Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer
File:                     011a9b477733e7669c43604e0c34e662ac21a23d.cer (raw, json)
Hash identifier:          Vq84LaMGMNYSwjnQZVGM5h97fvUg5U7RW7fnii2yG0o=
Subject key identifier:   F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D70B76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 Nov 2022 20:43:01 +0000
Certificate not after:    Wed 22 May 2024 21:32:51 +0000
Subordinate resources:    AS: 272830
                          IP: 2803:7490::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14093174 (0xd70b76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 20:43:01 2022 GMT
            Not After : May 22 21:32:51 2024 GMT
        Subject: CN=011a9b477733e7669c43604e0c34e662ac21a23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:f4:66:59:10:cd:6b:22:59:5b:72:8d:65:
                    e1:e5:ad:f3:c7:a0:9a:61:8e:73:50:2c:08:3b:66:
                    b4:3d:fa:f3:9c:55:7e:05:f1:8c:86:7e:f5:56:d0:
                    fa:40:91:e0:55:94:fa:44:5f:1f:b0:97:5e:55:7b:
                    42:95:f4:33:37:48:ed:57:b9:5f:72:a6:fc:f1:94:
                    4d:10:4d:58:46:bd:dd:8f:6e:f8:f0:47:39:fe:c2:
                    60:22:f7:e3:dd:c2:67:61:2b:39:54:1c:f1:ce:5c:
                    34:79:75:1c:95:d2:22:b2:fc:db:80:7f:22:f9:75:
                    66:e9:83:67:16:c7:29:a5:5a:21:2e:55:b8:ba:bd:
                    f4:39:be:53:ae:b6:3e:f3:70:70:7c:d0:88:cc:65:
                    50:6e:75:a3:4e:6d:19:c0:5c:a6:6b:c0:35:ef:0b:
                    a9:f7:a9:1c:76:c3:8d:8c:f6:64:c0:46:fb:d2:d2:
                    8b:47:36:bb:09:59:e6:1d:9f:a4:c3:47:da:75:4e:
                    1b:df:78:0a:9d:17:c7:0e:a2:77:c7:a4:ac:14:19:
                    c1:21:d6:b5:d9:31:bf:f1:04:9e:c1:fc:94:04:7d:
                    8b:4c:8e:09:d9:f9:75:de:82:f3:09:77:f2:c1:b4:
                    2a:fb:41:72:23:50:ff:cf:23:1e:27:a7:2e:b2:e2:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272830

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:05:8d:24:46:d6:f1:8d:78:12:23:67:b7:ab:01:25:2f:
         77:5f:63:af:4e:5a:43:c4:bb:a2:0c:10:d8:2c:66:d2:9f:8a:
         b9:1b:c5:91:75:a4:bf:af:0b:f0:22:07:63:cf:5d:d5:ec:4d:
         42:88:30:f9:c0:7f:d3:88:02:b7:4b:95:03:33:b7:85:02:cc:
         5d:26:c1:d3:42:7e:21:83:0a:e0:d7:95:cd:4f:bc:31:f9:db:
         49:34:3e:30:16:d6:b5:1e:79:a5:10:48:fa:ea:14:3b:7b:75:
         d6:6f:cf:63:05:2a:7b:31:b8:f3:b6:38:8f:ce:79:4c:29:9e:
         53:ff:3b:f9:5d:2e:1c:39:75:2a:43:7e:55:37:8f:9e:31:31:
         dd:5c:22:74:af:0a:d9:41:9b:06:64:71:78:ad:0b:8a:88:bb:
         79:2b:13:1c:ab:f6:d1:86:89:b3:02:42:75:b8:22:41:cd:60:
         78:e1:88:39:60:00:f2:66:0f:98:c0:df:9c:f6:1f:71:a9:1a:
         e1:4a:42:16:ac:8d:1d:67:5c:15:b5:c1:0d:df:4f:f6:08:74:
         f9:3d:1d:b6:ac:ab:b7:94:87:6a:b6:f7:51:9c:d5:ad:12:38:
         5c:9c:f8:46:a9:c8:83:8c:17:92:04:f3:d4:fa:56:40:eb:2c:
         79:22:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:57:47 2024 by rpki-client on console-fra.rpki-client.org