Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
File:                     2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer (raw, json)
Hash identifier:          fNLLayZNmf7BsQ1d0zIKi6x0lWpqtDKNKVsqm3uU1hQ=
Subject key identifier:   92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F96A69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Dec 2020 02:40:48 +0000
Certificate not after:    Mon 14 Oct 2024 14:52:19 +0000
Subordinate resources:    AS: 271837
                          IP: 179.63.20.0/22
                          IP: 2803:5810::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16345705 (0xf96a69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 15 02:40:48 2020 GMT
            Not After : Oct 14 14:52:19 2024 GMT
        Subject: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:20:d7:44:19:90:73:5d:74:d0:f8:58:75:
                    f6:d0:52:04:96:ef:e0:da:20:7d:c3:4a:7e:91:73:
                    a7:47:4b:a0:98:33:3f:d0:00:59:0b:96:0c:d4:67:
                    a7:4c:1b:fd:86:c2:ab:d3:15:1d:84:02:c6:36:4d:
                    2d:e2:cb:db:2f:64:c2:8e:de:a4:08:89:eb:4d:7f:
                    19:5a:a4:11:fc:42:3d:87:1b:73:04:d2:6c:f4:f2:
                    45:ba:b2:0a:9d:0c:f2:e1:06:39:7f:0d:5e:18:ac:
                    93:9a:fe:63:2c:5c:13:36:7e:a3:ff:1e:b4:44:75:
                    4d:f0:c9:0a:ae:a8:8a:fb:3a:b9:02:4c:e5:a5:47:
                    d9:03:0b:46:77:de:eb:bb:18:46:05:45:16:3a:35:
                    6e:95:f0:78:b4:32:b1:d9:f0:1b:23:4e:91:a1:a8:
                    60:b5:db:40:6f:d0:c0:ec:24:42:77:29:aa:af:72:
                    41:28:11:ab:49:33:ae:ee:0d:04:ce:69:f3:9f:23:
                    ea:67:d1:f6:bd:a2:a7:38:6c:03:60:b8:70:14:83:
                    cc:ce:11:fb:f4:99:17:27:fd:49:ef:30:be:65:7a:
                    3e:cb:8a:71:60:75:f6:5d:84:d9:bc:0d:33:5b:ca:
                    a9:db:f6:e6:81:f8:48:51:c1:77:e3:67:67:bf:1a:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22
                IPv6:
                  2803:5810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271837

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:dc:e9:a1:e4:b4:63:a4:07:7e:59:bb:02:4c:23:92:2a:
         a4:cb:d9:98:84:d0:0d:d7:ee:9c:10:5b:f3:ce:9f:18:8b:7b:
         a8:74:7d:29:a1:93:2d:25:ae:78:da:03:75:c5:09:75:68:eb:
         0c:da:a3:be:2d:7e:a1:3b:8e:15:d6:91:90:1b:25:0d:ef:22:
         c5:fa:1a:7b:a7:9c:11:20:15:14:14:e4:f5:f3:34:9b:05:5b:
         30:7f:c5:43:d4:2b:4f:cb:f6:2b:d5:21:41:ef:5d:8f:39:c9:
         f6:cf:b8:48:64:f9:c8:fa:97:a6:31:15:da:77:45:d3:d3:cb:
         b0:7f:b3:8c:e3:e4:ac:e6:fe:fb:f2:b7:12:e8:29:18:8d:bf:
         34:2b:21:40:f4:25:89:69:23:a3:08:44:ab:93:68:08:50:ff:
         49:b5:39:78:1f:71:5b:6c:46:20:6c:06:2b:1e:d9:cf:1e:44:
         ab:4a:75:95:cb:6c:a7:ef:63:27:00:4c:7a:c7:d9:93:9c:fc:
         69:90:be:63:e9:e0:f5:24:d5:5e:57:0f:e6:fa:d6:8d:fe:ee:
         43:76:85:a3:19:59:8c:bf:fd:6f:30:27:59:2e:80:a5:98:c3:
         f3:18:70:55:11:e2:c7:a7:75:ee:00:3c:a0:96:0e:7d:12:19:
         58:16:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:35 2024 by rpki-client on console-fra.rpki-client.org