Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f66cc03791db423a5a679953b1acf1bf35bafe4a.cer
File:                     f66cc03791db423a5a679953b1acf1bf35bafe4a.cer (raw, json)
Hash identifier:          us4LFFoTFZ6iU5b+GsnkUG5bozRqiseVIYDUZvL6OO4=
Subject key identifier:   E8:D2:71:1B:4A:9A:7B:D3:BC:1D:15:06:6B:54:B1:91:67:CC:02:F6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8C097
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/f66cc03791db423a5a679953b1acf1bf35bafe4a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Thu 06 Jun 2024 18:25:40 +0000
Subordinate resources:    AS: 262213
                          IP: 168.197.88.0/22
                          IP: 181.225.140.0 -- 181.225.151.255
                          IP: 190.6.120.0/21
                          IP: 190.112.48.0/22
                          IP: 2803:a100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15253655 (0xe8c097)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Jun  6 18:25:40 2024 GMT
        Subject: CN=f66cc03791db423a5a679953b1acf1bf35bafe4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:f8:d0:bb:30:1b:7c:89:6d:9d:59:d1:b2:
                    43:d9:ff:d7:16:16:2e:e3:5b:1d:24:ef:83:1c:54:
                    76:93:a1:ab:7b:b7:b4:0d:91:15:73:85:4b:69:9a:
                    70:7c:04:d7:c6:8b:2e:71:c9:19:36:26:ed:93:57:
                    36:45:4d:1e:fe:d9:8a:f1:ba:24:99:62:c5:0d:9b:
                    d4:0e:0b:54:56:cf:75:5e:a4:25:76:a7:f5:19:e2:
                    3d:60:b1:c3:f5:ce:c9:9d:5c:1c:b8:0e:f1:e1:99:
                    a7:bf:4d:30:9e:f7:1b:ae:69:78:0e:92:42:4b:85:
                    15:41:d6:e9:9a:66:3b:d3:f9:31:0e:50:0f:5d:57:
                    c3:b4:9b:c1:9c:89:a6:da:92:84:06:b6:ec:6f:58:
                    46:46:d2:0e:be:13:e4:5e:12:19:ed:0d:f6:48:95:
                    ae:16:01:4e:af:9f:5b:4d:3f:95:43:11:7c:e9:f6:
                    45:d2:77:c3:84:1b:1c:fb:3d:a0:ef:9e:0f:31:92:
                    d5:10:a8:0d:86:89:0d:9d:40:87:77:1e:2e:bb:88:
                    85:2b:6d:3d:44:21:e3:f7:13:5c:9b:4c:74:29:af:
                    bf:26:53:f1:42:5a:74:5f:c8:fe:07:81:89:3e:67:
                    7c:e4:87:a6:78:03:fc:ba:b1:a3:b5:84:9c:f1:c3:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D2:71:1B:4A:9A:7B:D3:BC:1D:15:06:6B:54:B1:91:67:CC:02:F6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/f66cc03791db423a5a679953b1acf1bf35bafe4a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.88.0/22
                  181.225.140.0-181.225.151.255
                  190.6.120.0/21
                  190.112.48.0/22
                IPv6:
                  2803:a100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262213

    Signature Algorithm: sha256WithRSAEncryption
         bb:99:fc:53:f6:9f:27:9e:32:a1:c1:b1:66:59:2c:36:f3:b5:
         83:bc:58:0e:0c:9c:5f:1f:9d:fe:77:cb:d8:39:c8:d7:40:ab:
         46:7d:a7:b8:40:d4:8d:9f:07:67:19:f7:34:60:8e:7e:29:55:
         42:fd:c1:10:a0:3d:15:59:a0:12:8a:f4:7a:a9:b4:de:f9:d0:
         d0:18:e4:aa:2a:f8:6f:bb:b7:0d:eb:d5:92:d7:cc:6d:1c:99:
         49:af:0d:f4:73:6a:d7:93:76:2a:40:b9:d6:23:c8:58:2a:d4:
         be:57:2e:df:2e:a2:75:90:12:c8:31:26:da:07:37:ca:22:a7:
         51:93:3a:ac:d1:74:1f:ec:66:fc:92:3d:88:18:fa:10:17:68:
         53:d8:aa:53:98:46:fd:c5:b1:55:5c:38:6f:1e:f2:c5:db:ad:
         6a:f1:dc:2d:30:8c:1a:13:c6:26:f0:85:72:b2:16:06:31:de:
         18:39:d7:07:0d:21:bd:a6:71:1c:b7:c6:cd:93:8e:cf:1a:75:
         dc:cf:71:4e:14:77:71:2d:49:c2:59:0e:76:be:27:a9:08:a0:
         3a:4c:b9:5f:96:3d:91:18:d7:a2:a4:d8:64:b3:59:67:66:ed:
         0b:7e:7c:03:0b:8d:76:a8:86:14:f6:86:85:5c:eb:83:ee:21:
         ed:98:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:55 2024 by rpki-client on console-ams.rpki-client.org