Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4520cad2b02202800fc6f594ab8b392ad20e8934.cer
File:                     4520cad2b02202800fc6f594ab8b392ad20e8934.cer (raw, json)
Hash identifier:          VBAvwZA1O1WIfzaX1ItHlN/uBE192xALkUStdQcOI2s=
Subject key identifier:   8E:EE:41:CE:A4:CB:F5:1E:32:E2:12:18:C8:ED:CD:0B:80:6F:9B:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A0AD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/4520cad2b02202800fc6f594ab8b392ad20e8934.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Dec 2020 15:25:09 +0000
Certificate not after:    Wed 12 Mar 2025 21:26:11 +0000
Subordinate resources:    AS: 269994
                          IP: 177.53.120.0/22
                          IP: 2803:c1e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17435348 (0x10a0ad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  2 15:25:09 2020 GMT
            Not After : Mar 12 21:26:11 2025 GMT
        Subject: CN=4520cad2b02202800fc6f594ab8b392ad20e8934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:7c:60:2d:92:de:31:dc:0a:4f:f6:68:2e:
                    c1:75:52:29:ce:a7:b5:00:ff:6c:15:9e:26:09:08:
                    ad:29:a7:c6:cd:0b:3d:cd:98:d5:11:1f:0e:0f:ea:
                    d9:7c:27:c1:da:51:38:bf:21:10:9e:85:2c:0b:29:
                    cf:92:62:fa:05:6c:e0:29:f6:6a:90:7f:1b:80:6d:
                    13:18:1e:83:ca:a8:7a:01:09:d8:ba:7a:bb:ed:96:
                    b5:f5:54:b1:c0:34:30:80:a9:16:7e:3f:62:83:57:
                    01:a7:7e:a9:fc:fc:39:ce:85:eb:e5:07:6e:7c:50:
                    98:0b:c8:6e:c9:f4:ac:7b:60:b4:48:4e:a4:0a:a0:
                    84:6c:59:e4:a6:a1:b3:09:2c:58:24:42:0d:34:32:
                    f6:aa:c5:fc:03:c6:31:36:25:71:f0:1f:b4:7e:11:
                    fb:88:24:5a:87:a9:1c:94:38:15:cb:6f:a2:d0:6e:
                    c0:f3:90:a6:34:1d:dd:ac:fb:43:c1:61:ac:99:7e:
                    df:55:a8:8e:fd:96:64:ee:a6:83:02:ed:48:15:01:
                    a8:57:9d:6f:1b:9c:1b:a0:df:3c:a0:86:d7:64:d9:
                    54:75:6b:15:76:76:5a:1e:e1:ff:c7:6c:60:d1:87:
                    10:5b:6c:a9:60:87:53:bb:60:17:f4:07:e8:a2:43:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EE:41:CE:A4:CB:F5:1E:32:E2:12:18:C8:ED:CD:0B:80:6F:9B:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/4520cad2b02202800fc6f594ab8b392ad20e8934.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.120.0/22
                IPv6:
                  2803:c1e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269994

    Signature Algorithm: sha256WithRSAEncryption
         21:39:dd:48:1d:9d:f4:a9:c6:98:4f:22:c9:12:97:e6:67:74:
         63:f7:78:1f:66:55:4e:d3:6f:fa:a9:9e:7b:3e:9b:01:50:20:
         0e:1c:7c:ed:64:0c:b3:17:50:d3:84:0b:83:c4:9e:7c:2e:8c:
         0c:27:da:4c:80:c1:6d:a3:d5:7f:a5:21:87:05:73:26:ff:69:
         dd:51:52:35:b4:4d:5a:9b:57:27:f4:b6:5d:40:26:b1:b0:0b:
         68:89:7a:81:c4:a2:e7:47:e4:c1:87:9e:b9:6b:34:0c:f2:ac:
         73:38:b1:b8:9a:e0:35:a4:0a:dc:8f:92:52:41:2e:22:00:98:
         4c:fc:26:98:32:e4:3d:7c:66:45:50:26:02:66:c4:9b:31:f2:
         5c:91:6f:71:dd:0f:0b:a0:57:8c:5d:63:fd:c1:32:d8:f5:2f:
         33:41:f3:22:0e:f9:b5:8a:3a:96:bd:bd:46:c7:35:49:ad:76:
         62:2b:1f:be:31:ea:17:7d:a0:c2:79:7e:43:62:53:9d:e0:83:
         85:61:5f:a4:e6:bf:3f:78:84:0a:df:b7:56:60:c5:d6:8a:ac:
         0e:53:0c:f4:c6:b9:55:8f:9f:4d:7f:3a:46:e8:0a:c7:67:3f:
         d0:1c:dd:94:a3:93:1e:a0:f5:ae:c6:51:6c:9e:0d:2f:88:42:
         ca:32:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:50 2024 by rpki-client on console-ams.rpki-client.org