Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26efc3df46a2faeeb1bb666625a2a05f3a056ea6.cer
File:                     26efc3df46a2faeeb1bb666625a2a05f3a056ea6.cer (raw, json)
Hash identifier:          rd4QUuExx2oTlFopSJWctPwv+ZpbcvrSLvVGhSEEIrQ=
Subject key identifier:   7F:6F:85:1D:5D:FB:6A:D7:64:8A:3E:5F:1B:10:BC:9F:A2:6E:49:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E813A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5643f861-5285-4f38-b7d2-9b8ad1f37b1b/26efc3df46a2faeeb1bb666625a2a05f3a056ea6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5643f861-5285-4f38-b7d2-9b8ad1f37b1b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 13:34:15 +0000
Certificate not after:    Fri 10 Jan 2025 13:42:02 +0000
Subordinate resources:    AS: 272087
                          IP: 2801:15:9800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15209384 (0xe813a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 13:34:15 2023 GMT
            Not After : Jan 10 13:42:02 2025 GMT
        Subject: CN=26efc3df46a2faeeb1bb666625a2a05f3a056ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:93:5b:ac:08:79:fb:de:a6:da:fb:74:e5:
                    f7:4d:24:f7:1d:f9:20:c4:f8:87:4f:0b:ee:fb:5b:
                    e5:f5:87:7e:47:0f:72:22:bb:ac:7c:2a:86:f7:1e:
                    b6:dd:04:8d:e1:30:91:0d:94:8f:64:0f:1f:d8:79:
                    58:59:f8:ec:f3:69:11:b7:e7:cd:8a:fa:38:c3:4e:
                    6c:f1:90:da:4a:cc:05:27:2c:1e:33:71:5d:31:1a:
                    83:e2:60:2f:44:13:24:7f:fa:de:85:e4:bd:d8:b1:
                    28:a4:ca:c2:ae:3f:60:fe:52:27:8c:53:37:ce:00:
                    4f:d7:d6:23:16:f2:3e:42:b7:67:87:d8:13:93:53:
                    a9:ca:ad:16:44:d0:2b:18:73:bb:24:27:de:17:06:
                    b0:e9:ad:dd:9d:65:a3:88:68:b4:c0:51:75:28:c7:
                    85:f0:87:4b:30:4b:ef:66:9a:a9:3c:f0:12:9b:9b:
                    87:d5:64:e8:69:1d:c8:b8:19:9c:e6:43:1f:81:be:
                    5d:4a:ba:d1:2d:07:f0:01:8f:0b:f3:79:3f:11:e7:
                    1d:3b:d2:b7:1d:0e:9a:e4:c4:b1:81:25:9e:ee:11:
                    9c:fa:f0:e1:68:03:76:2c:ac:78:ed:a4:64:dd:46:
                    44:a0:1e:ec:95:f1:8f:47:63:01:08:03:95:8d:90:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:85:1D:5D:FB:6A:D7:64:8A:3E:5F:1B:10:BC:9F:A2:6E:49:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5643f861-5285-4f38-b7d2-9b8ad1f37b1b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5643f861-5285-4f38-b7d2-9b8ad1f37b1b/26efc3df46a2faeeb1bb666625a2a05f3a056ea6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:9800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272087

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:d7:78:d8:28:b6:af:c7:45:f6:4a:e8:03:83:9a:83:a7:
         10:7e:df:64:b2:44:6c:0e:27:8a:7a:36:0b:03:3c:8a:c8:57:
         1d:a4:21:bd:39:91:e1:56:2a:a7:9f:55:07:a5:56:09:33:22:
         8d:f1:76:e4:e5:f0:53:ac:10:1b:00:85:f8:96:78:68:da:ed:
         be:10:d9:18:b3:96:05:4f:1b:ec:09:d9:ee:c0:89:32:bf:65:
         b3:c7:14:52:7f:9f:28:10:c0:2b:6b:e6:f7:e4:cd:fb:6b:7e:
         fb:2d:6b:26:05:98:cb:69:54:ff:cc:ad:5d:da:96:ab:e1:0d:
         48:95:cb:56:c4:84:36:aa:5d:31:26:51:ff:30:01:a5:ff:ee:
         67:4e:2c:35:02:01:28:25:a5:89:f8:7e:57:9a:84:f3:81:7d:
         80:d8:a8:0f:4d:1a:cb:49:3a:a3:fc:52:49:14:04:f5:3f:69:
         5e:6b:b7:f4:18:dd:73:42:ac:c5:ff:90:3e:99:33:27:fc:7f:
         e9:27:b0:c6:7e:fb:63:d2:48:a5:27:ca:40:95:a3:39:a8:66:
         08:01:a7:7d:5f:b0:6f:9f:1e:16:f6:ad:1d:45:15:57:48:0b:
         6b:db:18:68:73:21:9e:d2:6e:14:d9:10:3e:35:9c:6f:da:ef:
         c8:3c:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:29:08 2024 by rpki-client on console-ams.rpki-client.org