Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.cer
File:                     41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.cer (raw, json)
Hash identifier:          FuhazrxvuW+F/RFQ0t6qgkin5c45fSnSDQMDHwIC5R4=
Subject key identifier:   DE:3E:AA:FE:F9:FB:D2:DD:DE:8D:11:CD:ED:D9:F0:F7:CA:F5:12:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F56F79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Feb 2021 17:54:27 +0000
Certificate not after:    Mon 16 Sep 2024 02:37:02 +0000
Subordinate resources:    IP: 45.188.92.0/22
                          IP: 2806:364::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16084857 (0xf56f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 17:54:27 2021 GMT
            Not After : Sep 16 02:37:02 2024 GMT
        Subject: CN=41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:df:ae:26:fd:91:7a:1a:92:1a:64:cd:f1:
                    d6:17:c7:5c:a3:9a:af:6a:af:97:6f:a8:d8:c2:17:
                    a6:64:58:2e:b1:b6:5b:01:2d:d9:db:47:5b:a9:86:
                    3d:df:e7:4d:1a:ee:a9:42:28:da:69:8c:4c:ba:44:
                    95:29:ec:9c:5f:bc:00:cd:29:a8:90:31:00:a3:e4:
                    8f:91:19:ea:4b:a4:76:99:22:16:95:c5:63:57:b0:
                    e5:15:a9:c0:51:71:5d:14:34:d2:67:50:b2:4b:80:
                    ea:7b:b1:1d:4d:01:4e:82:d2:0e:96:78:9c:2c:e9:
                    d7:82:23:1c:fc:e6:14:ae:3b:18:f4:eb:5b:7c:5e:
                    2b:02:b4:8b:8f:87:0d:5c:ab:13:c6:e2:02:8c:f6:
                    f0:57:ea:39:a9:c9:07:90:24:e7:38:59:0f:01:13:
                    c5:11:af:72:80:44:d2:29:ea:6a:3c:f5:be:a9:02:
                    cd:4f:6c:de:de:c0:2c:64:e7:27:cc:cb:a6:45:30:
                    1f:dd:1b:b4:b3:21:36:aa:f8:29:c4:fb:5a:c2:e0:
                    11:f8:d1:a8:50:e4:7b:93:32:37:9d:38:21:65:78:
                    31:0f:09:64:9a:b7:c0:99:d3:b2:b1:3d:c0:ba:d8:
                    6f:73:8f:25:98:38:07:83:15:eb:b7:8b:dd:ba:f1:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:AA:FE:F9:FB:D2:DD:DE:8D:11:CD:ED:D9:F0:F7:CA:F5:12:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.92.0/22
                IPv6:
                  2806:364::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:62:1e:fc:7f:cf:d1:3b:d3:18:2c:21:a8:ee:2d:6c:ec:30:
         5d:21:d2:96:5c:04:bf:cf:13:0f:7d:fb:5a:d8:13:c6:ff:e9:
         ef:12:e2:89:2c:ac:0f:72:67:c0:57:13:84:5f:22:62:ce:4c:
         1b:80:7f:b7:47:cd:1b:84:70:e6:74:81:ba:9a:c5:4f:2f:35:
         a7:cd:76:5e:cd:32:23:fa:60:0d:c0:94:a8:a9:7b:34:5d:2e:
         df:d9:b5:f4:40:8d:92:6b:b4:57:34:d0:ba:3c:ea:7b:76:37:
         14:72:70:0f:a9:0b:45:82:76:f1:fc:b6:14:89:47:01:8f:e6:
         db:33:d8:d4:55:5e:97:f2:09:f9:6b:a2:9f:82:4b:5d:29:30:
         f2:54:b1:78:e4:8b:5c:2d:d8:14:98:d7:29:52:7a:12:7c:bb:
         88:1a:9d:75:a2:fa:5d:79:79:a1:73:4b:02:70:7b:d2:75:0b:
         28:25:f9:e0:57:20:7f:84:3e:20:85:9f:22:68:0b:2f:be:19:
         36:9b:d2:bc:c8:90:17:45:7e:74:0e:4b:dd:9b:ff:5e:ef:83:
         10:f2:6a:62:6a:d8:0a:98:29:62:16:50:3e:f9:00:95:55:2b:
         d8:a9:87:98:07:21:2b:db:37:ab:9a:7d:9c:ee:ab:e7:4b:44:
         aa:a0:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:18 2024 by rpki-client on console-ams.rpki-client.org