Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/038e95027e778ec7055243374d05abd23a097855.cer
File:                     038e95027e778ec7055243374d05abd23a097855.cer (raw, json)
Hash identifier:          6mmfoLeyBPQgFpA0DjaKdpy59ivMxQZ5A7gHcWTACUI=
Subject key identifier:   EE:F1:C4:83:BF:3B:95:6A:DA:51:10:61:E6:4D:91:F0:0B:52:AE:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F50A6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98280899-639c-441b-b8c3-901cf36ec387/038e95027e778ec7055243374d05abd23a097855.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98280899-639c-441b-b8c3-901cf36ec387/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 15:34:56 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 273056
                          IP: 200.16.86.0/24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16058986 (0xf50a6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 15:34:56 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=038e95027e778ec7055243374d05abd23a097855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:89:f1:c1:97:fb:af:d8:dd:2e:f8:bc:82:
                    b6:f8:a2:56:28:df:06:ae:3f:12:1a:b6:4a:61:23:
                    f8:c6:a1:88:a0:86:db:b8:be:9e:f1:1b:e4:23:e1:
                    01:ac:9c:55:87:0b:92:d4:d0:1b:17:0a:98:93:21:
                    e1:c4:31:05:d0:66:d7:ce:1e:ee:c0:02:e1:71:46:
                    80:d3:e8:6c:5d:58:bd:83:16:28:06:34:c7:cc:ef:
                    30:e7:36:fc:a5:16:8c:42:6c:4f:e7:ad:1d:08:47:
                    ef:66:70:c6:ad:20:1e:da:64:31:f5:03:67:38:5a:
                    0b:6d:9b:23:94:e2:67:40:a2:ec:b3:14:c7:39:8a:
                    5a:0a:e5:d5:f8:e4:7d:94:a6:cc:3d:57:3b:ef:db:
                    47:cf:4d:3e:07:11:0d:af:da:87:de:f0:71:43:30:
                    39:fb:b4:67:78:de:6b:3a:91:80:e3:68:76:6c:e8:
                    dd:be:ad:f8:3f:76:a8:5a:0e:66:4b:a4:21:d7:9e:
                    5a:6f:5f:94:19:0e:54:2b:c8:46:90:da:ef:1e:9a:
                    a2:85:37:43:2f:39:38:ea:a1:4c:d8:a3:37:0a:45:
                    40:f5:38:25:c9:33:d2:13:cd:d7:8f:1c:95:5a:d4:
                    9d:53:43:0e:2c:2c:82:1f:b3:6b:08:fa:96:81:98:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F1:C4:83:BF:3B:95:6A:DA:51:10:61:E6:4D:91:F0:0B:52:AE:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98280899-639c-441b-b8c3-901cf36ec387/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98280899-639c-441b-b8c3-901cf36ec387/038e95027e778ec7055243374d05abd23a097855.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.86.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273056

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:4c:2f:4d:06:f9:36:09:fe:cc:67:83:29:74:5f:23:0b:
         93:7c:80:79:a9:f0:8a:88:8a:99:5e:c6:c4:e3:8b:37:18:70:
         32:67:0f:85:90:88:a6:b4:ac:17:ab:a4:8a:bd:0d:45:e2:5a:
         59:5b:28:d2:f6:d8:28:f6:3e:b8:8f:8d:14:c8:0d:2e:94:ce:
         9b:d3:8f:a4:c3:39:53:1f:7e:c4:3b:d9:dc:c2:b2:11:5f:dd:
         c3:cb:d5:d5:a0:ab:9d:58:0b:5e:f2:4f:c6:1d:29:43:d0:20:
         95:07:8d:01:dd:80:d5:0d:ba:67:77:f4:b5:f5:ec:d3:68:6b:
         cb:43:f4:67:4f:96:ea:81:68:e5:6a:82:48:b0:70:c9:2f:ea:
         53:2a:ee:76:94:85:48:9a:01:36:05:e9:d4:a8:c5:53:7d:5f:
         1b:4d:4e:e7:c2:d8:9e:69:6a:f2:2c:c7:a4:3d:c4:5e:e3:73:
         2e:6d:0e:9d:94:96:0d:be:59:82:96:5d:12:d2:0b:7f:af:d9:
         a7:ea:8c:1f:96:e1:b5:8f:b1:01:ee:8d:6a:be:f8:7e:7b:7d:
         3f:8f:5c:c8:9b:f0:95:20:13:dc:b9:fd:82:43:59:a5:cc:31:
         d0:ec:7b:9f:53:25:5a:60:1d:b6:b8:7f:95:4e:d0:ad:85:0b:
         4d:be:61:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:31 2024 by rpki-client on console-ams.rpki-client.org