Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/281bebe647f8282f645bffb38feb15c2808f4701.cer
File:                     281bebe647f8282f645bffb38feb15c2808f4701.cer (raw, json)
Hash identifier:          oScPFjkllFK4rSaYYpfDYUiKLeE3oZ0WHpro/y0u7kk=
Subject key identifier:   15:8F:D4:10:6F:3C:88:10:D0:71:1E:88:16:11:E3:37:BF:C5:C4:8F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA98FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/281bebe647f8282f645bffb38feb15c2808f4701.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2019 21:11:48 +0000
Certificate not after:    Wed 23 Oct 2024 21:51:48 +0000
Subordinate resources:    AS: 269884
                          IP: 45.188.216.0/23
                          IP: 2803:f8e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16423162 (0xfa98fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 23 21:11:48 2019 GMT
            Not After : Oct 23 21:51:48 2024 GMT
        Subject: CN=281bebe647f8282f645bffb38feb15c2808f4701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:67:6a:a5:b6:24:03:78:b2:93:69:ab:27:44:
                    22:c8:24:b3:f5:e5:03:e2:a8:e3:91:7a:c7:f5:63:
                    f5:36:6d:c4:e3:81:46:47:a8:97:06:29:53:66:8a:
                    f3:f5:b4:03:e3:90:b7:b7:a0:23:30:3d:44:57:c2:
                    a0:9b:83:6d:54:67:72:28:c2:a8:ff:fd:54:ea:02:
                    61:a2:1e:9a:4a:e3:7d:b2:52:15:00:fc:00:10:81:
                    09:7a:37:76:6c:9f:c2:32:4b:ce:a5:99:a3:3b:b5:
                    5b:28:15:36:bf:76:18:0a:79:85:79:13:f4:95:c3:
                    87:ca:28:dd:d8:e0:bf:6e:2c:36:23:e0:09:b5:01:
                    0f:90:b5:c2:f3:24:a9:a1:ce:90:37:d2:1d:34:88:
                    16:9e:b9:33:5b:c2:74:08:8e:f5:4a:9b:8c:da:b7:
                    38:69:37:03:52:a0:81:f7:3b:9d:b2:64:16:37:a4:
                    35:28:28:e2:15:23:27:f2:a2:dc:53:29:13:40:88:
                    80:3c:d7:74:7e:95:1f:62:06:bc:88:a3:92:6d:2b:
                    87:64:70:c5:a4:0c:d5:df:34:87:fc:fa:83:dc:f1:
                    c6:b4:68:ff:ad:02:45:45:5d:e0:dd:a4:83:52:62:
                    bf:44:e0:8c:20:6a:75:10:05:e9:05:1b:df:10:c9:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:D4:10:6F:3C:88:10:D0:71:1E:88:16:11:E3:37:BF:C5:C4:8F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/281bebe647f8282f645bffb38feb15c2808f4701.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.216.0/23
                IPv6:
                  2803:f8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269884

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:da:eb:cd:f1:58:4f:f4:cf:c8:af:20:47:84:0c:88:5d:
         a2:85:83:e8:8d:cb:19:6e:f7:a4:be:87:59:1d:02:cc:94:79:
         7d:71:7f:fa:8c:d6:68:10:72:39:eb:16:a8:c9:8c:d6:b1:12:
         02:da:58:c7:32:7c:f7:59:c6:23:21:21:d2:ed:a1:48:a2:fb:
         ab:7d:07:ec:97:63:21:c5:d8:7b:ac:22:73:38:be:55:b3:f2:
         31:93:3d:b4:32:0b:bb:76:96:52:f4:20:c5:0a:ea:98:df:b4:
         93:ad:55:d4:aa:74:22:73:a1:c3:12:f8:4e:8f:bd:6a:87:a3:
         46:7a:f8:49:1c:1a:73:7e:ad:ce:3c:bc:83:27:67:bd:e3:a0:
         74:cc:8e:52:81:a9:dc:a6:f3:13:f8:13:de:d9:e2:55:e6:1a:
         84:89:9c:69:1f:57:34:79:1e:66:c7:1a:6c:d9:6a:d0:a1:fb:
         fd:7c:2b:37:ca:f7:d0:f8:63:b8:28:58:d1:2c:44:ee:fd:83:
         07:ca:65:0a:c0:ae:6d:9a:8b:e8:ea:27:6b:ac:7f:6b:0b:95:
         ac:25:44:86:20:08:3d:36:29:01:6a:81:fd:ae:15:fb:9f:da:
         29:fd:9f:92:7e:08:3f:86:03:75:a0:e2:85:4d:25:97:4a:bd:
         1c:e1:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:34 2024 by rpki-client on console-fra.rpki-client.org