Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
File:                     2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer (raw, json)
Hash identifier:          +JEOfaCnKb6L+5GVfAL3C1XWVXJsyvBs+qSC4UGOX8s=
Subject key identifier:   BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010940F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Feb 2021 20:05:35 +0000
Certificate not after:    Wed 05 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 263227
                          IP: 200.112.192.0/20
                          IP: 2803:e80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17383665 (0x10940f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  2 20:05:35 2021 GMT
            Not After : Mar  5 06:00:00 2025 GMT
        Subject: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:8c:59:e3:10:f3:a1:f2:f5:61:ce:ae:68:
                    6a:3e:e3:25:3d:cb:e0:35:82:84:cf:eb:5d:af:d4:
                    75:2f:a2:44:93:cf:52:ff:dc:c8:f6:60:5e:5a:c2:
                    3c:47:c7:c0:48:ee:4a:dc:96:34:6e:ad:de:ec:94:
                    db:66:6c:a7:0a:2f:09:01:62:76:bf:a1:99:6e:c9:
                    94:7a:7b:04:8e:26:a8:f4:1e:6d:b0:57:94:38:0a:
                    17:14:39:8b:71:5e:a4:72:66:07:9f:3d:75:7a:78:
                    eb:73:a7:9b:51:94:9c:e6:57:7d:db:23:0c:51:9f:
                    7e:79:b1:d7:bc:f7:d6:a0:41:4a:7c:0a:4e:cb:c1:
                    c9:9b:ef:39:b8:e0:61:9f:91:5b:12:83:20:83:de:
                    f1:d3:39:f6:6c:f9:b1:e1:df:e0:f8:62:0a:d2:2a:
                    22:bb:4d:56:b7:63:31:0a:e5:03:ff:f8:35:d4:bd:
                    ed:6d:fb:32:10:51:36:b3:2e:97:11:fe:8b:8f:01:
                    d1:d3:df:42:92:06:44:df:e8:e7:af:22:b1:50:70:
                    ab:e1:a5:a9:4c:0f:46:85:37:2c:3e:d3:c5:86:3e:
                    0c:76:8c:64:63:82:50:20:17:71:5e:e2:e7:c9:06:
                    9e:2a:fa:14:f8:25:69:f1:c1:0d:72:ab:5f:ae:e5:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.192.0/20
                IPv6:
                  2803:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263227

    Signature Algorithm: sha256WithRSAEncryption
         6c:b8:55:b3:1f:4d:2c:96:6e:1f:10:5a:82:a5:c8:9a:af:f3:
         9c:c1:93:a0:62:05:ca:63:04:77:70:43:81:6b:89:8b:30:a4:
         00:39:48:a1:a3:42:78:c2:d1:4a:45:30:5d:2e:94:12:64:e1:
         a9:99:8a:06:f5:b7:1b:50:68:f2:b0:13:5a:1a:20:34:71:db:
         97:bb:7b:3c:e0:4e:42:0b:db:27:9e:a0:14:66:24:ca:2d:1b:
         d7:7d:02:01:fb:0c:26:2d:f0:b7:c0:5c:69:bc:65:d8:b1:4a:
         b3:7e:e1:95:12:14:52:54:19:fb:be:f4:b4:09:0e:fa:6e:c9:
         31:70:22:5b:3e:b2:69:8f:a2:ca:b1:da:43:d7:de:f8:7b:15:
         f8:60:e7:05:d4:b4:0b:eb:bf:07:45:ab:3f:f9:0d:63:71:9a:
         6b:38:7d:43:31:d8:06:6d:fc:18:23:44:a5:86:08:73:54:69:
         8c:4d:66:78:99:9c:b1:9a:89:2a:c4:69:9f:b4:4c:c9:f2:58:
         90:c6:07:c3:e7:41:db:4c:fa:65:11:0d:39:ae:58:2b:93:d5:
         82:33:25:d3:2b:c1:e2:6b:34:6b:ff:55:6a:6b:49:10:33:67:
         3a:b4:43:9f:54:88:3e:db:07:a5:ac:52:44:3c:25:f4:51:a6:
         ac:fe:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:18 2024 by rpki-client on console-fra.rpki-client.org