Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ec5ed55fab0f69b190a1b4095b040503dca3b82.cer
File:                     1ec5ed55fab0f69b190a1b4095b040503dca3b82.cer (raw, json)
Hash identifier:          6x2g6LMABQs2N0n3Qbj85zU/Hwv5N55lRLdGV9I4A1U=
Subject key identifier:   64:F2:FC:EA:F9:87:CF:69:25:A6:46:E4:EB:EA:1B:6C:C8:FA:A1:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD240E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 26 Jan 2023 19:25:29 +0000
Certificate not after:    Wed 26 Jun 2024 11:42:34 +0000
Subordinate resources:    AS: 270167
                          IP: 2801:c4:e0::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14492686 (0xdd240e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 26 19:25:29 2023 GMT
            Not After : Jun 26 11:42:34 2024 GMT
        Subject: CN=1ec5ed55fab0f69b190a1b4095b040503dca3b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:17:3c:80:6f:3d:76:5e:a4:bf:aa:0b:27:
                    f1:8b:26:ae:54:b7:c2:4a:10:e2:26:a3:e2:b2:65:
                    f8:ae:1a:52:74:18:b2:76:15:f6:73:60:02:7c:9e:
                    79:3d:3d:47:11:ef:1f:fb:be:af:c4:cf:c1:ab:0c:
                    4b:43:cf:a6:ea:21:2d:a2:79:99:f0:b5:00:24:47:
                    66:9e:a6:55:a4:bc:5e:75:12:2d:7d:40:61:bc:ee:
                    27:69:14:50:e2:c5:ed:b2:82:fa:21:3d:ec:e8:e7:
                    a4:16:66:6a:18:34:84:47:fe:2e:f1:cf:d2:b0:36:
                    5b:c7:49:e3:44:62:70:98:5b:40:ae:ae:47:cb:cb:
                    8c:e1:87:3c:03:1b:94:da:43:8a:9d:e8:ee:0b:1c:
                    35:ce:a5:4b:8e:b9:9a:aa:bd:19:bb:26:21:f4:d9:
                    5f:69:cb:ee:7c:c1:6d:2b:b1:6a:e6:2c:98:dd:34:
                    22:b3:d9:bf:b4:7e:6b:3d:17:31:d5:d8:77:52:b0:
                    87:f4:41:8f:00:0e:d7:a9:c8:c2:36:d8:f5:2f:b6:
                    82:fe:b8:4f:58:49:a8:9b:ae:e8:e6:af:0d:ec:20:
                    ff:b6:a9:12:fe:4b:ed:d2:ae:77:56:ae:a7:bd:d7:
                    c3:b3:f3:4f:a5:f3:76:b7:09:07:fb:84:a0:bd:c8:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:FC:EA:F9:87:CF:69:25:A6:46:E4:EB:EA:1B:6C:C8:FA:A1:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:e0::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270167

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:6a:df:4b:16:12:e2:fb:19:52:b9:de:f5:6a:44:8a:31:
         81:e9:29:cc:23:e8:3f:13:f9:96:c9:20:7f:2c:27:1b:9e:a1:
         3f:4e:b7:5c:c3:5a:12:47:a1:50:81:82:87:fc:8d:50:ef:8f:
         0b:12:db:46:7e:8b:07:1f:bb:a5:58:a4:35:9c:1f:3f:9e:40:
         80:f0:ac:66:13:b3:33:c0:e1:c6:e0:df:99:b7:79:9e:21:e3:
         4e:f3:87:b5:5e:9d:56:c3:e2:b0:8b:80:fb:d8:7d:15:44:06:
         91:7a:47:2e:19:d4:0d:62:64:1d:65:c3:5d:bc:b0:d9:7c:9c:
         39:0d:9d:94:72:73:16:24:61:9c:98:46:e4:6c:9c:28:29:37:
         99:b6:60:93:5a:97:f4:30:44:89:07:2e:79:88:d4:78:50:d5:
         74:6b:bc:ae:e3:3a:a1:72:db:29:5b:e2:e3:2f:9d:ab:8f:a5:
         29:c2:88:5e:6a:30:97:ea:1f:ac:a0:0f:0c:a7:c9:fd:b9:a1:
         26:85:75:39:22:4d:e8:42:96:dc:75:fa:37:1e:14:b8:4c:ae:
         07:0b:05:48:3d:a0:b3:ba:f8:af:0d:fa:ec:31:7a:e9:48:28:
         34:f8:ea:6f:9a:c6:5b:3b:f0:4f:59:a7:7e:c4:f9:2b:3c:e5:
         dd:ab:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:32:18 2024 by rpki-client on console-fra.rpki-client.org