Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3467d0cdec2b9dd04215297fcdde668300dd3ccc.cer
File:                     3467d0cdec2b9dd04215297fcdde668300dd3ccc.cer (raw, json)
Hash identifier:          MrcXRvYdK3RxE9tw4ZeznZCd5hl9W4szRdkMqW6QQBE=
Subject key identifier:   AF:D3:2E:EC:AB:D5:DB:7A:88:0D:68:A0:A4:1A:13:0A:C8:D5:5D:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0A9AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/3467d0cdec2b9dd04215297fcdde668300dd3ccc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 14:48:06 +0000
Certificate not after:    Sun 18 Aug 2024 18:37:20 +0000
Subordinate resources:    AS: 272891
                          IP: 2803:c690::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14723503 (0xe0a9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 14:48:06 2023 GMT
            Not After : Aug 18 18:37:20 2024 GMT
        Subject: CN=3467d0cdec2b9dd04215297fcdde668300dd3ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:ad:16:19:40:1e:ad:02:28:74:a9:e4:9d:
                    76:2e:6e:3b:c6:59:57:5d:04:cc:ad:52:5e:c2:75:
                    a6:80:74:e4:6d:5d:26:f4:e4:6a:a6:09:73:09:55:
                    5f:0a:7f:a8:38:1f:bf:1b:86:c8:82:bb:d8:4a:70:
                    6d:09:6e:fa:46:22:85:1a:00:48:1c:a9:58:f2:00:
                    a3:74:e9:ba:fb:62:68:bd:3a:34:b0:12:4f:03:b3:
                    70:70:2a:bc:d2:f4:02:b4:24:70:61:0a:2f:3f:af:
                    6a:6d:57:7c:1c:00:2d:ed:b6:05:fa:94:b4:60:e0:
                    6c:c7:49:9e:4c:2a:43:f3:eb:2f:f2:d4:3d:49:02:
                    7a:bf:ea:ac:90:67:e1:07:29:1c:18:03:9b:81:fe:
                    63:fc:f0:d7:88:94:83:9b:83:34:48:a9:83:74:49:
                    7b:5a:88:e8:b6:6d:a4:46:d9:9a:74:50:3a:b1:86:
                    03:82:37:82:6e:11:fe:6d:28:dd:63:c6:ef:46:d8:
                    c2:8d:46:43:96:51:92:fd:b2:4d:47:79:47:31:2b:
                    4e:33:9d:c5:40:39:b2:00:d0:41:86:50:93:61:65:
                    75:d3:f6:40:e3:02:85:66:46:e0:3c:7f:1b:34:b7:
                    c6:c2:76:dd:c6:33:b1:ab:1c:66:b2:47:68:fb:eb:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D3:2E:EC:AB:D5:DB:7A:88:0D:68:A0:A4:1A:13:0A:C8:D5:5D:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/3467d0cdec2b9dd04215297fcdde668300dd3ccc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272891

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:a5:60:db:0e:dd:5f:22:af:49:9d:ca:89:1d:05:0f:de:
         5a:f8:89:85:73:b8:24:2a:30:45:ef:ca:0b:a9:9f:bb:39:68:
         82:85:16:3d:de:02:3f:0b:c0:e3:b3:4f:96:75:c1:db:6b:21:
         68:32:e1:40:f8:4b:9a:d3:46:99:c4:c8:74:09:ad:c4:68:97:
         7f:c4:ca:25:0a:8f:04:ec:56:2c:f6:50:9a:a5:2d:9e:5e:76:
         19:be:17:ba:b4:cf:a8:56:f5:56:64:5a:75:06:95:c5:14:5c:
         6d:1d:41:e3:61:2a:04:ff:08:14:76:4b:1c:4e:d6:2f:6a:f9:
         ce:14:53:f2:75:32:a9:a2:94:db:28:3e:b5:5e:16:57:9e:d7:
         ac:bf:2a:0c:84:c6:8d:eb:ad:00:7d:9f:ca:0d:9a:cc:2a:a9:
         f0:0a:53:82:d3:6c:7f:a7:9d:7f:a6:6d:af:0e:e4:ce:f3:1b:
         7f:7a:94:79:65:8c:ab:73:6b:54:82:ed:c6:06:b2:92:bf:a7:
         2e:1c:e7:db:3f:5f:89:bc:aa:3f:69:2b:69:f9:b7:d2:9d:ca:
         3b:43:36:d9:c4:6e:1a:5d:24:e2:c6:55:38:ac:53:70:4c:e5:
         aa:c0:cf:df:c2:6d:f2:57:ae:72:12:41:b3:83:29:b4:49:a4:
         2e:da:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:20 2024 by rpki-client on console-fra.rpki-client.org