Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer
File:                     0cbb85e42b2f4026a791ab4ac115547607eff761.cer (raw, json)
Hash identifier:          hs6epm0zG4RDNq2gbSyV/VhMDYONSZZ4V38JIJx/E7M=
Subject key identifier:   5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA7269
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/0cbb85e42b2f4026a791ab4ac115547607eff761.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Nov 2021 13:32:02 +0000
Certificate not after:    Tue 10 Sep 2024 15:22:05 +0000
Subordinate resources:    AS: 272013
                          IP: 2803:b910::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15364713 (0xea7269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 13:32:02 2021 GMT
            Not After : Sep 10 15:22:05 2024 GMT
        Subject: CN=0cbb85e42b2f4026a791ab4ac115547607eff761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:3e:4a:33:6a:ca:29:a0:1b:ee:f8:c7:d1:
                    9e:4e:8b:56:77:71:9b:52:be:d8:a7:ac:43:ba:72:
                    77:a6:c3:35:25:26:22:83:84:21:98:b6:b6:92:9b:
                    53:af:d3:ab:93:25:df:00:38:7c:91:74:c3:46:5d:
                    34:59:2f:f4:b3:1f:3f:1d:a8:42:57:94:e4:5b:9c:
                    8c:ed:f2:0f:44:cc:44:e1:07:bf:4b:61:65:9d:56:
                    c1:3b:39:a1:88:e8:fd:81:ca:09:0e:f8:74:ae:9d:
                    59:ed:86:ed:a7:27:5c:05:8c:4a:58:fb:ad:28:d2:
                    ad:7b:fe:f5:d6:40:ae:3a:26:27:ef:d7:1e:4a:e4:
                    bd:ef:6c:94:fb:53:45:2b:0b:0f:91:79:1a:77:7e:
                    55:28:a7:1d:0d:1f:75:68:f9:b4:3d:64:12:64:22:
                    d0:24:16:64:6a:3f:e7:14:da:2c:ba:a3:f8:e0:b5:
                    03:2b:72:e1:45:9f:e7:c2:f6:6c:e3:28:a4:57:27:
                    90:1d:4f:ec:78:12:41:86:de:49:06:35:8f:1b:9d:
                    a7:47:92:65:4a:bb:e0:3c:50:00:f7:85:cf:c0:db:
                    6b:f2:4e:1b:fa:ef:a4:a6:28:ff:1a:22:75:d4:e8:
                    3a:e2:ec:11:d3:e9:d3:61:90:3c:b0:36:6d:9e:aa:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/0cbb85e42b2f4026a791ab4ac115547607eff761.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272013

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:66:d6:38:c9:8f:e5:2a:a0:e2:ec:17:90:fb:b9:85:f8:
         96:f1:72:62:5c:a9:5c:b5:cf:be:30:4d:78:48:35:98:60:54:
         8d:b6:83:fb:96:cc:bb:a4:df:9e:6d:a6:fd:17:4b:b3:f6:cc:
         aa:e9:30:00:96:e9:26:0d:fd:21:7d:d0:9f:cd:28:3f:a6:c2:
         cf:f5:8f:90:8f:33:48:b6:77:88:6b:1f:f7:9d:cd:f7:e7:b1:
         d5:fc:79:aa:c2:36:00:3f:3c:d2:91:65:4b:95:76:46:c4:d4:
         46:22:37:3c:f3:e7:fd:a7:c2:57:71:67:66:9d:5a:cc:1e:f1:
         fd:22:45:e6:ea:f0:7b:a1:93:63:1a:48:92:02:92:5e:1f:44:
         80:cb:58:e8:2d:f9:4c:5d:22:3f:f6:24:6e:09:4b:18:4d:5b:
         95:1d:fa:80:ee:41:b5:48:90:83:06:38:ea:02:41:a8:1c:26:
         e8:1d:cd:62:52:fd:2c:37:f3:fa:47:59:26:bf:ed:77:60:29:
         32:31:c2:00:2e:1e:4b:3b:3f:cd:55:d8:d2:21:43:87:ef:77:
         25:3f:37:a6:77:b3:99:81:c3:1e:fd:5f:13:9f:01:f8:fc:33:
         c9:40:66:a2:33:c8:03:70:11:c6:18:46:2b:54:98:a4:b5:f4:
         cb:1f:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:42:29 2024 by rpki-client on console-fra.rpki-client.org