Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27e1ab795ab87c1c136f878e5867e526f30254de.cer
File:                     27e1ab795ab87c1c136f878e5867e526f30254de.cer (raw, json)
Hash identifier:          15enSTqv0JMDMDLGPWzp0FVUQ7XuWfHggnEtUPCCn1w=
Subject key identifier:   1A:BA:19:E7:12:DF:F0:C1:89:D8:5E:81:DE:70:CF:9D:31:89:42:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01003D20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/27e1ab795ab87c1c136f878e5867e526f30254de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Feb 2022 14:42:44 +0000
Certificate not after:    Sat 07 Dec 2024 13:59:37 +0000
Subordinate resources:    AS: 272066
                          IP: 2803:5310::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16792864 (0x1003d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  9 14:42:44 2022 GMT
            Not After : Dec  7 13:59:37 2024 GMT
        Subject: CN=27e1ab795ab87c1c136f878e5867e526f30254de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:f0:63:29:e1:52:09:16:b0:0b:5d:e1:8f:
                    d9:1a:0d:b6:11:a2:bd:e0:c4:25:05:53:fb:a9:38:
                    62:70:b8:72:0c:f8:8b:cd:08:42:e3:be:1d:1b:43:
                    dd:10:bb:64:8b:d0:5b:79:6b:f7:c5:40:78:37:f8:
                    ee:da:65:20:87:d0:6b:ee:13:4e:b9:19:7c:19:0e:
                    00:3a:72:82:06:4d:a3:68:0e:5c:ad:99:ed:7d:eb:
                    27:8b:f2:da:a7:c3:06:0b:34:6b:7d:4a:4c:6d:2a:
                    ed:ac:a2:5c:d1:07:91:e8:12:d9:47:a3:52:05:a5:
                    99:ec:ca:2a:6f:de:eb:5e:a8:6f:75:a0:e5:99:26:
                    3d:97:7a:98:a3:3a:76:bb:44:76:6f:8b:2b:41:b5:
                    3a:ea:c1:c0:66:87:2e:a4:e0:be:01:35:2c:51:94:
                    12:a5:4e:ca:d5:ec:b7:94:ca:23:3b:d2:f1:ef:52:
                    ac:1b:c0:3e:f4:1e:4f:97:7f:e0:85:50:ce:91:92:
                    67:7d:9c:3d:34:b6:49:5a:8d:a9:2e:c5:96:f1:1d:
                    4f:c8:11:67:4b:b0:56:fd:99:35:9a:6f:fc:4b:6d:
                    82:86:b1:c2:77:a1:22:53:6d:91:32:01:29:2b:e9:
                    77:ce:59:e0:87:24:0b:af:98:cb:60:a1:d9:d5:38:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:19:E7:12:DF:F0:C1:89:D8:5E:81:DE:70:CF:9D:31:89:42:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9619796-aa3d-488c-83ae-e5082d0f5683/27e1ab795ab87c1c136f878e5867e526f30254de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272066

    Signature Algorithm: sha256WithRSAEncryption
         c0:6c:e8:6b:1d:f3:bd:e3:d5:9a:73:d1:01:49:d3:2b:1c:15:
         dd:39:65:ec:59:13:63:b8:17:52:0e:ae:8f:39:49:55:99:92:
         ac:0c:5d:95:57:f8:92:b8:f7:7f:a6:3c:0c:29:64:8d:3b:bb:
         83:bd:11:a4:c3:3b:ae:a8:3e:2c:51:ad:4a:8b:d8:04:58:96:
         ee:b5:69:3f:24:61:e4:1f:74:94:14:81:ca:1c:c8:b8:10:b6:
         d8:d2:c8:cd:6f:bc:61:08:b0:a4:70:4c:0e:af:92:14:71:b4:
         da:96:d0:b9:40:53:e0:32:85:34:6b:66:6b:f0:86:1c:2c:6d:
         2d:5f:3e:99:76:20:54:bc:39:91:9f:13:6b:ee:40:a5:0e:b0:
         c9:35:c8:27:f0:65:cb:18:f1:04:03:ca:45:75:e7:42:74:66:
         2c:20:b4:da:7e:68:37:42:57:72:c1:d9:a3:9b:30:8e:a5:74:
         33:90:e2:59:b9:0e:be:7b:e9:50:b1:29:f8:18:09:9c:1e:b2:
         36:4e:48:fb:e5:91:50:43:77:44:b2:62:da:03:3c:85:13:4c:
         8d:2b:e9:12:eb:7e:37:0c:f6:71:73:88:44:46:f2:e1:df:62:
         9d:8e:68:3a:e8:10:64:cb:7e:fd:56:61:f8:3a:02:4a:5d:13:
         7a:ce:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:41 2024 by rpki-client on console-ams.rpki-client.org