Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.cer
File:                     4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.cer (raw, json)
Hash identifier:          WJXUmNtCia1/hwmRKlYweBxGDXGPj5RHzZi7Xb6qjCw=
Subject key identifier:   F3:44:B9:00:05:CC:73:6D:A5:FC:7C:D3:2C:45:CB:CC:F2:1E:4F:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E185CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Mar 2023 16:41:47 +0000
Certificate not after:    Wed 18 Dec 2024 20:38:44 +0000
Subordinate resources:    AS: 272075
                          IP: 2803:2b10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14779850 (0xe185ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 16:41:47 2023 GMT
            Not After : Dec 18 20:38:44 2024 GMT
        Subject: CN=4de74a75ea4e5b0519dd505dc0655dddc3ec7bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:06:d5:62:4d:8b:44:96:9b:32:e1:fe:0b:
                    57:c5:45:2b:b0:5a:62:cc:c6:1e:b2:67:7e:d3:61:
                    6f:da:1e:e3:3e:f9:08:c2:6b:06:31:8d:35:31:8a:
                    68:22:3d:07:db:b8:0d:1c:c8:ae:0f:95:f8:56:72:
                    a4:d1:83:3e:2b:d4:5e:f2:60:96:4a:be:db:af:fb:
                    83:c7:3e:6c:08:62:0c:b9:3f:c1:1b:c7:33:8d:d7:
                    12:26:d9:24:d0:17:42:e6:c5:3f:b7:10:23:e4:cf:
                    4b:04:26:07:7c:cf:07:2b:d9:00:4f:07:63:02:15:
                    11:59:9d:9e:89:54:39:32:39:85:b4:49:1a:fc:84:
                    59:bf:95:75:33:ab:cf:6e:ac:a6:05:f8:b9:8f:0a:
                    9d:ab:ea:51:17:97:0b:42:de:00:e7:31:84:9f:02:
                    b0:83:f9:71:35:66:54:9d:50:7f:38:52:bd:21:dd:
                    05:9f:6d:a4:b8:f6:05:d8:f1:04:69:a9:9a:7a:04:
                    b1:af:b1:ff:84:99:d8:80:16:f7:70:d6:71:4f:84:
                    f2:b0:91:6f:13:f0:83:10:76:f5:ec:da:ee:65:dc:
                    82:03:7e:39:8d:4f:0e:93:4b:cb:97:19:5d:f9:9e:
                    dd:bb:15:73:df:df:a1:73:90:81:5c:eb:89:98:b7:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:44:B9:00:05:CC:73:6D:A5:FC:7C:D3:2C:45:CB:CC:F2:1E:4F:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c69b47ad-ec13-43a2-942f-440814cce3b2/4de74a75ea4e5b0519dd505dc0655dddc3ec7bba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272075

    Signature Algorithm: sha256WithRSAEncryption
         c2:c7:d5:02:0a:8a:c7:78:a0:14:04:33:65:36:b1:b8:e5:a4:
         9e:3e:54:dd:b0:5f:12:19:0d:89:70:57:59:18:58:d0:85:21:
         84:05:64:35:92:dd:cc:05:f4:56:e3:e5:68:fa:4d:b8:65:cd:
         e2:39:6d:14:0e:25:d2:3d:8c:1e:20:bb:13:11:f9:8c:12:af:
         1c:0b:4b:c4:e2:a7:40:18:81:d5:e4:60:c1:d3:1a:e1:15:2d:
         28:7d:0c:6a:59:54:da:77:24:7a:7e:36:cb:63:b6:fa:bf:50:
         25:f4:ea:fa:aa:67:01:ff:cb:33:58:bb:6f:fc:ac:b3:7d:28:
         94:70:65:a2:89:70:74:ff:59:3c:24:d5:61:f8:17:e1:3d:db:
         7b:5d:b6:c8:a6:b7:9e:20:7c:4f:76:52:87:07:4b:ec:74:44:
         0d:41:16:ef:56:93:44:8c:f6:78:6e:ad:1f:32:2f:1c:29:3b:
         5d:aa:4b:c7:e5:4e:a4:da:ee:47:27:06:68:02:12:0f:8d:da:
         97:ef:90:d8:ae:b5:f3:4a:9e:d8:c3:4b:90:db:cc:d7:c6:59:
         17:9f:9a:db:47:9b:0b:fb:b9:b2:39:70:a7:87:77:ab:91:50:
         e0:95:5e:d9:ec:6f:49:de:8c:39:e4:9e:23:80:67:30:07:67:
         0b:c7:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:46 2024 by rpki-client on console-fra.rpki-client.org