Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/256a73d54cc1652afe409fc35e8303e2f394eee0.cer
File:                     256a73d54cc1652afe409fc35e8303e2f394eee0.cer (raw, json)
Hash identifier:          gMA95vOveUuEAXe4ME3PIRjelUpS4wSbSA4ZVwOXR8Q=
Subject key identifier:   E0:D7:61:A7:7D:05:2A:25:FE:E4:9F:C1:BC:88:8C:8A:35:6B:AE:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104B698
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Jul 2022 17:31:03 +0000
Certificate not after:    Thu 23 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 20106

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17086104 (0x104b698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 25 17:31:03 2022 GMT
            Not After : Jan 23 05:00:00 2025 GMT
        Subject: CN=256a73d54cc1652afe409fc35e8303e2f394eee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ac:b7:ef:bc:90:61:af:a1:53:cc:ab:a9:7b:
                    f2:0e:4a:33:8e:2c:56:ec:07:80:6c:b9:61:2d:08:
                    a0:02:60:e6:b6:8c:96:23:6e:5a:1e:b1:5c:dc:b2:
                    1c:d1:2b:7b:18:9c:44:7c:d6:f3:7a:a8:c1:ba:95:
                    25:e0:ee:ab:94:d1:5e:ab:bd:15:b9:c5:e8:70:7d:
                    92:8a:8f:c2:91:6e:74:1c:fd:a9:25:6d:6b:5f:4a:
                    9a:ef:e5:ba:7a:b3:d5:4a:d9:fa:da:ec:f3:9e:d2:
                    a1:0e:00:b3:11:ac:5b:ab:67:07:05:65:7e:1e:7d:
                    7d:94:85:3a:aa:25:ec:86:20:79:9c:96:e3:c5:43:
                    dd:5d:c3:b5:9c:a7:25:b8:df:11:33:6f:bc:17:c8:
                    1a:20:87:a5:54:fb:60:c9:e9:86:74:61:a3:26:0e:
                    04:98:b4:cd:d2:23:2c:ec:d5:27:6c:9e:7d:a5:f8:
                    a2:6e:be:10:f8:52:01:77:0c:46:01:aa:c9:88:fa:
                    08:bb:3c:44:9b:7a:34:72:19:28:84:ca:ca:73:0b:
                    dc:97:f2:ff:6d:19:0c:e6:ab:18:cb:58:05:e6:9d:
                    05:43:c6:6f:e4:ec:ff:b1:0c:f4:f9:e3:86:02:89:
                    48:8d:19:db:36:85:21:f1:e9:4d:4d:e9:d3:40:53:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D7:61:A7:7D:05:2A:25:FE:E4:9F:C1:BC:88:8C:8A:35:6B:AE:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbf5220b-7473-447e-bb6c-aeda2b0ab587/256a73d54cc1652afe409fc35e8303e2f394eee0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20106

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:0e:0f:9b:a9:60:21:71:8d:7f:db:37:b3:ff:75:fc:48:
         b1:2d:29:03:46:f6:0a:15:ed:de:53:a6:41:a3:53:bd:12:9b:
         59:7b:e9:e3:00:fe:98:bb:c9:56:d2:76:a2:15:d1:36:ae:7e:
         6d:f2:4b:32:3c:c5:e4:17:ca:d0:6f:05:2d:86:8e:b9:80:b5:
         27:90:cd:a6:9c:74:5d:7e:25:76:36:f5:5c:98:7a:61:0d:b0:
         15:89:bc:1b:77:0a:15:36:ad:1e:6d:94:0c:5b:bf:91:a3:ac:
         fb:e7:a2:7d:c0:ee:fc:90:fd:b2:19:53:07:44:f8:c4:a4:d4:
         cc:bd:61:d1:21:6f:3e:18:e3:5b:3d:26:5d:f3:db:33:73:25:
         32:ce:47:51:55:31:e2:03:a2:a2:c6:77:6e:47:c4:23:f6:5e:
         8b:92:af:18:3a:0a:63:ba:3f:b5:0f:e4:c8:c7:bf:6e:b9:b5:
         c1:a2:e4:50:b4:00:36:63:17:0d:2c:db:33:c5:60:82:63:f8:
         25:5c:90:c1:ee:22:bc:35:cf:ce:a1:66:0e:7b:de:60:49:50:
         0d:bf:50:21:e2:50:d8:72:c7:aa:14:c7:37:c9:ea:3c:b8:72:
         c9:56:25:12:53:5d:c4:f1:14:95:01:73:47:eb:6f:b4:19:db:
         98:ff:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:15 2024 by rpki-client on console-fra.rpki-client.org