Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ea15038962772672ced17191490946d72935fc0.cer
File:                     3ea15038962772672ced17191490946d72935fc0.cer (raw, json)
Hash identifier:          0TcHAL2YxiKZPv2zDNYjqlI1wy86SIti5WMZ93axErc=
Subject key identifier:   6B:A2:C6:23:D4:FA:0F:43:85:CA:AA:AA:E4:78:F0:77:A4:4D:3A:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E639DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3cffea20-1e61-493c-82fc-d56de9edc64d/3ea15038962772672ced17191490946d72935fc0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3cffea20-1e61-493c-82fc-d56de9edc64d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Apr 2023 16:05:33 +0000
Certificate not after:    Sat 25 May 2024 17:35:42 +0000
Subordinate resources:    AS: 272834
                          IP: 2803:4c90::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15088090 (0xe639da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 16:05:33 2023 GMT
            Not After : May 25 17:35:42 2024 GMT
        Subject: CN=3ea15038962772672ced17191490946d72935fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:a5:59:e0:61:bd:1c:38:47:a4:27:86:d5:
                    77:14:8c:94:da:c8:70:1c:6e:ec:c7:77:e1:13:20:
                    92:8b:1f:7a:e6:01:9a:32:6e:7a:dc:a2:9c:cf:a4:
                    c4:a6:18:46:0c:83:64:1d:f1:ca:8b:cc:6e:8a:c2:
                    2c:d9:9b:9c:0b:6f:a7:f0:61:50:00:07:61:0b:47:
                    6f:71:49:ae:5c:42:89:22:7c:04:a4:1e:ec:3d:ee:
                    03:5f:fa:a9:2f:38:88:20:eb:b3:e1:f1:cd:1d:70:
                    56:21:0f:3c:3c:43:e3:5b:da:aa:46:d7:9f:50:20:
                    14:4f:3a:96:dd:05:2a:a5:79:1f:42:dd:67:3e:93:
                    ae:f5:e8:2f:db:7b:95:34:60:85:b5:d4:b9:c8:03:
                    e1:3e:f1:5b:fe:c0:ff:16:cc:33:24:40:ee:44:f6:
                    62:97:6b:9d:80:f4:c6:8e:60:ac:65:09:4f:b9:98:
                    5b:8b:3d:e3:28:11:5f:93:24:e1:57:f2:ea:ca:54:
                    bf:d0:f5:a1:4a:86:28:91:8b:72:89:63:ab:41:eb:
                    7a:ad:59:df:07:26:2a:f8:e3:e7:0e:9f:75:38:e1:
                    f8:a0:b5:8c:06:b3:34:39:8b:54:9c:d8:e5:73:14:
                    1e:d0:f1:44:4c:4d:10:8b:ed:3e:89:e8:41:4e:93:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:C6:23:D4:FA:0F:43:85:CA:AA:AA:E4:78:F0:77:A4:4D:3A:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3cffea20-1e61-493c-82fc-d56de9edc64d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3cffea20-1e61-493c-82fc-d56de9edc64d/3ea15038962772672ced17191490946d72935fc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272834

    Signature Algorithm: sha256WithRSAEncryption
         c4:0e:a0:35:39:af:3a:81:e1:1e:8f:30:ca:ab:f7:15:60:82:
         03:1a:29:2e:b6:cb:f6:62:17:fb:80:18:70:3d:e6:11:81:84:
         c6:a8:55:54:db:59:ab:a3:ee:c0:1c:cd:05:66:8d:28:ab:11:
         75:5b:6c:20:c6:36:36:44:f4:df:47:35:fb:27:0a:7f:c1:86:
         38:26:34:de:d1:da:48:eb:6d:4c:37:a1:3e:18:81:1b:f6:d9:
         11:e4:52:98:87:d8:c3:ef:b9:67:a2:82:19:7a:2f:81:a3:84:
         11:7d:bb:3a:02:a9:5e:e1:30:78:ee:ca:81:71:b1:2f:a6:0d:
         50:f5:c8:14:ff:f1:84:65:32:aa:19:97:fd:58:3b:8a:75:90:
         49:b4:78:4b:b9:58:0d:e9:fb:ec:98:4b:71:8c:f7:56:33:28:
         f0:3d:87:d8:d2:d2:98:aa:29:44:8c:a3:10:5c:fb:df:a1:a9:
         5b:75:18:97:12:db:d3:db:bf:36:56:d3:3b:39:e2:9a:dd:94:
         52:99:62:dc:42:fd:f2:15:4f:0c:3e:34:a2:be:96:b3:a1:99:
         21:8a:09:d0:25:89:bc:6d:38:cc:3f:11:7c:37:78:23:63:52:
         de:05:9a:28:09:aa:cd:0b:43:03:b0:e3:fc:df:f3:8b:93:86:
         ee:3f:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:22 2024 by rpki-client on console-fra.rpki-client.org