Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f147f8f4b1ddabbb467a46a3c7dafa65409ae30.cer
File:                     4f147f8f4b1ddabbb467a46a3c7dafa65409ae30.cer (raw, json)
Hash identifier:          QlfdBXekc6lZMoDHoMT4yAvUHYtzW5lHatIgwb9nFy4=
Subject key identifier:   D0:D9:77:AC:F8:6A:1E:FB:5E:06:67:90:45:D6:0E:72:7F:90:7D:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F53010
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da2cbe48-b8b0-47e5-9f32-b363ef774c50/4f147f8f4b1ddabbb467a46a3c7dafa65409ae30.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da2cbe48-b8b0-47e5-9f32-b363ef774c50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:03 +0000
Certificate not after:    Sun 15 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 263246
                          IP: 190.108.72.0/22
                          IP: 2800:b90::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16068624 (0xf53010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:03 2017 GMT
            Not After : Sep 15 05:00:00 2024 GMT
        Subject: CN=4f147f8f4b1ddabbb467a46a3c7dafa65409ae30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:95:64:6b:6a:ea:4d:5b:e3:85:51:d5:82:
                    05:49:f8:70:18:82:94:ed:ea:56:ed:20:99:81:ae:
                    fc:96:5b:fc:1e:7a:16:86:e8:bb:a7:c0:00:a8:60:
                    0c:bd:32:83:21:24:d6:31:3d:77:df:ff:dc:41:5c:
                    7b:b7:62:d8:65:1a:f8:1c:cd:c0:d5:7f:10:15:3b:
                    43:6d:a6:2f:ba:86:9a:e7:49:91:f0:d3:46:4a:e8:
                    3d:c1:4d:c0:fb:cb:2e:98:57:96:33:f7:2e:5c:09:
                    ec:16:0b:33:4f:bf:a8:07:d9:85:d6:27:fd:7b:05:
                    9f:50:21:8e:46:ad:09:fa:aa:a3:7b:7a:59:3a:81:
                    94:03:23:1d:b7:54:61:8d:bf:a9:bc:73:f4:e9:be:
                    d0:59:bf:6d:e5:9e:3a:5a:35:c6:a1:64:31:75:9f:
                    73:99:63:c3:ef:a3:02:26:32:a8:44:7a:52:1c:56:
                    7a:32:44:a8:6f:14:35:0b:c7:a5:13:09:d5:bc:42:
                    9f:dd:84:f4:07:c7:b9:76:01:05:c1:43:78:86:8e:
                    04:8e:ae:c8:70:ee:28:63:ae:38:3b:34:14:c4:8a:
                    5f:69:57:07:93:06:9e:ec:00:ea:fa:45:11:c0:d2:
                    85:68:08:23:b3:46:23:47:c9:8f:c4:0c:1a:13:2f:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:77:AC:F8:6A:1E:FB:5E:06:67:90:45:D6:0E:72:7F:90:7D:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da2cbe48-b8b0-47e5-9f32-b363ef774c50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da2cbe48-b8b0-47e5-9f32-b363ef774c50/4f147f8f4b1ddabbb467a46a3c7dafa65409ae30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.72.0/22
                IPv6:
                  2800:b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263246

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:87:fd:cf:ec:98:73:d1:5f:e9:3a:98:a6:48:f6:1c:c9:
         93:7c:ae:e8:bc:53:1d:cb:ca:8d:4b:15:22:0c:cb:86:43:46:
         d6:71:36:dd:5d:b2:95:61:19:ee:a4:3b:ed:5a:27:94:bb:86:
         2d:0a:b6:62:0c:9b:54:6c:75:04:a9:90:a5:e7:c4:3c:c2:0e:
         85:d7:9c:e4:ec:21:1a:48:79:60:72:0c:2f:50:74:60:85:f2:
         a8:e8:21:fe:1f:6e:a6:b4:e5:19:bf:22:13:57:95:24:c6:94:
         ee:28:0b:8d:3b:b6:64:28:ef:a7:11:7d:86:be:5b:54:bc:ef:
         cb:52:a2:a6:d4:3c:70:e0:11:e8:3e:24:ea:df:39:52:39:96:
         ae:4d:ea:78:88:66:de:30:13:de:9a:82:3f:6b:a1:8c:26:68:
         d2:84:fb:28:3b:9f:00:f1:39:37:6f:68:d5:ca:1f:89:18:1e:
         eb:58:c8:8e:4c:73:6e:af:21:1d:c5:3e:48:17:38:fa:5c:a9:
         43:db:f2:2f:bd:ca:3e:82:2d:b7:bd:66:f2:09:d7:20:8f:b1:
         15:2a:4a:cf:cb:24:b7:4c:c5:1a:16:27:00:2b:23:34:6c:93:
         07:57:d3:9c:f1:14:72:08:49:00:f5:13:2a:21:35:80:0c:e9:
         12:30:3e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:28 2024 by rpki-client on console-fra.rpki-client.org