Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
File:                     0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer (raw, json)
Hash identifier:          QXuKCEzJErhjtxS62DPpUHRK38C815XPmFMSlxTM81s=
Subject key identifier:   0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010ED574
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Nov 2022 21:29:04 +0000
Certificate not after:    Mon 21 Apr 2025 17:49:47 +0000
Subordinate resources:    AS: 267912
                          IP: 45.179.72.0/22
                          IP: 2803:f660::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17749364 (0x10ed574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 21:29:04 2022 GMT
            Not After : Apr 21 17:49:47 2025 GMT
        Subject: CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:fa:27:ce:1e:49:dd:54:02:cf:05:aa:45:
                    34:4f:69:c7:6b:c6:ba:43:41:3e:4a:78:f1:9d:d2:
                    87:3b:3f:2b:c1:67:eb:78:7a:53:d6:78:cc:50:02:
                    69:f9:1c:04:ed:af:20:d9:b0:9c:76:01:b2:58:30:
                    cb:e9:ad:05:ea:86:5e:70:9f:e0:35:d0:f0:92:f1:
                    38:42:21:b7:60:d7:aa:c4:a8:40:69:b2:3f:41:0e:
                    59:48:5d:7c:78:0d:59:1a:54:cc:6b:f0:c5:48:0f:
                    c1:6a:fe:72:ee:12:53:a9:89:3d:96:75:49:a4:2d:
                    e0:4f:87:69:cd:5a:5d:f6:dc:c4:99:3c:3a:4d:28:
                    f7:07:8a:e1:85:07:ec:07:a2:e8:a5:41:9c:2b:54:
                    7f:3d:97:75:17:49:55:d5:87:b0:b3:0d:b3:bc:9a:
                    30:e8:99:a4:96:cd:65:81:4e:e7:10:e7:f4:f2:a8:
                    d6:42:54:70:4f:fc:01:85:60:9a:98:67:8d:16:4a:
                    d2:89:0e:3b:34:0e:b1:72:b5:77:68:5c:7b:11:69:
                    a6:78:14:4d:84:92:64:27:b6:60:9b:c0:eb:d1:1a:
                    64:c3:ab:db:78:70:9b:2b:19:0a:83:80:ed:4f:db:
                    85:3a:e5:cb:16:7d:e8:2a:07:3d:4c:b8:c4:34:f9:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.72.0/22
                IPv6:
                  2803:f660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267912

    Signature Algorithm: sha256WithRSAEncryption
         35:12:6c:8c:89:76:65:56:52:c5:41:bb:5a:11:31:a3:98:a5:
         95:58:e0:3c:38:ec:91:b1:3e:ec:73:d0:92:98:91:fd:85:c6:
         71:0c:8b:00:76:38:30:50:cd:8f:34:68:c3:75:28:57:b1:4f:
         35:33:3f:42:c4:8e:c5:c0:6f:31:99:3b:92:13:0a:a4:a9:01:
         69:f2:0a:ff:56:30:f9:59:c5:ae:d1:2b:78:30:b8:d6:7e:8b:
         cf:9a:b5:27:0d:40:cb:75:6e:ce:30:09:53:50:7e:02:19:dd:
         ac:6b:25:d1:bb:c5:d9:62:5e:2f:0b:6e:72:33:62:1e:b0:0a:
         a3:14:b6:3b:2b:93:b8:29:e6:ac:fe:cf:a6:f9:e9:44:9e:78:
         d2:89:b7:de:e2:bb:20:bc:0f:74:4e:a9:1f:8f:cb:5a:bd:bb:
         06:a3:24:29:e4:ce:7c:e9:72:aa:f6:42:97:39:8b:f8:1b:d8:
         c5:69:1e:a1:6a:2c:03:1c:a9:e2:9e:bf:c9:e8:0d:3e:b6:18:
         b0:80:3f:b9:3e:57:bc:71:be:bb:55:e9:97:29:02:f4:5a:87:
         e8:97:b8:5e:cf:b1:32:f9:6c:ca:c2:13:2b:e4:8b:4c:99:a4:
         cb:04:5a:38:50:21:de:bd:06:4d:43:8b:b2:0e:52:98:b8:51:
         b3:5f:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:49:37 2024 by rpki-client on console-ams.rpki-client.org