Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f343c34fa23e59fd7022db09a5ab3945ca466f5.cer
File:                     4f343c34fa23e59fd7022db09a5ab3945ca466f5.cer (raw, json)
Hash identifier:          AGfCiZ7ZRBott11YMDyytyv5RWNYcrpPqf7rWBhcEOY=
Subject key identifier:   3B:30:DE:D3:4E:09:13:BE:61:78:37:44:92:8B:ED:6D:C6:D1:5B:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A4F8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/4f343c34fa23e59fd7022db09a5ab3945ca466f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Nov 2022 17:31:31 +0000
Certificate not after:    Sat 15 Mar 2025 17:58:39 +0000
Subordinate resources:    AS: 265717
                          IP: 160.238.244.0/22
                          IP: 2803:75c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17452938 (0x10a4f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 30 17:31:31 2022 GMT
            Not After : Mar 15 17:58:39 2025 GMT
        Subject: CN=4f343c34fa23e59fd7022db09a5ab3945ca466f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:14:75:89:71:fa:74:73:6f:c4:d8:51:f0:
                    c5:6a:3a:69:8c:70:bc:10:d4:e5:23:03:67:62:79:
                    41:5b:a9:68:bf:3e:be:c5:f5:c8:b3:90:fe:26:51:
                    2a:b7:cf:23:87:35:96:4a:c9:cd:78:54:5b:96:77:
                    2a:2d:29:b7:2e:94:f8:5a:01:c6:6f:3c:3c:16:37:
                    b4:12:94:78:64:98:36:5e:ba:8c:19:81:d3:02:97:
                    5f:e1:fa:4b:25:66:03:18:00:bd:c5:4a:05:0b:5a:
                    4c:9e:a1:a6:8e:fe:79:9d:ad:c7:cc:53:1d:af:89:
                    67:b9:5c:21:3f:60:02:02:b6:c4:e3:f9:be:df:fe:
                    52:e3:b0:34:f2:30:eb:39:1b:53:88:1b:22:05:f3:
                    b9:d7:75:b2:99:07:ab:9f:c2:ea:a3:a3:a7:d8:44:
                    d8:13:fb:fb:fe:66:0e:28:07:bb:18:ce:fd:1d:a7:
                    55:73:89:a6:9b:c7:45:86:0e:15:50:94:96:8c:52:
                    35:49:62:da:8c:a6:bc:37:43:a7:fd:92:f1:fa:0a:
                    59:0e:3c:ba:2f:d9:fe:c5:0c:ed:9f:ab:0b:1a:ca:
                    f3:2d:5f:11:27:9f:e7:58:5b:10:1e:58:48:9d:0d:
                    5e:a2:78:d6:84:56:1c:df:df:f3:fb:96:70:85:ab:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:30:DE:D3:4E:09:13:BE:61:78:37:44:92:8B:ED:6D:C6:D1:5B:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/4f343c34fa23e59fd7022db09a5ab3945ca466f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.244.0/22
                IPv6:
                  2803:75c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265717

    Signature Algorithm: sha256WithRSAEncryption
         15:77:c6:d3:f7:15:b3:85:0b:9e:92:eb:25:3e:31:2e:d7:f4:
         81:93:d0:78:75:90:b6:cc:89:4d:49:23:20:d7:d4:d1:e7:20:
         5f:dd:26:45:86:fd:90:9d:23:37:1f:6a:6b:24:7e:a2:ca:66:
         a0:6d:b7:31:0a:c8:20:33:86:76:85:04:85:87:31:c2:9a:3d:
         13:e4:f2:bf:a8:0a:0e:a3:15:a9:9e:18:e1:07:4a:0f:6d:88:
         26:c2:62:48:3a:9b:7a:73:c5:3f:07:4f:d7:07:25:c1:4b:04:
         f2:05:51:02:11:1d:2a:d3:1f:37:da:6e:f3:12:a2:85:4f:d0:
         92:6d:54:ad:3c:d8:59:03:1d:69:22:96:cf:86:00:f3:ca:31:
         3f:7d:b9:65:74:91:c2:05:73:c6:83:a1:78:8a:78:e5:f4:6d:
         23:a3:31:93:7f:20:0d:2e:75:f0:a5:fc:c8:37:63:06:59:11:
         69:03:3e:5a:68:32:49:9b:ae:d1:be:3a:46:09:d0:1b:29:52:
         c4:dc:ce:51:c0:a7:bf:61:f6:da:10:fb:9f:c7:aa:15:bf:a6:
         d9:79:a4:00:10:a0:21:fe:40:a5:3f:c2:a4:7c:8e:61:4d:6d:
         bd:94:a6:66:96:24:d7:c0:af:f3:e8:2c:49:8b:ea:c6:bb:99:
         ea:13:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:28 2024 by rpki-client on console-fra.rpki-client.org