Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23bb5475fc90e5c132fef4724e9713249d0da0ae.cer
File:                     23bb5475fc90e5c132fef4724e9713249d0da0ae.cer (raw, json)
Hash identifier:          uQByOHQ/32HrYMiu9Y//Ujm3LBKSfIncDgFh5ET6+/8=
Subject key identifier:   E6:0F:8F:16:BC:C1:83:80:31:53:35:A4:29:A9:80:05:CC:B8:75:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E62398
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d65ece9-9d97-4e06-ab3d-fe570fee6a32/23bb5475fc90e5c132fef4724e9713249d0da0ae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d65ece9-9d97-4e06-ab3d-fe570fee6a32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Feb 2021 16:32:59 +0000
Certificate not after:    Mon 20 May 2024 02:07:01 +0000
Subordinate resources:    IP: 45.181.12.0/22
                          IP: 2806:346::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15082392 (0xe62398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 16:32:59 2021 GMT
            Not After : May 20 02:07:01 2024 GMT
        Subject: CN=23bb5475fc90e5c132fef4724e9713249d0da0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:e4:1e:50:08:fb:01:da:1e:ee:bd:f0:c6:
                    39:e9:e5:7e:f7:1f:9c:9e:dc:dd:03:47:7d:e8:e8:
                    ed:53:e8:cb:b6:8b:e8:38:77:17:a6:65:ac:3a:e2:
                    20:96:d8:8d:c0:0e:24:b6:7d:d6:fe:9c:b1:88:45:
                    3a:72:96:93:53:78:5c:0b:d4:58:64:f1:e7:b4:a1:
                    5e:33:c2:1e:b5:39:13:10:57:dd:5d:88:41:7a:e4:
                    b3:b5:82:12:a0:31:e5:b9:3d:55:73:d7:1c:d4:fe:
                    28:e8:05:8a:34:a2:53:ab:04:f6:98:8e:58:18:29:
                    a4:bc:ed:4c:e6:40:bb:bb:fe:71:b5:a1:56:6a:69:
                    23:c6:ab:50:ca:45:50:b5:4f:6f:c6:e0:9a:8c:01:
                    b3:4b:dd:2d:86:60:51:cf:62:b1:8d:e0:45:d9:c2:
                    91:f4:a7:87:5d:49:05:f1:7f:d2:3a:8c:d1:1b:a0:
                    12:27:2e:91:7c:4d:75:86:0f:35:b2:29:4e:b9:da:
                    bc:db:4a:d0:08:b0:9e:3c:ff:b5:73:d2:ba:dd:20:
                    5e:0d:0b:ce:d5:a6:10:09:d7:fc:6e:44:b2:61:fc:
                    e7:7e:4b:c1:1e:54:9d:a2:06:78:4f:69:07:a1:dd:
                    61:ca:31:c2:e8:4b:15:7e:19:d4:b2:25:c8:38:6d:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0F:8F:16:BC:C1:83:80:31:53:35:A4:29:A9:80:05:CC:B8:75:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d65ece9-9d97-4e06-ab3d-fe570fee6a32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d65ece9-9d97-4e06-ab3d-fe570fee6a32/23bb5475fc90e5c132fef4724e9713249d0da0ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.12.0/22
                IPv6:
                  2806:346::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:50:a3:87:b8:60:79:46:cb:ab:e9:55:11:d4:6c:e0:6b:
         0a:a6:04:79:dd:dc:c4:73:2c:e2:a1:13:b3:38:d2:17:ec:9c:
         69:7e:66:b1:54:99:93:70:25:cf:16:e8:70:19:8d:5c:7e:35:
         41:08:2c:10:42:1d:c9:c8:ba:47:03:df:9c:65:bb:9f:d3:8d:
         70:83:ef:0e:54:80:e3:48:1d:5f:88:0b:3d:07:89:d1:5d:ca:
         bd:41:59:ec:6b:62:16:12:1d:56:a9:cd:79:6f:a6:b1:65:89:
         cc:eb:b7:c7:72:95:1e:09:ce:0e:12:3b:67:04:63:f6:19:7a:
         7d:77:05:53:62:fd:23:a7:c4:cf:24:46:8e:71:35:5d:03:7b:
         f8:e7:dc:13:35:e7:be:44:d7:62:58:41:4a:63:65:47:18:9f:
         61:5b:7e:9c:40:d6:be:eb:5b:61:bb:c5:f5:d3:09:bf:48:ee:
         b5:6f:83:96:25:3b:4f:7d:6e:0c:11:89:ee:c6:ad:7b:f1:60:
         07:78:c9:00:de:0a:42:30:95:3a:1f:30:48:5c:b9:63:35:fa:
         70:eb:06:3c:58:0b:4d:11:e1:ef:80:03:33:14:ac:2d:52:1e:
         19:e8:2b:bf:fe:22:bb:b7:92:11:4e:fc:76:f5:2e:3e:04:96:
         bb:08:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:15 2024 by rpki-client on console-fra.rpki-client.org