Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer
File:                     f10755e086c3f00dedf6589d23f8331bfccf8397.cer (raw, json)
Hash identifier:          XmeATTX9hu0+fo/1v3yX74QundDIYo8bLaffiyoZwoI=
Subject key identifier:   E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CBBC7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:38:00 +0000
Certificate not after:    Tue 01 Aug 2023 06:00:00 +0000
Subordinate resources:    AS: 17287
                          AS: 27893
                          IP: 190.170.64.0/18
                          IP: 2800:a030::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jun 2023 11:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13352060 (0xcbbc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:38:00 2017 GMT
            Not After : Aug  1 06:00:00 2023 GMT
        Subject: CN=f10755e086c3f00dedf6589d23f8331bfccf8397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:97:ff:ea:8e:fa:e4:48:4d:f4:6b:bc:c9:
                    4a:4c:26:7d:47:f2:f3:bb:52:f0:3b:36:d8:d2:f9:
                    3a:ab:da:e0:f6:69:a8:4a:2a:53:d2:b0:be:53:1f:
                    b0:64:6c:4d:31:b7:b5:c7:fa:1d:89:76:5d:ae:dd:
                    37:40:d3:cb:3c:f4:d7:30:98:57:3e:40:2a:4f:8f:
                    2c:08:f5:53:d5:d4:7d:33:d9:64:38:d6:ca:0a:c2:
                    71:34:d5:1a:2b:de:be:7e:79:ca:fa:b1:05:77:91:
                    0b:5a:db:57:bf:eb:17:0c:6f:52:46:80:0b:6b:13:
                    8d:72:c4:70:3e:1a:c6:59:21:9c:9f:0b:41:3d:7a:
                    04:77:43:3f:8d:7d:32:5f:a8:83:ed:08:7e:0e:a3:
                    db:0d:cc:9b:62:8d:e1:b8:17:76:f2:d9:5e:4a:f9:
                    e7:08:e9:66:4f:20:5c:9d:f4:ad:c5:7b:29:f6:1c:
                    87:11:f9:49:98:43:e5:d6:7e:2c:72:c8:7c:5b:4e:
                    e5:5c:65:a5:42:12:c3:02:31:b0:35:fd:cc:25:5a:
                    33:98:72:46:90:1d:1d:b4:53:07:d6:a0:af:20:48:
                    35:de:9b:28:7e:ec:5e:38:10:7e:7b:9b:f4:1a:dc:
                    53:3f:2e:15:3f:8c:5c:66:85:7e:e9:93:75:3f:d8:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18
                IPv6:
                  2800:a030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17287
                  27893

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:d3:c1:64:1f:7b:3a:9e:c1:3b:72:c2:ec:46:a0:89:87:
         87:b8:7b:0c:04:7a:38:26:ef:ba:5e:ba:37:48:a9:43:c3:0b:
         e3:3c:8c:49:0f:1a:22:3e:88:76:0e:62:61:31:60:87:56:7e:
         b9:f6:98:5a:a0:92:31:4d:5f:6b:4f:b0:ed:eb:59:a1:44:cb:
         0f:ea:84:2b:c3:d3:b9:1f:92:e1:15:f7:37:3e:b9:4e:c9:55:
         06:6c:5e:90:be:e7:04:f1:e3:c5:84:d7:2d:8a:1c:91:a9:86:
         46:d1:1f:27:6f:bb:73:d5:10:cc:cb:9a:be:e1:d7:31:a2:c2:
         47:40:ec:4e:8e:68:9d:d0:03:24:9c:8f:d3:4c:41:e7:c2:5d:
         33:63:18:eb:7e:bb:f2:1d:fb:3e:40:9a:c0:46:1e:7e:99:2a:
         ae:3e:e7:88:64:30:96:17:f6:26:f6:aa:6d:c2:76:94:3b:78:
         a0:10:61:7f:bf:31:d6:44:2c:02:51:4a:f2:ea:da:50:b1:03:
         d3:9f:21:96:85:5c:16:6f:26:03:b4:86:7e:12:04:72:ad:0e:
         21:5e:c7:25:60:d4:cc:8c:8b:95:a0:d6:ca:fe:70:44:c1:e0:
         10:2a:0a:94:c6:63:a5:fa:55:5c:27:76:b3:81:07:c4:1c:7a:
         53:a7:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 6 14:14:17 2023 by rpki-client on console-fra.rpki-client.org