Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/456169ab4fa448a1afac3004121d052fd362925b.cer
File:                     456169ab4fa448a1afac3004121d052fd362925b.cer (raw, json)
Hash identifier:          J5dcFz8CAJI5se4jCyIzZdspLzaXVIc0Nm+qI4GHFe0=
Subject key identifier:   24:04:3B:C8:7E:B7:9E:FE:49:41:1E:1D:DB:CC:30:58:49:E3:A6:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102687E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/67cb98df-c209-4b43-ae9f-8c3d001672c3/456169ab4fa448a1afac3004121d052fd362925b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/67cb98df-c209-4b43-ae9f-8c3d001672c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:57 +0000
Certificate not after:    Sat 28 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 28085
                          IP: 200.9.72.0/24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16935038 (0x102687e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:57 2017 GMT
            Not After : Dec 28 14:00:00 2024 GMT
        Subject: CN=456169ab4fa448a1afac3004121d052fd362925b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:03:73:ac:3c:cb:a8:f7:84:51:72:60:62:
                    da:c8:08:21:cc:4c:f2:fd:b3:f1:30:b3:28:27:4b:
                    fd:61:e5:07:7a:1a:f0:a6:a6:98:e0:d5:bb:de:8c:
                    c4:62:f0:b1:20:19:e7:d4:d7:78:a4:99:d9:fb:83:
                    24:a7:98:80:00:ed:82:0e:7a:a7:c8:a5:1b:58:cd:
                    b7:ad:b1:80:b3:27:3e:ed:c8:30:aa:d8:4e:77:74:
                    b5:3b:8f:49:a1:45:c0:16:9c:97:2f:e5:a5:d6:cf:
                    70:47:f2:08:91:dd:3b:57:4f:3c:88:0d:62:7a:4b:
                    6a:0d:3d:c8:38:8f:c4:b2:85:71:b2:72:12:7e:c0:
                    81:2c:28:a6:f7:64:ef:36:09:f9:6f:6f:e2:cb:1e:
                    3d:bd:c6:03:fb:a2:f7:1a:34:5d:98:35:a8:24:7d:
                    91:11:60:da:de:7b:2c:79:e6:1c:f3:34:4f:f3:26:
                    09:6d:9f:42:d4:98:07:12:6d:de:a3:45:23:61:ae:
                    4d:56:55:3b:55:6a:38:60:e2:7b:67:e6:05:bb:96:
                    a1:39:da:73:4c:c1:ef:2d:be:fc:52:98:25:ea:d1:
                    46:fd:9e:af:83:e8:70:44:f5:54:0f:3a:fd:3b:dd:
                    28:9e:50:d6:65:c1:88:cf:88:26:8d:6b:d8:dd:1f:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:04:3B:C8:7E:B7:9E:FE:49:41:1E:1D:DB:CC:30:58:49:E3:A6:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67cb98df-c209-4b43-ae9f-8c3d001672c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67cb98df-c209-4b43-ae9f-8c3d001672c3/456169ab4fa448a1afac3004121d052fd362925b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.72.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28085

    Signature Algorithm: sha256WithRSAEncryption
         9f:dc:25:8b:c3:7e:7a:f3:5f:65:06:73:aa:86:28:fc:c3:a8:
         47:4e:f6:e1:d7:a0:cb:eb:24:76:30:da:15:00:fc:cb:8d:ae:
         9f:ce:fa:95:d8:69:9e:e0:54:c0:f0:8e:b0:6e:ee:20:83:93:
         2e:6f:26:cc:31:e8:b0:b5:82:13:ad:19:ef:00:4d:c2:9a:53:
         64:c5:35:e9:22:63:c2:84:95:77:da:d9:dd:fb:b9:0e:a6:cc:
         f6:ce:72:31:db:ef:32:72:61:cf:d3:64:03:10:1b:2b:f2:40:
         37:25:0f:e0:90:0b:b0:12:7a:4f:1f:e4:ab:78:04:5f:3a:73:
         30:58:ee:37:ef:8a:65:10:3b:48:fa:e6:5e:58:01:1b:59:2c:
         95:42:e5:5c:d7:42:e0:88:2a:bd:d7:61:b0:c3:c2:04:e6:53:
         77:79:d8:64:0b:9b:2a:19:be:85:67:55:22:22:98:62:17:b8:
         6b:24:bd:a6:ed:2d:2c:c6:11:84:5e:8b:84:c3:b6:42:66:aa:
         86:71:38:cb:37:7c:50:2a:f4:74:46:d3:de:45:24:e4:87:8d:
         f0:b6:b5:1f:3f:9a:f6:da:1b:4b:6f:47:57:f1:bc:08:88:7e:
         c0:1c:70:da:80:11:be:a6:22:b0:33:e3:d1:f2:a5:e8:db:e0:
         d2:4d:6d:b6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:50 2024 by rpki-client on console-ams.rpki-client.org