Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5446317502c39eb8d93831726804f482b1b25a6a.cer
File:                     5446317502c39eb8d93831726804f482b1b25a6a.cer (raw, json)
Hash identifier:          iBG00r5kpxGdC2/0KOo1wfIByYtdUKherjFtuhbRkVQ=
Subject key identifier:   6F:4A:CC:0D:E1:41:51:0A:CE:D4:5B:44:C8:36:DE:1F:2D:6C:EB:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010347A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/5446317502c39eb8d93831726804f482b1b25a6a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 20 Jun 2022 14:56:20 +0000
Certificate not after:    Wed 08 Jan 2025 21:26:43 +0000
Subordinate resources:    IP: 45.239.48.0/22
                          IP: 2803:6c10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16992160 (0x10347a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 14:56:20 2022 GMT
            Not After : Jan  8 21:26:43 2025 GMT
        Subject: CN=5446317502c39eb8d93831726804f482b1b25a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:3e:54:d7:1d:38:ab:01:d8:ad:6b:d7:b2:
                    dd:8b:a5:84:7d:61:ae:c4:b5:d0:4f:dd:48:a7:88:
                    22:7a:43:14:c0:fb:d2:95:2a:73:fa:c2:e5:63:e5:
                    d5:70:dd:f2:d2:8e:56:19:36:40:3e:b9:5e:7a:f3:
                    a3:b8:cc:9c:3d:e6:58:19:3c:6c:15:a0:51:5e:ab:
                    54:28:6a:e6:5d:62:a2:2a:4a:26:b8:32:65:e3:ae:
                    ed:fc:9a:7a:82:c4:c3:d9:88:9f:28:6e:55:df:83:
                    a8:04:3c:84:b6:64:30:25:25:c1:7e:a6:7a:c8:cf:
                    ce:52:af:5f:fb:00:0e:87:80:34:18:b5:54:b1:f7:
                    57:a1:9f:8c:ad:b3:77:de:c3:3f:fa:2c:17:f6:eb:
                    fc:f3:ec:22:76:50:e6:40:11:92:32:d7:7b:5a:ed:
                    7a:0a:16:b2:08:08:bb:52:12:c5:bc:56:65:63:01:
                    f2:6e:3e:19:df:3b:51:ef:d8:2a:3d:11:f1:05:70:
                    45:ee:d3:00:ad:17:bf:d2:de:b1:b7:78:ec:6d:1d:
                    cc:bf:3c:d5:07:4f:42:3f:cf:a7:47:61:3a:17:e3:
                    8f:0a:7b:f9:58:4f:d7:75:7f:de:da:0c:14:0e:a6:
                    5e:86:5f:57:17:f3:a9:eb:c4:25:5a:6d:99:ef:0e:
                    07:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:CC:0D:E1:41:51:0A:CE:D4:5B:44:C8:36:DE:1F:2D:6C:EB:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/5446317502c39eb8d93831726804f482b1b25a6a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.48.0/22
                IPv6:
                  2803:6c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:35:c7:5b:7c:76:aa:39:86:79:3f:3c:22:e9:03:9c:d4:26:
         39:9c:f7:95:f0:54:69:29:41:ca:89:a4:79:38:00:2e:49:51:
         57:07:ce:ff:51:92:37:3e:2e:f3:ad:48:03:55:66:47:11:b2:
         00:a0:a3:b7:77:b8:af:d5:0d:8c:63:06:55:40:b0:19:ef:9e:
         5b:b8:38:a1:77:1b:09:ac:c0:59:00:d7:ad:37:17:49:0d:65:
         d6:73:f5:4f:f2:e9:7a:50:78:48:42:58:c8:e1:96:b0:33:90:
         52:9a:42:f8:88:20:c3:a5:d6:00:17:2a:1a:80:08:c4:16:30:
         40:d3:41:63:40:1e:8e:0b:7c:eb:6c:5c:a3:0f:64:0b:a2:42:
         be:13:97:d9:5e:04:42:f1:66:94:c1:63:0d:6b:26:fe:52:8d:
         ac:76:a7:21:69:ef:1b:db:5b:cf:6e:50:91:d8:76:09:40:ba:
         48:9a:01:20:ee:35:d9:ce:c2:92:a8:75:23:86:ab:4b:23:37:
         62:fe:e5:b9:33:83:eb:72:18:1a:7c:96:3b:61:57:31:7e:2a:
         38:d4:7e:53:8e:15:20:36:6d:e7:c6:4d:87:97:3d:75:4e:14:
         47:8c:9f:4b:a1:03:c2:cd:a3:1d:f1:2c:6b:8c:d4:23:b0:77:
         d1:a2:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:48 2024 by rpki-client on console-fra.rpki-client.org