:16:88:E1:A6:EA:DE:08:F2:A5:A3:C1:B0:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9D2A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/c852da8e6bb5beba55af1f3e439b76d81d468f5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:27 +0000
Certificate not after:    Thu 17 Oct 2024 20:25:12 +0000
Subordinate resources:    AS: 52431
                          IP: 138.118.48.0/22
                          IP: 181.114.224.0/21
                          IP: 2803:5500::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16372390 (0xf9d2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:27 2017 GMT
            Not After : Oct 17 20:25:12 2024 GMT
        Subject: CN=c852da8e6bb5beba55af1f3e439b76d81d468f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:03:b7:44:07:b9:a0:d4:17:3c:9a:ff:c6:
                    1e:76:c6:75:6a:d2:e2:62:7e:ff:c3:f9:61:1f:67:
                    b6:2c:ce:52:4b:ee:0d:6c:e6:54:1c:02:9f:05:88:
                    c7:84:2e:f5:c0:03:10:78:6e:d4:63:0e:cd:1f:6a:
                    e7:36:a9:95:68:36:7e:8e:66:00:cf:4a:f6:85:2c:
                    ab:18:98:07:3b:dc:6c:37:6f:cd:93:ae:a2:6d:5c:
                    c0:ff:13:c2:6a:6a:28:97:e1:7a:7e:c6:3e:46:95:
                    47:8b:7a:38:e2:10:4d:48:77:f1:e4:71:1a:e0:b0:
                    48:89:1e:02:c8:85:2c:e8:10:d8:48:0f:64:3b:82:
                    46:a4:4e:84:5d:17:d6:1a:d6:16:65:05:9d:2f:8b:
                    dc:b5:78:d2:33:98:e1:84:58:7f:82:b2:75:60:64:
                    60:53:59:ea:19:d3:87:f5:c0:88:03:94:ae:cc:13:
                    a0:9e:70:62:1b:0a:d8:cd:72:5b:36:a7:1c:c7:f2:
                    9b:19:58:ba:35:7b:eb:68:4a:67:ad:ff:39:cd:f7:
                    ed:71:08:fa:86:7c:cd:e3:a4:06:bc:c4:f8:d1:44:
                    46:da:82:17:68:83:f9:cb:ca:49:be:70:ab:9a:af:
                    79:39:da:c4:31:ec:da:bf:0d:80:b8:c6:3d:26:b7:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E4:98:B0:92:7D:A4:16:88:E1:A6:EA:DE:08:F2:A5:A3:C1:B0:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8981fc56-ac47-4508-994c-af4b862173c4/c852da8e6bb5beba55af1f3e439b76d81d468f5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.48.0/22
                  181.114.224.0/21
                IPv6:
                  2803:5500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52431

    Signature Algorithm: sha256WithRSAEncryption
         ac:c5:b8:3f:80:c1:54:ca:00:ea:e3:92:90:67:0f:9f:2d:96:
         30:dc:a5:da:4f:88:f7:02:ce:90:e7:fe:cf:8a:04:fd:05:b7:
         2e:4e:16:dc:89:49:74:4d:a2:28:36:3d:cc:7f:47:cf:77:77:
         9a:41:90:0b:52:da:f4:d3:12:b6:10:32:0e:89:45:17:8f:2e:
         05:06:7c:e8:33:52:5f:61:57:43:0d:f0:54:35:1e:ac:9e:d3:
         ed:1d:99:69:9a:f1:55:84:18:15:b2:18:dd:b8:c8:e7:43:76:
         e7:95:91:ba:6d:8e:7e:4e:df:52:4a:b7:73:1e:c5:46:ce:46:
         4a:4c:64:66:2d:22:bd:a9:fb:9e:63:57:74:b3:c1:33:12:c7:
         3c:5d:1d:a1:b6:2a:e7:c8:fa:da:25:89:44:ba:cf:86:af:63:
         c2:fa:12:58:78:17:32:be:e8:10:8d:6a:7a:29:c1:cd:78:de:
         99:dc:a9:fb:38:16:de:63:c4:5b:a7:05:2d:31:07:20:fc:8a:
         0c:31:a2:0e:f9:0c:32:54:d5:f6:06:a9:ab:49:49:3b:9a:97:
         d7:ad:b6:fa:9f:35:68:04:6a:fb:2f:77:ae:d4:dc:8a:ac:ce:
         61:26:39:72:47:f7:14:1b:91:0a:7d:33:9e:01:f8:56:84:e2:
         5a:96:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:58 2024 by rpki-client on console-ams.rpki-client.org