Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer
File:                     4789febdd964d87e5889a5b09898a4b17ff3c551.cer (raw, json)
Hash identifier:          UziG3w3VytxxkPPImk0/a2NWepGCLePIjutktxysA18=
Subject key identifier:   77:E4:49:2F:D0:8B:7A:AA:59:5D:FD:52:31:3F:94:12:15:00:FF:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFF6AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jul 2022 17:23:24 +0000
Certificate not after:    Mon 02 Dec 2024 16:00:15 +0000
Subordinate resources:    AS: 271859
                          IP: 2801:1ae::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16774826 (0xfff6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 17:23:24 2022 GMT
            Not After : Dec  2 16:00:15 2024 GMT
        Subject: CN=4789febdd964d87e5889a5b09898a4b17ff3c551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:30:f2:58:8b:c9:96:1e:03:aa:4d:23:76:
                    eb:ad:46:d4:0c:5f:72:dd:23:cd:bc:40:88:97:d2:
                    07:7c:af:e3:47:22:33:16:50:c7:1d:34:c6:ac:bf:
                    95:a3:6e:e3:22:d6:f5:e3:51:4e:dc:53:2f:5a:d1:
                    38:0d:c0:cd:9e:21:87:06:d0:1f:79:ad:93:ef:57:
                    21:ca:3e:94:33:0b:ad:e1:c6:5c:fe:fc:9a:57:bf:
                    5d:f2:35:0c:5e:3b:27:1f:15:67:36:b8:ec:91:b0:
                    20:34:4f:da:bc:36:b5:dd:95:cc:a1:bc:b3:06:b2:
                    41:3c:67:48:ed:d2:b1:13:41:97:36:f2:0e:b0:93:
                    77:31:82:5f:ed:64:de:1b:a4:da:36:22:1e:73:a3:
                    8a:87:00:bc:97:9b:c1:28:43:02:2c:7c:a4:f6:c7:
                    2f:60:73:74:fb:6d:8d:b6:2a:68:58:75:03:5b:aa:
                    3a:11:60:83:49:a6:21:f5:95:6f:84:e1:0e:78:1a:
                    90:d1:cd:ce:5b:0f:fb:f6:38:c7:85:c0:b9:9c:55:
                    5d:60:d6:c0:17:18:03:c7:76:86:87:8f:be:e3:02:
                    8f:e1:36:67:69:3a:b3:a3:e8:da:5e:75:bb:d3:d7:
                    52:b7:48:d3:7c:55:28:36:74:ca:a8:87:57:a0:59:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:49:2F:D0:8B:7A:AA:59:5D:FD:52:31:3F:94:12:15:00:FF:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ae::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271859

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:0f:85:ab:82:84:75:1b:6b:ec:7e:c7:34:af:d0:22:12:
         22:da:ea:06:77:d5:c9:3d:d0:4d:a4:be:9b:ca:29:c8:d5:1d:
         24:85:dd:84:a4:e9:88:de:0c:63:75:1c:5a:79:98:ce:23:6d:
         41:dc:47:84:77:de:fb:42:b1:49:e5:f3:42:0c:37:ed:d4:e4:
         22:6f:eb:95:54:ef:0b:5d:0b:73:35:50:b7:c3:2f:35:df:64:
         7b:0c:be:af:f6:2c:6d:5c:9f:09:c4:91:50:c1:32:35:27:81:
         58:3d:ab:3d:ee:96:eb:00:b2:97:0e:56:d3:d5:13:b7:8b:c9:
         e3:ca:ae:93:c0:fc:65:55:90:58:e0:49:a0:59:03:ff:61:cb:
         bd:34:97:ae:d3:b5:fd:f7:d8:27:5a:d0:cc:d1:b0:d5:79:46:
         bf:3e:af:9d:7e:00:e3:15:4c:39:aa:86:02:de:08:ed:2d:18:
         e2:45:33:cf:92:b1:65:80:5c:21:ed:a0:ec:09:8c:19:87:7e:
         44:f5:eb:2f:f1:97:5b:2c:2e:f3:e8:75:38:7f:f5:7f:03:03:
         35:4d:65:b1:c7:c4:9f:0e:bd:44:9f:45:76:fa:ec:97:d2:74:
         4c:95:f8:83:b0:84:b8:d5:55:2d:d3:4b:e0:90:96:4f:c3:46:
         f0:19:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:50 2024 by rpki-client on console-ams.rpki-client.org