Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22186b09ccdf865006a12efd8444a8fa73b7c154.cer
File:                     22186b09ccdf865006a12efd8444a8fa73b7c154.cer (raw, json)
Hash identifier:          Aw8NLoCs3X0QJzSF8T9IvBQSuiLYz4JPsLKwmBYWJA8=
Subject key identifier:   B0:3C:3B:73:C9:BE:F4:82:69:CA:4E:F8:7A:47:22:56:79:FB:84:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D1796F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/22186b09ccdf865006a12efd8444a8fa73b7c154.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Sep 2022 16:01:25 +0000
Certificate not after:    Sat 29 Jun 2024 16:06:38 +0000
Subordinate resources:    AS: 272855
                          IP: 2803:2290::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13728111 (0xd1796f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 16:01:25 2022 GMT
            Not After : Jun 29 16:06:38 2024 GMT
        Subject: CN=22186b09ccdf865006a12efd8444a8fa73b7c154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:7e:56:ed:74:c2:3f:ae:3a:90:34:d9:b0:
                    8c:c4:52:93:49:77:34:20:68:67:82:9a:5b:b6:d4:
                    a9:bf:f1:98:46:7f:fd:d7:b5:42:3e:7a:d0:32:de:
                    9d:d7:79:51:49:70:49:78:3e:6d:67:f9:66:26:2a:
                    db:3c:af:4c:48:bc:11:73:c6:6d:5f:b0:4a:43:44:
                    01:14:db:89:64:9b:bf:66:87:64:86:23:f1:0e:54:
                    3b:e4:36:7e:d0:de:4f:68:c2:58:72:ba:e0:93:af:
                    67:d3:fb:b9:7c:0d:5f:62:32:f0:c1:7b:56:9e:21:
                    04:dd:42:30:b2:8f:01:f5:6c:93:c3:c4:fd:11:a6:
                    4e:d6:ab:3c:24:da:61:25:7c:08:24:dd:ef:4e:2e:
                    4b:57:66:89:67:63:74:24:b4:db:9d:7f:b5:27:21:
                    b0:9e:98:d3:99:a8:b6:ff:55:e4:35:0d:b7:c1:15:
                    6f:b9:11:bb:b7:1d:df:e1:63:18:e9:8c:b7:ba:63:
                    57:a9:eb:f1:ba:23:47:54:85:b8:e3:1e:3c:ac:2a:
                    d8:a5:7e:46:31:83:fb:4a:cc:13:ea:08:d6:e2:16:
                    8c:9a:61:2a:f5:67:2c:a6:56:45:d9:4b:cd:bc:a8:
                    2d:c2:69:71:7e:00:4d:98:b5:ea:4c:6f:65:ad:49:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:3B:73:C9:BE:F4:82:69:CA:4E:F8:7A:47:22:56:79:FB:84:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/22186b09ccdf865006a12efd8444a8fa73b7c154.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272855

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:2a:d4:2d:47:e1:41:7f:f4:b8:5b:1f:11:b5:67:b4:42:
         17:4f:00:90:b0:c3:03:33:b6:69:3e:97:5a:cc:2a:41:71:3c:
         b2:97:56:55:e0:71:1a:92:6a:1b:ba:ae:3e:72:67:dd:62:1b:
         87:1a:ff:e9:00:81:06:d8:b7:1b:a1:4a:dd:5d:aa:96:02:10:
         58:c0:70:9f:e2:82:c9:d8:cf:ba:ec:56:24:c1:81:4e:94:51:
         96:e1:6c:ca:df:cf:16:f8:fc:75:61:2c:86:b6:18:b2:79:a7:
         bd:b5:f7:69:10:38:7a:e3:5e:6b:25:6c:de:39:f8:c8:4e:e6:
         02:6a:07:4e:26:d5:4d:bf:f0:8a:a6:fa:f5:0b:ab:36:b6:c3:
         86:29:20:28:fb:bb:78:39:bf:e5:4c:5f:15:55:88:a5:37:85:
         7a:3a:5a:1e:7f:f5:fe:ca:c6:26:1d:4b:3b:46:64:08:85:2e:
         c6:84:1d:9d:81:b0:7f:15:df:1b:5f:2a:6e:45:8e:e9:16:db:
         0c:6b:72:ac:45:e2:4a:24:d4:a0:a9:b9:bc:15:ce:97:eb:71:
         a6:c7:1f:55:3d:00:1c:42:1c:4f:f3:07:02:9b:73:61:b7:54:
         1a:0e:b7:09:5f:80:d5:f9:cf:40:39:b9:75:19:eb:f2:ac:c0:
         19:b8:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:39 2024 by rpki-client on console-ams.rpki-client.org