Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54f4436bf11cb0a640955e9fc656465e9f30bea8.cer
File:                     54f4436bf11cb0a640955e9fc656465e9f30bea8.cer (raw, json)
Hash identifier:          HPp+p/hBcsHoe+/JOqw7xzH4Bv5/HLRKDZNJ6eag95U=
Subject key identifier:   27:68:2E:C7:53:70:EB:29:98:36:A6:B0:2C:F2:D5:22:22:90:94:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E65D94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6afab6c4-c3e8-4de3-b00d-67133880da01/54f4436bf11cb0a640955e9fc656465e9f30bea8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6afab6c4-c3e8-4de3-b00d-67133880da01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 08 Aug 2020 16:24:05 +0000
Certificate not after:    Sun 14 Jul 2024 18:52:11 +0000
Subordinate resources:    AS: 271892
                          IP: 45.162.88.0/22
                          IP: 2803:cea0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15097236 (0xe65d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  8 16:24:05 2020 GMT
            Not After : Jul 14 18:52:11 2024 GMT
        Subject: CN=54f4436bf11cb0a640955e9fc656465e9f30bea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:4c:f4:e3:1d:64:e6:62:85:f4:30:90:7a:
                    fa:30:80:80:10:12:95:e2:45:dc:43:84:91:3d:c9:
                    c6:e0:c5:7f:b6:af:dd:ce:61:79:3d:14:e4:84:35:
                    0a:1f:66:70:b8:6c:5e:77:43:70:31:67:59:87:e0:
                    9c:4f:90:34:19:1e:c9:ba:19:7e:c6:fa:ff:83:b9:
                    e9:80:03:b2:d7:d8:1e:2e:9f:1c:da:d8:04:6c:cc:
                    8a:93:15:d7:c4:d6:ed:a6:a9:b5:e8:57:dc:74:c4:
                    34:c0:aa:4b:07:a0:c0:50:e4:85:5f:9a:2b:ff:2e:
                    a9:70:03:4f:09:50:f1:f5:6d:86:89:fc:45:f4:24:
                    44:f9:16:68:a1:93:1b:95:d3:e9:3e:c3:b6:48:7a:
                    8d:fb:a5:cb:79:85:56:e5:e2:cc:2e:26:23:4b:9b:
                    13:4f:0e:85:09:62:e0:52:e9:6b:21:5f:b1:c0:58:
                    91:e2:55:5b:ff:a4:14:14:ea:7e:8f:bd:4c:29:a8:
                    99:8e:ce:a9:0f:b9:15:f5:09:97:95:83:bf:7f:a2:
                    24:cd:46:99:70:b8:6d:e5:66:e5:7c:3b:f4:f0:dc:
                    58:8c:13:ff:72:19:02:86:dd:2a:a9:15:d5:ce:88:
                    c9:20:64:8b:1e:44:67:6d:83:e0:b9:06:0a:18:c5:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:2E:C7:53:70:EB:29:98:36:A6:B0:2C:F2:D5:22:22:90:94:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6afab6c4-c3e8-4de3-b00d-67133880da01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6afab6c4-c3e8-4de3-b00d-67133880da01/54f4436bf11cb0a640955e9fc656465e9f30bea8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.88.0/22
                IPv6:
                  2803:cea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271892

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:aa:0a:53:86:90:fb:9a:29:bc:bd:29:c1:4b:e3:06:17:
         c2:af:4e:9a:28:a3:f0:48:f4:22:72:ce:29:9e:e8:12:09:16:
         7f:65:f9:c1:d5:09:c2:90:18:79:23:5a:90:45:ec:40:ed:10:
         71:81:d6:9b:82:eb:06:4b:b5:ec:4e:58:3b:f0:e6:cc:3e:59:
         14:80:00:39:96:30:8e:03:c0:56:bd:8f:24:0c:f1:25:d8:64:
         11:54:51:bd:9f:49:29:4f:e6:8c:b1:66:d4:d4:00:af:13:77:
         13:ab:73:e4:eb:43:98:d2:e8:49:93:4d:bb:b8:e5:e8:dc:7c:
         f0:91:c5:59:18:b0:b6:99:6a:5c:06:c8:e1:1d:17:14:95:2f:
         03:c0:2f:dc:5e:f3:3b:35:d1:45:2a:86:84:ab:94:c9:ff:06:
         32:08:1d:16:97:de:e6:61:80:30:a9:4a:78:c8:a7:cd:b4:b0:
         54:48:72:85:a1:51:dc:3e:27:b9:f9:07:55:cd:89:4b:4e:a0:
         35:d4:24:3a:70:30:aa:f4:99:c7:68:16:c8:23:62:fc:87:33:
         18:6e:8c:41:10:dc:26:6a:0a:9b:63:0f:51:a4:a3:5e:9d:ca:
         08:cc:69:b0:96:f0:8e:7b:8f:27:32:16:82:f6:59:50:47:f0:
         e7:9e:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:48 2024 by rpki-client on console-fra.rpki-client.org