Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
File:                     d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer (download)
Hash identifier:          gRaNaL1yy5tu1igSaCQ0nHUtXe9NVFgrjHO55KEVCwg=
Subject key identifier:   42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BE760A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate valid until:  Feb 22 16:56:48 2023 GMT
Subordinate resources:
    1: AS: 267789
    2: IP: 161.22.32.0/21
    3: IP: 2803:6680::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12482058 (0xbe760a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 22 13:52:02 2020 GMT
            Not After : Feb 22 16:56:48 2023 GMT
        Subject: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:23:57:93:bf:79:00:50:bc:36:f7:47:94:
                    5b:c8:70:d7:01:95:62:89:c7:ea:97:1a:32:87:b9:
                    83:98:a9:7e:0b:dc:68:e9:57:d2:61:00:74:c8:fa:
                    c3:f7:58:28:53:27:f1:f5:85:b1:07:62:ca:93:89:
                    91:6a:ca:0a:30:67:a1:15:e4:30:77:e4:fd:39:a2:
                    b4:2b:87:99:2d:31:74:c0:ce:f2:d2:db:ee:35:78:
                    69:29:d5:3c:08:2e:bd:b4:02:29:59:d6:6a:ba:e4:
                    6c:b3:27:aa:27:f7:72:29:4c:09:71:60:11:82:b6:
                    5b:b1:97:2b:6c:bf:48:21:bd:32:3a:69:2d:cb:5d:
                    94:6f:c5:7f:ea:61:85:fe:63:50:ed:c4:5e:7c:5f:
                    80:b9:cc:b5:ff:bc:53:09:28:56:47:1b:d9:c6:30:
                    be:a9:23:6d:e6:87:1f:b4:02:e0:b2:d0:52:86:e5:
                    3f:46:d4:fc:22:c4:ea:d6:b3:3f:ac:76:da:60:4a:
                    47:49:0c:72:30:86:d2:92:f2:5d:3f:c3:f2:c2:d7:
                    75:b6:f4:4c:94:9d:eb:32:f9:a4:3d:e1:17:44:6b:
                    77:d5:cf:a2:fa:5d:cb:88:1c:39:9e:71:d8:e1:16:
                    d0:ee:92:bc:5f:ae:72:3e:ac:96:04:f6:a7:64:58:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.32.0/21
                IPv6:
                  2803:6680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267789

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:89:45:d7:26:6e:a8:43:c1:3b:d4:41:57:2c:4a:83:f2:
         3f:d4:5d:1f:b9:c3:91:09:9f:01:24:72:5b:6a:5e:34:76:19:
         a7:fb:c9:26:86:60:1f:e4:a9:90:1d:74:92:72:93:ac:1d:a6:
         cf:2a:07:f3:24:ef:d0:20:7d:19:81:a4:32:b7:5a:64:4e:de:
         0b:55:9e:e6:4b:32:16:7a:05:74:4a:91:37:94:2a:97:54:6a:
         0b:47:d1:36:57:b4:1e:5a:b4:96:d3:1a:27:72:6b:52:b7:7f:
         b9:81:6b:c3:af:bb:e7:46:39:10:60:25:d2:eb:d4:89:f4:4b:
         cd:b8:cc:6f:0c:2d:1b:4d:0f:26:14:6b:34:48:b4:4d:58:11:
         ce:0d:7e:7f:fb:4a:49:96:9e:ba:1f:17:56:94:01:7e:dd:11:
         e2:6a:28:d3:43:6e:ba:49:18:57:bc:70:a6:a1:18:e6:9e:7a:
         30:bc:f9:48:72:86:e6:fa:b8:66:12:cb:9a:66:73:e4:be:66:
         3a:70:f9:e3:57:15:94:8c:1b:f2:ad:7c:d0:fb:e3:a4:f0:fc:
         f4:1a:f2:4a:04:22:b7:f3:48:d7:70:88:3f:31:d3:c2:61:12:
         00:fb:59:d8:f9:0a:ca:4a:fb:38:d7:27:ab:a8:8d:90:db:6f:
         e2:a3:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 05:18:29 2022 by rpki-client.