Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
File:                     463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer (raw, json)
Hash identifier:          tRDOB0d1hFBr9oqTYw/WdWFDB8AC10iV+lRbq0rIbLg=
Subject key identifier:   40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBF614
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 May 2022 15:11:52 +0000
Certificate not after:    Tue 17 Jun 2025 16:29:12 +0000
Subordinate resources:    AS: 272150
                          IP: 192.141.20.0/22
                          IP: 2803:6020::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16512532 (0xfbf614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 15:11:52 2022 GMT
            Not After : Jun 17 16:29:12 2025 GMT
        Subject: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:c4:42:5d:1f:48:e7:94:6c:56:f2:37:b6:
                    4c:05:3e:d0:46:1b:24:f1:d1:6d:8d:9b:2b:85:92:
                    84:87:c4:dd:e5:00:a0:9a:a7:86:4a:91:57:48:de:
                    2e:9f:a7:1c:5c:a1:b6:64:ca:5f:03:dd:07:6c:d2:
                    2e:b8:c6:51:40:fc:46:53:ed:69:4a:0d:f9:23:65:
                    24:62:4c:7c:4e:34:e7:55:49:c4:a0:e9:93:f3:55:
                    48:9b:a6:40:74:98:0d:b2:da:1f:c0:33:91:9b:f0:
                    9a:39:7b:ef:32:8f:c8:83:e8:df:c6:65:3e:fe:bb:
                    f5:3d:16:b7:6c:3e:15:5b:62:94:3c:ae:7e:b1:f5:
                    47:71:eb:ed:33:1d:dd:eb:b6:b4:54:41:9a:fc:d6:
                    72:7e:78:b3:67:fd:fe:a0:b5:0b:aa:39:51:8b:42:
                    d1:29:7e:4c:dd:8e:77:0e:de:42:be:4e:da:d4:27:
                    a7:79:69:70:55:ec:85:3f:24:5f:5a:a2:07:e9:bb:
                    20:0d:ac:0e:9f:f8:f7:d4:57:14:64:3f:66:1c:0b:
                    73:0a:16:f0:da:58:c7:4d:1f:44:8e:8d:bf:f3:6a:
                    29:47:bb:62:8d:7e:bf:7a:d8:a7:fd:12:10:77:62:
                    b5:15:25:39:84:e1:06:46:5a:6e:82:4a:9c:d4:c5:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/22
                IPv6:
                  2803:6020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272150

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:fb:76:49:4a:5e:66:65:42:74:e5:f7:c9:a6:00:de:5f:
         fc:23:8f:07:b7:7a:02:6f:ec:12:cc:bb:83:eb:85:f8:51:7a:
         62:47:45:d6:85:fb:de:a9:1a:30:e8:2e:2b:0e:0b:f3:45:87:
         4d:db:58:11:b2:73:56:a8:2b:07:5b:f3:08:91:0a:05:10:8e:
         11:6b:54:d1:8e:c5:67:4e:bf:d0:c6:fe:46:de:fd:01:4e:dc:
         8c:7b:3c:bd:b6:02:14:56:5b:1b:8e:ce:8a:a4:85:30:39:06:
         a6:d5:12:a4:8d:11:ee:e5:c2:d3:80:e5:ce:79:26:b2:19:2b:
         4c:17:a2:0d:5f:ae:66:a2:19:f8:c8:b1:ab:95:7e:c6:74:8f:
         67:b0:17:c5:c6:4c:e6:d4:af:af:84:98:90:5e:d2:82:01:ab:
         48:d6:61:05:51:94:d5:52:bc:a0:91:66:38:e7:82:7f:a7:ae:
         23:27:c9:d9:bf:07:63:8c:45:da:38:e2:cb:21:2d:28:2c:74:
         c9:61:20:a1:45:d7:4c:eb:47:8f:2d:0d:50:41:ee:ab:c1:91:
         15:0c:89:d8:bf:68:63:6c:bf:81:92:21:e9:f2:88:68:9e:6d:
         2b:b5:7b:1c:95:b4:d5:ea:9a:a0:02:8c:3f:b2:07:86:d6:a3:
         fa:94:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:50 2024 by rpki-client on console-ams.rpki-client.org