Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/381ed699124148a6a5ef98000300b3e6ad62a605.cer
File:                     381ed699124148a6a5ef98000300b3e6ad62a605.cer (raw, json)
Hash identifier:          ekmC+Lhr69MueIyuumJY7mrZ0097uXBuM9IIsZS5wE0=
Subject key identifier:   14:6B:55:A2:5B:DC:ED:B0:5D:75:96:B2:8B:C5:51:93:A9:67:6C:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CE7E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/927b4a6f-1b8d-4fa7-9937-7070c6e4479f/381ed699124148a6a5ef98000300b3e6ad62a605.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/927b4a6f-1b8d-4fa7-9937-7070c6e4479f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 23 Apr 2023 04:01:30 +0000
Certificate not after:    Sun 06 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 266822
                          IP: 45.237.36.0/22
                          IP: 2803:c4a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17623011 (0x10ce7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 23 04:01:30 2023 GMT
            Not After : Apr  6 06:00:00 2025 GMT
        Subject: CN=381ed699124148a6a5ef98000300b3e6ad62a605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:21:2d:7e:f1:7b:38:84:dc:8e:cf:a9:b8:
                    2f:de:02:f7:64:0c:7d:db:3f:64:b5:62:b1:7e:94:
                    5f:9d:a9:00:90:e9:dc:31:6a:37:c7:6b:a6:18:75:
                    ed:c1:26:cb:00:4e:b5:65:7f:db:58:0c:cc:99:4a:
                    26:e1:c6:b3:ea:95:91:73:00:56:b7:54:2f:87:c9:
                    58:44:e5:e8:ef:8d:42:39:07:e3:58:ed:a1:1a:ab:
                    ba:de:fa:1b:07:ed:51:15:f8:5e:45:89:8f:b3:06:
                    46:47:24:6f:f4:ea:ff:c6:ef:cf:e9:8d:6d:fa:33:
                    fb:cf:7b:67:bc:bf:ce:53:a5:60:5b:09:f1:ff:0f:
                    4f:4b:ad:b8:6f:58:27:64:49:b0:07:2b:f2:2e:50:
                    87:c3:ab:0b:7c:d2:cc:55:d2:a0:34:98:46:e6:63:
                    d9:5c:16:4f:a2:18:ac:f1:c3:ff:d8:f1:91:ec:0c:
                    d2:af:71:17:47:7e:9c:f6:d7:03:d6:19:47:08:68:
                    b0:0c:4d:d0:b0:b6:e2:27:e8:42:7d:e0:a6:1c:a1:
                    34:25:71:09:bb:77:03:f4:3e:6a:75:d1:8f:59:9c:
                    56:44:a6:37:b6:29:62:ce:07:55:ad:65:21:44:b8:
                    a9:c8:70:8f:17:7d:96:72:5e:f0:53:eb:cb:49:0a:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6B:55:A2:5B:DC:ED:B0:5D:75:96:B2:8B:C5:51:93:A9:67:6C:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/927b4a6f-1b8d-4fa7-9937-7070c6e4479f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/927b4a6f-1b8d-4fa7-9937-7070c6e4479f/381ed699124148a6a5ef98000300b3e6ad62a605.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.36.0/22
                IPv6:
                  2803:c4a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266822

    Signature Algorithm: sha256WithRSAEncryption
         54:c7:49:07:79:d0:19:f0:f5:e6:b9:52:39:f5:1a:62:dc:22:
         a8:c7:69:b5:f5:dd:da:e7:d2:db:30:d7:87:5e:37:b1:f7:b1:
         4b:48:3c:62:85:03:34:b0:db:b8:64:86:aa:b3:3d:1d:4e:b2:
         8d:40:69:f8:4b:8b:3a:fb:0f:cc:06:6a:51:06:7c:a6:56:e7:
         05:8c:a3:e8:b3:b2:01:bb:11:b6:96:0c:57:b7:4b:31:a6:48:
         1d:4d:2a:85:66:e3:69:9f:f6:5d:a0:2d:83:95:8f:01:db:9b:
         24:61:cd:f2:1f:8d:6c:8b:26:98:0b:f1:48:2b:10:2a:aa:f3:
         39:72:db:0e:36:7f:1d:32:6f:b2:35:b1:5a:92:69:cf:4f:5c:
         19:e1:10:23:1a:9b:1d:73:88:6a:be:60:d6:66:12:ab:6c:28:
         d8:54:56:14:97:8f:5d:07:86:42:ad:fc:3d:1f:ce:91:6a:2b:
         8c:4d:12:a1:10:97:c6:68:48:79:5a:25:8c:9c:f3:2d:7f:cc:
         91:67:6a:a3:ba:6c:b2:a7:d0:5d:91:8f:8a:ef:6b:53:ba:c2:
         98:00:5c:ac:04:4e:b6:9f:88:49:62:29:64:7d:f2:07:62:91:
         e0:7e:62:69:48:1c:95:9e:59:13:88:a4:d6:3a:2f:85:11:db:
         8d:17:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:46 2024 by rpki-client on console-ams.rpki-client.org