Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3ee958557d9fde5dde89b420e2e9fd8b429156e.cer
File:                     e3ee958557d9fde5dde89b420e2e9fd8b429156e.cer (raw, json)
Hash identifier:          o1oKIEkB1qZHY1SdzbZYunxJ/ZzF9F6TQvZCOa6l8TI=
Subject key identifier:   B3:DE:AC:50:CD:BB:0A:A5:54:35:16:4D:90:F7:9C:8D:2B:28:EF:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010EB57E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e3ee958557d9fde5dde89b420e2e9fd8b429156e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2019 18:34:28 +0000
Certificate not after:    Sun 20 Apr 2025 22:30:21 +0000
Subordinate resources:    AS: 267853
                          IP: 190.211.176.0/20
                          IP: 2803:3700::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17741182 (0x10eb57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 22 18:34:28 2019 GMT
            Not After : Apr 20 22:30:21 2025 GMT
        Subject: CN=e3ee958557d9fde5dde89b420e2e9fd8b429156e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:6a:1f:f4:9c:61:71:3d:60:97:f7:94:3d:
                    1b:c9:f6:23:ac:1d:2d:14:3e:7b:ed:14:09:84:09:
                    56:d2:a8:e5:cc:f8:b9:33:5e:ca:5c:0e:90:9c:5f:
                    ac:57:fd:48:7b:f1:30:51:62:a7:8a:13:dc:86:8a:
                    d7:c3:82:f4:f7:da:b4:89:db:ef:c4:a9:5d:cc:f4:
                    88:85:00:f1:12:42:b9:61:1c:7c:fd:e3:eb:01:74:
                    07:c5:12:d0:d2:1a:58:d1:1b:3b:7a:86:fe:31:33:
                    65:fe:08:01:fa:83:ef:39:af:5a:de:76:21:c3:91:
                    cd:b7:01:97:70:e5:91:c8:7a:17:12:84:9a:da:d7:
                    d1:44:4f:27:c5:64:f0:5a:7f:45:cf:c0:df:7c:9f:
                    27:15:82:a7:d0:8d:6b:5a:ff:6d:59:54:23:71:ab:
                    a4:7a:78:3f:27:da:b2:1c:3c:71:e4:fd:c8:ed:2c:
                    31:61:8b:64:6b:e9:37:3f:7b:89:a7:54:ce:8a:26:
                    00:01:26:2b:41:3e:63:f5:a3:05:22:fa:e1:36:ce:
                    2e:9e:94:8f:75:13:e6:8c:42:8a:f4:3f:cd:7b:57:
                    fe:38:ef:2e:74:9d:f6:48:b9:dc:74:4d:3e:3a:8f:
                    15:ca:b4:57:99:ff:15:0d:c5:1b:ef:6a:ac:36:56:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:AC:50:CD:BB:0A:A5:54:35:16:4D:90:F7:9C:8D:2B:28:EF:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e3ee958557d9fde5dde89b420e2e9fd8b429156e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.176.0/20
                IPv6:
                  2803:3700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267853

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:be:3f:40:e5:cf:64:fc:56:b3:2d:9b:86:24:dd:5b:d7:
         58:3c:29:b3:5a:a3:ba:13:00:ba:51:01:4a:22:5d:df:1a:09:
         1f:3d:97:f9:90:4f:fb:ec:53:f5:28:19:ed:e3:d6:64:0b:b6:
         00:53:4a:ca:0f:ab:48:a5:7c:21:ba:d4:ed:1c:9a:5d:66:58:
         6e:3f:bb:ae:6b:88:bb:3d:ef:33:5f:23:f1:c3:46:3c:e7:47:
         40:ce:92:fa:56:75:9d:ac:00:42:89:f4:0f:4a:f9:8c:46:49:
         7d:d7:cf:9d:c3:4c:b5:3e:0a:92:28:b4:fc:ce:bf:f1:bd:00:
         f1:bf:52:fe:94:83:9f:3f:13:df:5a:3d:20:16:14:a5:c1:f7:
         0a:4d:e2:11:f5:dc:a4:cf:25:02:ea:53:31:1d:53:04:d8:31:
         c8:5e:dc:dd:ff:3e:9c:92:f5:84:70:6d:bb:06:5b:04:cc:d9:
         20:36:92:38:e5:20:70:1c:b4:14:20:96:af:22:bf:69:60:a3:
         9e:55:f1:42:26:b8:2a:b3:97:e3:3b:68:b4:d1:ef:5f:16:2f:
         99:4e:fa:e3:95:63:51:39:2a:fe:da:37:45:60:f7:ae:35:a5:
         85:35:2e:86:8f:b8:86:ad:d3:0b:6d:6b:bd:bd:5a:6f:88:61:
         fc:a6:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:55 2024 by rpki-client on console-ams.rpki-client.org