Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477d2a4e265c1328f40087525488d3a51bdaf082.cer
File:                     477d2a4e265c1328f40087525488d3a51bdaf082.cer (raw, json)
Hash identifier:          1sCshgAOiwdK1UTM1hqzrTqGSVfhqPYDBBEZe0OVevU=
Subject key identifier:   56:98:D7:51:E1:B4:C3:CB:85:BD:89:3F:25:24:D3:47:1C:DF:E8:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010EA3B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/477d2a4e265c1328f40087525488d3a51bdaf082.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 29 Sep 2018 01:34:54 +0000
Certificate not after:    Sun 20 Apr 2025 17:27:05 +0000
Subordinate resources:    AS: 267701
                          IP: 45.236.120.0/24
                          IP: 2803:74a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17736625 (0x10ea3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 29 01:34:54 2018 GMT
            Not After : Apr 20 17:27:05 2025 GMT
        Subject: CN=477d2a4e265c1328f40087525488d3a51bdaf082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:c6:d9:7d:c7:2b:12:ca:14:c9:31:2e:36:
                    54:12:d4:42:67:6c:12:fd:56:2c:0d:67:96:e8:25:
                    a9:77:a7:fd:bd:40:9f:10:92:3b:75:14:df:a4:ab:
                    5b:bd:17:df:18:b1:ef:7b:b5:8c:38:cf:20:45:60:
                    ee:72:d0:ff:c1:9f:f0:fb:9f:8f:52:57:71:90:ff:
                    1f:ab:96:0c:5f:b4:02:de:6e:b3:21:29:d5:01:2d:
                    ad:3f:a3:23:88:20:bd:85:e1:73:7c:21:57:53:7c:
                    19:ff:fa:98:22:e4:79:3f:84:5a:30:8c:d3:d9:3f:
                    58:f8:84:5b:93:80:f2:c4:59:e6:ff:3c:de:b0:40:
                    a8:10:9c:5a:cc:9d:38:bf:27:5d:13:ab:74:b5:2f:
                    27:bd:4b:f4:23:69:31:b6:bc:61:50:de:98:56:4a:
                    f5:86:d9:e9:8e:b3:a3:90:2d:f4:ac:8b:86:64:c0:
                    69:58:04:36:17:bd:60:67:d0:76:f7:19:eb:5a:21:
                    b9:ac:ef:dd:61:8f:65:bc:ae:15:9b:49:c7:1e:08:
                    9c:95:f5:0a:9d:bb:85:36:26:35:35:bf:86:8f:75:
                    ea:d1:c0:2a:11:8e:79:39:4c:a8:1b:96:43:c6:a1:
                    fb:0f:04:09:0d:89:a4:d9:af:92:75:e8:24:a7:92:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:D7:51:E1:B4:C3:CB:85:BD:89:3F:25:24:D3:47:1C:DF:E8:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/477d2a4e265c1328f40087525488d3a51bdaf082.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.120.0/24
                IPv6:
                  2803:74a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267701

    Signature Algorithm: sha256WithRSAEncryption
         b0:1a:e8:5a:1b:fb:c3:7f:e8:9c:f6:01:d9:86:c6:60:54:2f:
         61:87:10:e5:30:13:0b:52:f4:05:96:56:b7:1f:39:0b:76:72:
         38:1e:62:13:05:f5:63:b3:10:6c:68:d5:48:5b:0d:55:0d:99:
         91:81:64:df:cb:a3:8b:7c:e6:61:07:74:75:a0:1c:0d:6e:3d:
         a4:73:19:88:5f:ac:2a:7b:6d:85:54:0e:6e:1e:08:cc:9f:96:
         42:28:2b:2e:42:64:6e:df:37:21:8d:d3:34:c5:cd:46:9b:c6:
         60:0d:a4:96:44:17:be:18:a9:9f:5d:cd:8e:25:59:fb:fa:a9:
         3e:13:c8:7e:17:7f:4c:13:20:46:2e:57:25:54:96:65:60:b3:
         bb:cb:f0:82:37:d8:36:12:b9:48:c9:f7:a5:4d:67:bc:5e:f6:
         9e:2b:4f:12:54:f3:7c:b6:c1:2e:ae:d4:8e:74:a8:26:d3:6a:
         8c:30:02:95:bb:9a:34:bc:2a:ae:80:d6:30:4d:52:db:58:4a:
         03:50:87:2d:f7:80:21:78:43:c4:3c:8f:2e:a4:d6:94:bd:f8:
         54:bc:05:34:a6:d4:12:74:13:4e:df:45:af:b9:44:f9:55:80:
         c0:39:f8:ee:7e:d2:a0:d7:98:0e:dc:ac:60:71:e1:c3:29:3d:
         c2:d4:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:26 2024 by rpki-client on console-fra.rpki-client.org