Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer
File:                     32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer (raw, json)
Hash identifier:          AHInN7j6u+OhuxHYQFFAl1b8X9d6MKx/YsC6f8LYB6Q=
Subject key identifier:   69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A4280
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Aug 2020 23:50:19 +0000
Certificate not after:    Sat 15 Mar 2025 06:00:00 +0000
Subordinate resources:    IP: 45.236.44.0/22
                          IP: 2803:48a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17449600 (0x10a4280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 23:50:19 2020 GMT
            Not After : Mar 15 06:00:00 2025 GMT
        Subject: CN=32a8b2a97729bd1e6de885b58fd0c34c4a661ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:f1:d9:a3:8b:a7:4f:8b:58:d1:e9:2b:b1:
                    e6:8a:92:ef:7c:53:59:4c:f1:fb:b1:7d:45:a3:65:
                    12:59:ad:50:c6:bd:c1:ed:7e:1a:a7:a0:05:e8:de:
                    88:9b:bb:72:f3:a7:c0:10:fa:91:c0:24:8a:84:42:
                    c6:4d:cf:da:75:85:de:73:0e:2f:1b:09:26:a3:66:
                    45:ca:a8:f1:67:38:26:05:0c:13:31:6f:6c:38:f1:
                    8e:b6:b7:6b:b6:a7:40:e7:06:0f:69:90:38:ce:d5:
                    c6:4e:a3:6b:b4:db:90:32:a3:5d:46:b7:08:e3:66:
                    17:82:8e:51:c7:e1:a1:95:76:13:95:c7:78:27:9c:
                    1f:ea:d6:36:b9:8b:31:03:e1:cf:e4:c4:48:0a:0c:
                    dd:96:ef:90:c4:e6:ff:d4:a0:33:0a:63:b1:76:a0:
                    8a:5b:ee:89:ca:de:d2:bf:b5:58:be:54:f5:1b:e7:
                    17:eb:4d:35:82:c3:ef:c1:46:7c:4e:8a:40:19:fe:
                    fd:26:16:50:12:1a:5c:46:d6:4a:b0:75:b5:5d:9d:
                    3b:02:89:47:7b:ac:2c:76:95:b0:fb:c7:e4:23:35:
                    cf:cf:0f:48:63:7b:5a:cd:66:a3:ce:92:02:7a:69:
                    7f:d8:c3:2d:75:6d:02:b3:c7:8a:4e:e2:ac:3e:46:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.44.0/22
                IPv6:
                  2803:48a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:fa:6b:33:91:2d:7a:7e:54:35:e6:40:98:dd:bf:d6:be:f6:
         08:88:ff:c7:81:24:65:41:bc:cd:d5:df:62:00:d9:8e:51:e8:
         c3:0a:e6:13:86:6a:84:66:a2:b6:1f:cf:32:cf:d9:ef:be:0a:
         97:87:91:60:00:d7:4e:8a:d6:bd:1b:1d:9e:0c:c6:84:3a:78:
         f9:a1:54:46:ef:b4:92:8e:9c:9d:f5:b4:cc:42:fe:86:1e:07:
         63:82:a0:10:a8:4b:33:ef:0a:ee:b6:df:56:c1:26:7a:89:58:
         d4:30:68:fd:e9:e6:b5:51:37:3d:f7:69:e9:3e:87:b6:51:d9:
         00:8f:3b:b5:ce:a6:9e:9b:f1:73:51:f8:ec:4f:7d:37:38:e8:
         2b:75:ee:1d:8b:2a:2b:09:3a:fc:21:97:55:fb:d6:7f:7b:f5:
         56:b2:79:86:00:59:51:be:06:23:f9:87:81:67:b6:d4:05:26:
         c1:52:34:0a:c8:f1:c9:5d:79:fd:1d:5c:c3:d1:6a:0d:94:97:
         2a:eb:13:94:63:db:05:f5:1c:e7:2c:86:12:0a:86:b6:7b:43:
         6d:2f:93:24:5d:ca:24:05:47:53:01:90:da:aa:d8:19:26:22:
         1b:a2:d3:5c:7b:3b:8e:39:47:a1:8d:15:49:80:f2:fa:31:12:
         77:01:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:18:56 2024 by rpki-client on console-fra.rpki-client.org