Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a98ce1632468f0df779f66157aaeea21fce7f4.cer
File:                     22a98ce1632468f0df779f66157aaeea21fce7f4.cer (raw, json)
Hash identifier:          Cv/uPyWt2fhv6JwOnjRbOiLcNFHMFA8cCdm1YuIKXU0=
Subject key identifier:   18:E5:45:FB:5E:B3:3F:E8:35:36:91:E8:1C:D4:3D:58:67:B6:43:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E60723
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/22a98ce1632468f0df779f66157aaeea21fce7f4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Aug 2022 15:41:23 +0000
Certificate not after:    Thu 05 Dec 2024 16:10:57 +0000
Subordinate resources:    AS: 52433
                          IP: 181.177.216.0/22
                          IP: 2803:d00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15075107 (0xe60723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 10 15:41:23 2022 GMT
            Not After : Dec  5 16:10:57 2024 GMT
        Subject: CN=22a98ce1632468f0df779f66157aaeea21fce7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:95:aa:b2:ff:55:ca:b6:f6:9c:72:a3:7b:
                    4d:ed:ba:3e:e1:f0:ce:24:59:01:97:46:17:a8:78:
                    08:e0:20:2d:34:8e:48:0a:03:e4:a1:01:fb:0a:9f:
                    a5:1d:e5:d1:dc:0c:cf:ee:7b:17:b5:44:00:a4:f6:
                    e8:52:2b:c8:6c:c1:4b:1d:2e:74:e2:b9:de:ff:91:
                    13:1b:44:a0:2f:f6:25:b5:bb:e9:ad:82:4a:1f:0b:
                    46:57:7c:b5:aa:f5:8d:7a:26:1a:54:c5:50:5f:24:
                    e7:25:fc:af:68:e8:d7:d1:66:55:b2:b5:d0:82:b4:
                    f2:b6:a1:64:e0:59:30:83:dc:d0:11:7e:1e:b7:ff:
                    4e:b5:d1:4b:10:ea:bb:6d:c5:50:01:2e:d8:28:f7:
                    de:94:d8:a0:68:34:58:b1:b2:85:1a:f3:28:08:17:
                    70:d0:aa:d9:9b:1c:2d:1a:c0:fa:0b:7f:7e:68:d5:
                    aa:12:82:2b:d2:af:a2:50:88:8a:bc:36:60:91:5e:
                    63:cc:85:f1:b1:36:3d:4f:7b:92:84:94:5e:c2:f0:
                    47:76:e5:fb:a7:b5:3c:71:58:ae:74:33:c3:6b:de:
                    ab:50:9a:e2:4d:ff:62:b9:60:55:09:64:5c:b1:54:
                    e6:7d:79:25:5f:71:90:67:02:2c:8c:ea:23:61:c9:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:45:FB:5E:B3:3F:E8:35:36:91:E8:1C:D4:3D:58:67:B6:43:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/22a98ce1632468f0df779f66157aaeea21fce7f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.216.0/22
                IPv6:
                  2803:d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52433

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:3e:9e:47:b6:3a:8c:cd:b0:28:9b:62:78:48:39:de:50:
         7a:4e:79:23:b5:51:7c:dd:28:cc:f1:7e:1d:d5:0f:4a:44:2b:
         e5:20:9c:1b:c4:ff:86:13:09:81:c0:0b:c9:df:fe:18:ac:ac:
         62:4d:28:4a:6e:e1:23:75:c7:06:78:79:93:b2:fd:dd:11:18:
         d5:cb:71:22:44:db:2f:3b:58:dc:81:3c:bd:f8:71:e0:87:e3:
         bc:fe:e5:d7:be:47:ef:c7:21:6f:ff:03:80:1c:5d:ad:17:a0:
         ad:79:3a:ed:d9:72:2f:d4:be:d5:9b:78:10:04:63:e1:2d:4f:
         3c:dc:5e:73:ac:2b:2c:c2:a4:3a:67:ef:1a:72:2c:1d:07:c2:
         c1:f5:fa:a4:8c:66:e8:06:8c:d7:99:fe:cd:20:af:21:35:af:
         1f:29:c0:f3:b2:74:ef:b3:45:d7:25:3a:dc:34:a7:91:54:90:
         e6:96:5f:63:85:fe:20:b3:96:91:3c:70:6c:3c:dc:c9:25:1e:
         00:6b:cb:e3:a3:1c:54:4d:e0:87:59:84:89:1c:5d:e5:c4:04:
         83:ca:ed:22:72:70:51:49:7e:34:2f:e3:ac:99:81:a6:72:c6:
         e7:25:63:21:4e:88:d9:0f:eb:51:9d:43:93:a9:c6:f1:ba:6d:
         6d:78:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:28:04 2024 by rpki-client on console-ams.rpki-client.org