Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer
File:                     12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer (raw, json)
Hash identifier:          IwsA9KsjT8E3kuTMl8tKSARDRsFy5AVabpz++lySO+8=
Subject key identifier:   D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106FF06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Dec 2020 20:30:56 +0000
Certificate not after:    Sun 16 Feb 2025 21:17:52 +0000
Subordinate resources:    AS: 267832
                          IP: 45.175.20.0/24
                          IP: 170.245.158.0/23
                          IP: 2803:c460::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17235718 (0x106ff06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  2 20:30:56 2020 GMT
            Not After : Feb 16 21:17:52 2025 GMT
        Subject: CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:a2:96:7c:60:65:c6:9f:b9:ef:50:a1:a6:
                    eb:b5:6e:86:6f:57:a5:6b:a3:94:db:90:94:29:96:
                    9b:36:33:c1:e7:ef:5e:35:30:47:e3:18:ee:79:e6:
                    cf:94:a9:14:8d:bc:ef:0b:ee:4d:54:cf:82:48:4f:
                    9a:a6:05:60:70:66:cf:4c:7e:ad:f9:32:11:3d:02:
                    ec:43:b9:10:04:18:fe:d0:6c:32:16:e6:fd:12:9f:
                    52:48:be:2d:9e:ba:5c:12:2f:f0:e4:43:e5:6b:84:
                    6b:89:28:e4:26:35:64:13:af:5a:67:d1:0b:4f:31:
                    ac:40:f2:75:82:bd:63:59:49:ce:c8:0d:85:4e:b5:
                    fd:c7:a5:61:fb:8a:e1:f2:cf:fc:1c:be:ae:2b:87:
                    f7:72:f4:57:67:3d:9b:14:3f:d5:f6:dd:0e:4e:ee:
                    11:40:ce:c7:3e:b5:2d:ec:26:df:4a:05:6e:04:39:
                    41:a4:e8:6a:fc:ff:99:10:b8:2c:07:95:ee:0a:fe:
                    43:2d:d4:55:80:6a:38:ed:bf:6e:89:d0:f0:97:a3:
                    87:5a:59:b4:fe:86:b3:b0:33:c0:c9:7f:41:63:e1:
                    5f:f0:86:c6:e4:7a:5b:3b:e5:ad:d0:d0:5a:87:b6:
                    d5:50:90:4e:a4:04:bf:1e:b3:58:82:83:93:8a:38:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.20.0/24
                  170.245.158.0/23
                IPv6:
                  2803:c460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267832

    Signature Algorithm: sha256WithRSAEncryption
         98:d3:8c:62:cf:2e:4f:cf:ea:c0:73:c0:d0:75:d2:cd:15:02:
         34:c2:40:55:6c:b2:b1:49:7b:be:f2:ff:0d:7d:9e:23:f4:f5:
         c3:7d:37:51:da:f2:28:ca:fc:98:d2:c7:2a:60:08:03:f9:cc:
         5f:68:80:b1:e5:48:4f:22:57:3c:5d:30:4d:db:a4:e0:74:53:
         07:2f:a0:0e:60:b0:c9:cd:80:80:08:d6:ce:41:de:f3:50:33:
         de:52:92:48:a3:cc:48:89:2d:da:a2:10:d3:52:18:ff:61:81:
         79:49:8d:10:74:09:23:7d:3a:87:7f:d5:01:2d:53:9a:0c:7b:
         ad:d0:14:bf:15:41:76:76:ee:09:c6:11:10:13:49:2f:49:f5:
         c4:50:4e:e1:96:b9:31:09:a8:9e:cc:c2:d9:8f:33:27:5b:ed:
         ff:93:f7:a0:d2:95:9e:56:1d:ea:54:8c:b9:09:eb:d1:eb:e5:
         26:81:8e:c5:0a:f7:9d:eb:33:f1:e7:e6:44:c1:08:10:c5:7e:
         a6:e8:26:a9:fe:cd:19:8d:f6:c1:dd:b5:6f:4c:bb:3c:a5:ff:
         b3:b6:97:0e:09:3d:7c:02:48:35:23:84:85:01:e2:d4:06:2c:
         ae:20:e4:22:ac:b7:c2:df:32:3b:18:21:04:59:a0:27:d0:7b:
         0a:b4:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:35 2024 by rpki-client on console-ams.rpki-client.org