Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/388ebecd4ed72810f208c7c2d9865371b01c71ff.cer
File:                     388ebecd4ed72810f208c7c2d9865371b01c71ff.cer (raw, json)
Hash identifier:          AHHvwptxmi/W1tn6bYTUnDKnI27qaFYpZ6jKN5mFprU=
Subject key identifier:   C3:CA:30:08:2D:82:CF:1D:1A:4B:B0:88:DB:D0:39:0E:E4:36:08:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC6810
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/388ebecd4ed72810f208c7c2d9865371b01c71ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Jan 2020 19:25:07 +0000
Certificate not after:    Sun 10 Nov 2024 16:34:31 +0000
Subordinate resources:    AS: 269898
                          IP: 45.191.196.0/22
                          IP: 2803:34e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16541712 (0xfc6810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 19:25:07 2020 GMT
            Not After : Nov 10 16:34:31 2024 GMT
        Subject: CN=388ebecd4ed72810f208c7c2d9865371b01c71ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:71:ad:82:c5:39:12:ac:69:d0:1d:f5:7e:
                    2e:60:85:a3:39:d0:d7:3e:c0:39:4a:0a:a7:8e:bb:
                    7d:4e:48:63:65:1e:f8:94:04:b9:2b:14:ae:d1:8c:
                    7f:9e:a5:42:b9:77:a2:1e:72:b7:8e:9b:69:3f:cb:
                    ff:21:26:3f:e2:a4:38:e9:f8:9c:dc:a0:23:a0:d1:
                    c6:85:e9:03:d3:a2:ef:59:f3:08:b1:28:e7:64:f6:
                    6a:5c:78:0a:a8:25:89:54:d6:bf:e3:53:b8:92:69:
                    d6:40:7a:d9:ac:68:9b:e2:c0:52:6f:6a:1b:7e:f9:
                    dc:e0:1e:5e:06:41:8b:ae:de:01:6f:11:e3:18:db:
                    d5:76:0f:99:94:c4:ab:f1:b9:3a:39:25:b6:cf:20:
                    75:7e:58:1b:03:d1:9a:58:f6:af:2e:1c:23:84:7d:
                    5c:31:39:66:01:bd:1e:0e:9e:b4:cf:7b:45:c6:61:
                    d2:30:1c:74:ca:a1:3d:0e:5f:85:c6:56:33:06:58:
                    d2:03:59:65:bb:cc:0e:01:a6:9f:db:ea:f7:18:60:
                    c2:f6:0d:77:2f:53:2d:70:1f:2f:09:2a:a4:cb:95:
                    9d:5c:62:53:b4:da:bd:42:d3:c5:24:33:50:80:f3:
                    a2:2a:9c:4a:64:9f:eb:66:53:91:d4:7f:2a:bd:fe:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CA:30:08:2D:82:CF:1D:1A:4B:B0:88:DB:D0:39:0E:E4:36:08:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/57d23f6d-7119-4d18-913d-86a3dd72a114/388ebecd4ed72810f208c7c2d9865371b01c71ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.196.0/22
                IPv6:
                  2803:34e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269898

    Signature Algorithm: sha256WithRSAEncryption
         00:06:96:2b:9e:f2:dc:98:75:54:90:91:53:9d:36:a9:99:15:
         e8:58:e3:50:77:38:f2:85:bc:08:d7:ed:dd:16:98:d3:3e:75:
         f7:ed:b0:3d:68:2d:39:83:0f:25:22:10:aa:06:65:f7:95:ba:
         e9:ed:85:b7:14:c0:36:a9:10:6c:ad:56:84:d1:f5:d8:36:54:
         7c:69:fe:4b:66:29:a5:85:16:ac:39:63:33:df:cb:94:4b:5e:
         c6:7e:f8:cd:88:00:0e:35:7e:74:b7:4d:07:3c:af:f3:74:46:
         98:35:44:ea:90:7e:ef:2b:84:4b:c9:4d:52:62:48:78:fc:ad:
         82:3d:13:ca:fd:4e:b0:e9:77:2b:c4:48:c8:ad:ec:29:a6:0d:
         98:db:53:c3:0b:e4:2d:69:95:02:c7:61:4d:2a:c9:08:98:a3:
         65:c9:19:31:a2:13:d6:f8:fb:be:af:a8:09:0b:82:a0:c1:4a:
         6f:2a:88:2c:68:df:ed:1b:06:d2:dd:57:31:2d:c5:12:7e:fc:
         59:e9:aa:5d:63:fe:c1:92:c5:55:06:84:9f:69:78:2d:8b:23:
         21:c7:d9:b4:31:87:55:05:14:09:62:b7:fa:9b:d9:58:25:f7:
         94:a5:7e:dd:ff:86:c6:ff:41:bd:9c:a6:be:60:82:a1:b5:fb:
         04:69:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:40 2024 by rpki-client on console-fra.rpki-client.org