Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer
File:                     1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer (raw, json)
Hash identifier:          hOL9sSiX6C1uY/Yk1tuMJvDMTWo7kQONos5f6Em18ow=
Subject key identifier:   88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6888E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Aug 2020 18:03:06 +0000
Certificate not after:    Fri 21 Jun 2024 23:25:51 +0000
Subordinate resources:    AS: 270099
                          IP: 190.109.124.0/22
                          IP: 2803:27e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14059662 (0xd6888e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 18:03:06 2020 GMT
            Not After : Jun 21 23:25:51 2024 GMT
        Subject: CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:32:a8:80:66:23:3c:45:e6:04:dc:4c:4f:d8:
                    7e:7e:5c:42:74:5d:ab:08:10:53:98:15:1e:8c:80:
                    2a:fd:4c:74:1d:9b:b1:e5:03:2c:85:64:fd:f4:98:
                    61:96:02:e0:63:06:7d:9d:35:57:1f:07:4d:78:91:
                    4a:e1:87:46:a3:06:97:cb:f4:15:8f:bf:cd:af:0b:
                    d9:12:56:93:d8:dc:c2:d7:55:c4:65:0d:80:48:58:
                    8b:38:43:26:79:f1:f6:e9:4f:da:af:48:46:fe:c1:
                    72:b9:d4:3c:f9:01:86:3c:19:8a:db:63:66:33:a6:
                    36:67:db:bf:22:2c:1e:6e:a9:b1:d7:07:da:96:2a:
                    6d:b9:6c:2b:f9:d7:d7:7d:fa:a1:22:64:0f:57:90:
                    80:45:97:6c:43:92:2b:5a:dc:a0:70:a2:af:a5:a3:
                    65:52:46:25:e2:17:52:3e:4f:36:ba:2c:9c:64:3a:
                    6a:da:98:8e:37:c4:79:e5:ca:ce:0a:c7:a3:d4:f9:
                    51:ff:0c:b8:1d:15:40:fd:80:b1:1f:d2:44:12:95:
                    e5:09:db:3c:95:14:ab:27:d3:ce:2b:e1:41:cf:a2:
                    aa:2e:f1:f5:d6:6d:6e:5b:91:0e:b9:8c:d6:50:36:
                    7b:fc:ee:b8:c7:ba:04:dc:0b:cd:c8:dc:0d:85:c5:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.124.0/22
                IPv6:
                  2803:27e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270099

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:26:26:5e:66:31:20:4e:02:45:73:ef:7f:9c:99:bc:79:
         df:69:24:48:c4:48:65:71:36:60:a5:51:f7:3e:88:c3:20:84:
         83:70:df:4d:27:80:7a:07:4c:d4:99:3f:c1:bb:ec:a1:3e:51:
         49:ab:3c:5a:d7:f5:10:5d:a7:0c:6b:b6:72:5b:21:bf:7c:c2:
         23:95:e8:1f:84:b1:bc:7c:e1:fb:fe:48:03:21:a1:77:33:33:
         84:9b:38:1a:e0:29:36:d6:45:5e:77:97:f9:a9:2e:c8:6c:88:
         b9:ba:4a:42:82:91:29:de:b7:54:dd:df:d7:9d:6e:8a:ed:81:
         df:09:28:37:af:20:85:2a:87:ea:b1:bf:92:56:3c:97:54:6a:
         36:03:6e:61:b1:26:9f:1b:76:d5:cc:c7:31:36:a2:41:9e:3c:
         d9:ec:bd:c5:f7:c6:17:48:c3:b7:df:eb:46:4a:75:a2:b0:10:
         95:4a:1c:98:1a:3b:91:bd:46:d8:75:e4:be:1a:c9:48:72:6c:
         82:07:93:74:32:60:2a:77:1f:db:e3:8e:cc:57:aa:16:a1:cd:
         72:2d:96:7e:ba:4a:63:0c:f4:91:4a:33:75:7e:04:ce:2c:9e:
         45:31:12:e9:29:cd:9b:62:84:d8:02:66:50:e4:ad:92:83:78:
         5d:cd:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:29:06 2024 by rpki-client on console-ams.rpki-client.org