Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
File:                     d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer (raw, json)
Hash identifier:          VSiU1MJBC238F4PDkToBEZwkef6TqeVsIJLSh5Td5vk=
Subject key identifier:   40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CF4327
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:20 +0000
Certificate not after:    Sat 09 Sep 2023 22:02:57 +0000
Subordinate resources:    AS: 28114
                          AS: 270103
                          IP: 168.195.108.0/22
                          IP: 181.118.0.0/19
                          IP: 186.183.0.0/17
                          IP: 190.12.160.0/19
                          IP: 190.115.32.0/19
                          IP: 200.114.120.0/21
                          IP: 2803:2600::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13583143 (0xcf4327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:20 2017 GMT
            Not After : Sep  9 22:02:57 2023 GMT
        Subject: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:40:5d:6b:5d:fe:39:11:42:17:7a:4e:b1:
                    3b:30:d4:d5:d7:4d:cc:99:fb:d9:7d:27:be:8b:00:
                    4f:7d:19:cf:7c:87:01:9c:57:63:86:48:82:a3:0a:
                    f0:13:f2:f2:2e:bb:5c:f4:44:aa:c8:70:e3:6c:6e:
                    d0:52:39:22:45:38:1d:ec:b8:c6:0a:c0:83:3e:bd:
                    1a:87:de:f3:c0:22:b9:0b:3d:4f:4f:d7:af:7d:cf:
                    3a:ea:0c:cf:e3:89:21:7b:fe:db:0a:a5:0f:ce:a8:
                    f6:d8:3f:e2:5c:09:8b:4a:56:85:8e:69:69:ca:11:
                    2f:3a:5c:6a:c2:76:0e:f9:a7:19:a0:48:82:7b:29:
                    84:c2:33:08:ac:aa:d2:44:0c:89:01:3c:f1:9b:9a:
                    b6:4a:d4:12:b8:cc:0a:63:02:d7:bf:01:8f:2c:bd:
                    f3:32:09:5c:b7:9c:75:a3:d8:74:a4:9a:ea:0e:91:
                    4e:23:40:9f:9a:ab:71:14:42:42:41:90:4a:28:5f:
                    33:3b:22:e3:15:6b:fb:76:b2:10:c4:e4:83:8b:32:
                    93:2e:c7:64:b9:cb:37:f4:f5:4a:e1:fb:4e:19:18:
                    e4:71:db:ce:30:72:03:d1:27:57:ef:d0:94:15:17:
                    c1:eb:d1:c0:62:25:8e:99:6f:90:31:bc:d2:59:28:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/22
                  181.118.0.0/19
                  186.183.0.0/17
                  190.12.160.0/19
                  190.115.32.0/19
                  200.114.120.0/21
                IPv6:
                  2803:2600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28114
                  270103

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:c9:8e:a1:3d:7f:20:fa:c4:57:85:b8:d8:93:d4:72:a7:
         c7:2e:f7:83:1b:f7:9c:0a:dc:90:d1:ea:c6:3e:41:34:bf:ec:
         f6:4c:bc:f7:9e:54:0c:ae:e0:27:c1:cc:cc:c3:df:07:1b:43:
         9b:cd:62:84:4e:88:13:67:83:9e:3a:2b:55:79:c3:a9:b2:c1:
         52:a5:13:08:cb:6e:28:c3:56:98:da:f9:cd:4a:1c:f2:eb:70:
         89:3d:a5:0c:d4:d3:d3:e7:dd:23:44:17:6e:82:4f:b1:dd:6d:
         07:b0:f4:25:37:d0:90:6b:14:84:f9:18:54:2d:75:ef:a0:b5:
         2d:d0:d9:ca:f6:16:5c:ff:c9:a2:37:06:38:bd:79:47:73:56:
         a7:54:b9:d9:e0:ee:54:30:78:04:96:59:f3:c2:3f:e3:e2:d2:
         1d:b3:88:fc:02:3e:d0:28:fb:87:71:72:5a:af:26:ea:28:7c:
         97:54:f6:23:a8:e5:53:06:01:81:ff:fd:eb:c1:4e:a9:c5:01:
         a2:77:9e:f8:e2:35:9a:fd:80:8c:10:dc:7b:5b:21:18:66:b7:
         eb:70:6b:d1:e4:6c:79:a9:7d:49:6b:3f:49:78:e2:c9:0b:bf:
         53:ce:e7:b4:76:8c:5a:28:ee:d7:e8:04:e1:c9:c7:67:e4:73:
         a2:56:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 11 00:56:05 2023 by rpki-client on console-ams.rpki-client.org