Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
File:                     10c38b9181161ced9b3aca715f10eb6f09968296.cer (raw, json)
Hash identifier:          ZaYQA7U0El8F5ISsT2L+5TgPkoA+C34K82gxkiYwNkA=
Subject key identifier:   32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF4CB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/10c38b9181161ced9b3aca715f10eb6f09968296.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Oct 2019 16:59:15 +0000
Certificate not after:    Thu 25 Jul 2024 19:15:51 +0000
Subordinate resources:    AS: 269791
                          IP: 45.184.102.0/24
                          IP: 2801:16:4800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15682738 (0xef4cb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 10 16:59:15 2019 GMT
            Not After : Jul 25 19:15:51 2024 GMT
        Subject: CN=10c38b9181161ced9b3aca715f10eb6f09968296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:4d:5b:bc:18:fd:25:69:53:92:0b:c6:ea:
                    46:f6:e2:a2:45:22:0a:db:6f:99:94:29:15:0d:27:
                    12:ff:67:27:18:9a:95:81:6a:bb:7b:38:81:2b:b2:
                    1a:27:ce:80:d2:3e:8c:ea:1e:dc:c7:bd:a0:70:f9:
                    d5:28:8c:59:77:09:cf:81:3e:b9:2f:f8:35:9b:69:
                    6f:8c:bc:d1:42:fa:1a:b5:29:22:f5:a2:d9:6a:34:
                    22:c8:47:f5:6a:f0:1a:02:f9:bd:48:43:81:68:b7:
                    c1:07:5d:8f:10:fe:1a:58:f4:f6:0b:74:8a:74:db:
                    31:5a:f2:28:2e:5f:75:84:7b:2c:86:65:77:4b:d9:
                    2d:44:a8:b1:f6:5b:0e:7f:e5:27:88:f4:98:50:ae:
                    c5:10:04:58:08:85:40:0a:1f:2c:7e:00:b8:29:1a:
                    6f:17:df:3b:6f:1d:95:47:42:d0:f6:64:c1:9a:15:
                    a6:5d:4c:0a:31:72:02:51:ef:5e:07:73:0c:80:cb:
                    0f:fd:da:4e:6b:b9:a5:bf:6c:a7:af:06:8a:43:30:
                    80:ca:e5:a2:dc:31:89:3b:6e:13:59:21:de:32:c1:
                    2f:e7:ce:d6:5c:b0:fd:85:c6:25:de:ff:67:e9:6b:
                    0b:72:e1:34:65:89:9b:6d:31:23:4b:4e:83:d8:ee:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/10c38b9181161ced9b3aca715f10eb6f09968296.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.102.0/24
                IPv6:
                  2801:16:4800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269791

    Signature Algorithm: sha256WithRSAEncryption
         35:49:da:13:5f:de:11:b5:1e:37:4e:87:e8:99:b3:13:5c:ee:
         10:f0:38:8d:d0:70:5e:01:07:36:71:2f:a8:9c:e9:c1:b1:9d:
         a8:c9:42:8f:21:4c:a6:88:07:8d:eb:ec:fb:a4:66:bc:a4:43:
         94:20:27:48:d7:3e:0b:41:b5:94:f1:c2:06:67:e2:9c:58:4b:
         74:4e:3f:41:1d:15:b1:ec:ed:32:25:bc:c6:8d:0e:80:00:31:
         6f:9d:50:1f:ff:05:83:28:34:b9:e7:fc:cf:7d:00:5b:d0:67:
         c5:d0:ba:0b:c1:b3:eb:26:c6:ef:32:cc:1a:a6:5e:13:7f:fe:
         c6:85:3f:da:78:a6:3b:17:57:8e:dd:f2:08:6c:f0:c3:77:45:
         b4:e2:40:9e:43:4f:3d:a2:61:92:d8:46:db:52:65:aa:d4:b8:
         dd:0b:dc:db:9b:65:50:8d:fa:f3:3c:5f:43:f6:a4:b0:eb:a4:
         67:bd:73:bc:80:fa:c0:5e:bf:8b:65:e8:27:28:84:89:96:45:
         c7:7d:fd:a8:da:36:99:51:f8:9f:94:2f:5e:0f:f3:e2:c2:d2:
         7a:03:58:75:d9:26:0b:7d:93:39:a1:27:65:45:f6:48:39:78:
         9c:f5:b8:b5:2b:5b:25:71:cf:64:90:27:31:57:d7:b6:25:69:
         49:75:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:09 2024 by rpki-client on console-fra.rpki-client.org