Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2683ef2da91fbc72839936eeb61d41ca90b91733.cer
File:                     2683ef2da91fbc72839936eeb61d41ca90b91733.cer (raw, json)
Hash identifier:          T8j4APjTEs1XYXHHatG5P7QGhlSKSrm7JVKThuPiWmo=
Subject key identifier:   FD:5A:B9:AC:D7:31:82:07:34:19:9A:C4:01:F8:FA:C9:B9:99:F9:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B96FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/2683ef2da91fbc72839936eeb61d41ca90b91733.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Sep 2020 17:27:07 +0000
Certificate not after:    Tue 25 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 27770
                          IP: 200.7.128.0/20
                          IP: 2800:1c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17536763 (0x10b96fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 17:27:07 2020 GMT
            Not After : Mar 25 15:00:00 2025 GMT
        Subject: CN=2683ef2da91fbc72839936eeb61d41ca90b91733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:24:ed:5e:08:49:4d:54:1e:6d:ee:70:b2:
                    64:bf:2f:c8:d8:69:99:d2:5c:f6:5c:07:ff:46:b2:
                    47:af:a0:c7:d0:b8:35:b2:14:ab:7b:f8:1b:9b:ba:
                    6a:68:06:47:a7:81:6c:55:ff:26:5a:db:e0:41:f3:
                    f3:9e:23:be:f8:df:92:36:6c:b4:70:f2:be:55:48:
                    41:f4:07:c5:26:f5:1f:eb:8a:d1:8e:0e:d0:d5:92:
                    25:75:8e:07:1a:de:f2:07:4e:ab:1b:3f:b7:03:59:
                    9c:b5:15:61:20:86:f7:68:ec:42:62:96:5c:7f:7d:
                    b8:69:b5:e7:ea:7e:14:2b:8d:31:03:d7:52:99:52:
                    fb:21:b7:d8:f3:48:ec:22:91:e5:bc:b8:25:a4:60:
                    27:b8:60:f7:75:4b:32:bc:01:7b:f2:35:67:ae:7b:
                    34:9b:87:af:94:6b:65:ea:9e:43:40:f8:73:52:fe:
                    89:1b:1f:54:d8:3b:ec:9c:cc:c9:3e:9d:70:e9:b6:
                    8e:98:7d:07:0f:cd:0c:97:e4:de:97:d3:5c:f6:ae:
                    86:34:7d:d6:50:c4:df:e8:61:03:5d:99:a5:b4:60:
                    67:29:93:f6:d5:7e:d7:44:1e:08:bd:4c:36:f4:87:
                    dc:46:bb:96:65:f0:f2:24:bf:f8:9b:32:87:71:db:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:B9:AC:D7:31:82:07:34:19:9A:C4:01:F8:FA:C9:B9:99:F9:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40dfe202-07d3-47c3-84d3-7f050c014547/2683ef2da91fbc72839936eeb61d41ca90b91733.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.128.0/20
                IPv6:
                  2800:1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27770

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:9b:86:d0:be:82:0d:2e:fb:65:31:41:25:d1:a2:50:cd:
         39:1c:f3:21:6b:3a:2e:a4:6a:2f:fb:b1:6b:2e:23:8e:bf:9c:
         e1:79:f7:62:8d:ff:de:12:4a:aa:72:6e:c2:7b:85:85:b4:78:
         72:70:71:2f:5c:b2:db:49:ab:61:60:ff:8c:fc:08:7c:56:9e:
         81:b8:77:1b:c0:20:25:54:82:e1:32:1b:2c:df:d0:88:7b:ff:
         1a:b8:79:2e:a2:aa:27:58:04:5f:84:10:66:5f:92:08:12:e1:
         b3:17:27:17:6c:5c:71:f9:3c:c5:d0:1b:2e:4a:59:9f:1d:bf:
         da:92:9d:1c:f7:dc:1c:57:2c:06:d7:5b:2e:08:5c:c0:6d:fc:
         a5:4a:86:97:ca:9e:58:79:50:96:d8:90:1d:29:dc:1c:95:55:
         dd:e1:13:37:1b:28:02:ff:16:dd:75:2c:40:92:91:f5:28:b7:
         cb:38:7e:a9:7e:dc:7e:47:2e:78:9b:24:d0:37:a0:56:58:c3:
         f4:ba:24:7e:16:43:f3:a6:c4:fb:e1:84:01:cf:8d:ea:dd:0e:
         6a:67:7b:3f:99:f8:9e:91:ef:d7:bb:c4:f1:1f:ac:0f:92:1d:
         e7:2a:ff:e1:72:7c:b8:03:1a:f0:ee:8b:05:43:27:2f:be:27:
         98:79:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:34 2024 by rpki-client on console-fra.rpki-client.org