Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer
File:                     23e6b47caf00c16218d730db4db550ca6fcb92ad.cer (raw, json)
Hash identifier:          TIA6PT/dotTHfhcLbxxtbj7hEO6I0Vz2xJq37v9fDV4=
Subject key identifier:   F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E34FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Apr 2022 14:35:04 +0000
Certificate not after:    Wed 16 Apr 2025 22:39:39 +0000
Subordinate resources:    AS: 271922
                          IP: 179.63.52.0/22
                          IP: 2803:df10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17708282 (0x10e34fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 14:35:04 2022 GMT
            Not After : Apr 16 22:39:39 2025 GMT
        Subject: CN=23e6b47caf00c16218d730db4db550ca6fcb92ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:5b:eb:f6:36:26:33:c9:51:7b:2d:04:52:
                    14:10:ed:d2:97:6b:d4:8b:bb:1c:29:5f:b6:a6:b0:
                    da:67:50:7b:34:49:0a:84:ce:1d:70:2c:43:93:63:
                    c0:18:97:b7:ff:3b:2d:ef:d0:b5:f6:4d:6a:f2:c6:
                    6f:56:fa:24:e9:b9:e4:74:82:78:80:1e:0b:33:9a:
                    67:9d:24:df:96:d6:36:93:33:00:d1:1e:f1:77:36:
                    1f:75:43:ce:32:70:01:2e:60:03:5b:24:3f:4f:1d:
                    ef:4e:c4:4b:10:67:19:da:6c:41:fd:9e:48:9c:1f:
                    7b:fe:7f:af:8d:81:a6:47:00:e7:f1:10:85:de:72:
                    f4:91:25:8b:a3:dd:8e:2d:39:74:82:05:75:fc:f1:
                    60:b3:b0:4e:aa:d0:60:bf:10:8e:e8:50:69:9e:7a:
                    d3:79:6f:b8:6d:88:3f:9e:25:f5:c3:f1:96:c8:bf:
                    78:72:cc:5d:23:db:21:68:54:24:2a:fd:9c:61:bb:
                    c7:d7:f5:42:07:76:24:9f:a2:85:6b:06:7b:e1:01:
                    44:3c:6d:c4:fd:5d:46:58:22:a3:ed:98:1a:ef:13:
                    99:a9:61:9c:56:e4:f4:2b:5e:aa:eb:3f:fa:d1:e0:
                    e2:18:6c:43:60:45:cc:ef:f7:d3:81:b1:a6:57:23:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22
                IPv6:
                  2803:df10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271922

    Signature Algorithm: sha256WithRSAEncryption
         c6:b8:f9:f6:1d:4c:45:77:18:43:51:f7:5f:70:e3:8b:2c:9c:
         10:52:d1:a3:e3:b4:ae:78:e9:f3:e1:27:1c:04:e5:aa:8e:bc:
         d9:28:8f:c2:d0:48:00:6d:c3:98:3e:c5:1c:c0:6a:26:71:93:
         6a:19:f0:36:37:8f:db:02:0a:73:75:ea:e4:a6:c8:f2:d0:96:
         89:c1:8d:2e:54:2e:63:1d:d9:e0:82:c7:01:39:e4:dc:9a:4a:
         ff:72:86:4e:db:a7:fa:cc:53:aa:f6:12:35:13:3c:de:1c:38:
         ec:aa:13:85:fa:f4:e1:55:db:f9:f5:d3:26:52:11:3f:db:78:
         55:38:d5:a0:cf:fe:09:a4:e8:3d:7d:ee:b6:86:47:87:0e:f1:
         5a:84:91:29:f8:ff:83:2b:9b:57:76:6c:7d:4b:64:93:60:e0:
         ea:c2:ab:e6:05:ac:e4:63:9c:43:d5:fc:74:e2:51:0f:fb:d8:
         fc:b7:78:3e:8d:23:4a:12:ae:83:70:50:3d:6b:56:88:25:8e:
         28:1b:d7:7b:dc:aa:48:7e:31:65:e3:37:89:05:b1:f1:25:7f:
         73:59:71:c2:55:e0:22:8d:a5:25:c3:87:6d:33:3c:31:b7:dc:
         3e:9a:68:67:dd:a8:34:03:91:ed:ff:f8:de:54:31:2b:e7:2a:
         4c:b6:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:29:08 2024 by rpki-client on console-ams.rpki-client.org