Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57da31d041eab0b348be7e56e871dab78b2d6421.cer
File:                     57da31d041eab0b348be7e56e871dab78b2d6421.cer (raw, json)
Hash identifier:          mO0dhS/d0Yhpm9lqhDtPqIyvotNs/lX5c5dUU+3C+PA=
Subject key identifier:   78:00:B1:73:2E:68:6C:0B:8B:B4:57:AD:E7:2D:94:D3:9A:FB:69:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F754AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/57da31d041eab0b348be7e56e871dab78b2d6421.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2017 14:44:45 +0000
Certificate not after:    Sun 29 Sep 2024 16:25:19 +0000
Subordinate resources:    AS: 266659
                          IP: 45.227.244.0/22
                          IP: 2801:11:b000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16209068 (0xf754ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 14:44:45 2017 GMT
            Not After : Sep 29 16:25:19 2024 GMT
        Subject: CN=57da31d041eab0b348be7e56e871dab78b2d6421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:63:b8:26:74:ed:47:07:42:4e:82:53:67:
                    66:f4:f1:d6:f3:49:02:4a:b0:9d:bc:36:d3:7d:5c:
                    d3:20:12:2f:85:35:4b:6b:b2:ff:27:70:89:b6:ee:
                    03:c4:71:4e:e0:7a:d1:0a:60:77:a4:0a:e6:87:8f:
                    2c:a0:0a:23:e5:91:dd:f4:8e:31:75:04:ea:98:21:
                    6b:5f:ff:69:05:ba:ea:a4:c8:90:50:30:c2:4b:54:
                    69:da:31:42:73:3f:75:56:09:21:bb:8c:ba:96:67:
                    ad:51:00:5e:6f:51:05:35:8f:c3:c4:cf:ad:2e:47:
                    bf:2a:f0:66:b1:2c:54:c6:ab:5b:bb:26:56:1c:2d:
                    17:3c:db:f5:ef:18:cd:6b:08:92:c3:2d:ee:f6:97:
                    22:49:c2:74:02:bc:39:6a:52:ab:71:d8:ca:14:05:
                    72:25:ae:74:cb:35:9b:9c:68:18:d2:9f:04:67:18:
                    de:6a:aa:f0:53:37:9c:b1:cc:59:fd:74:0e:e8:b6:
                    89:28:9f:23:25:b8:14:7b:ec:17:7a:33:72:b3:fa:
                    10:04:c0:38:95:46:20:f1:6b:95:e7:ea:c1:15:98:
                    16:32:9b:64:31:0a:9e:ea:9f:f3:5b:67:5a:41:bf:
                    12:91:b4:e1:5b:0b:42:0f:4c:34:84:59:ec:13:f4:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:00:B1:73:2E:68:6C:0B:8B:B4:57:AD:E7:2D:94:D3:9A:FB:69:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/57da31d041eab0b348be7e56e871dab78b2d6421.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.244.0/22
                IPv6:
                  2801:11:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266659

    Signature Algorithm: sha256WithRSAEncryption
         c0:8d:42:7a:af:da:05:74:85:fe:15:73:ed:64:49:9e:ad:4b:
         7e:55:96:f2:60:b3:43:68:f7:bb:23:59:05:e1:f8:3d:c9:ac:
         c0:e2:ad:94:b8:aa:d7:c4:01:aa:75:59:a0:66:9d:fa:ff:6e:
         87:a9:d9:31:42:8b:77:b0:6f:ef:92:e6:4b:3a:c8:33:54:2f:
         2f:06:2c:34:e7:c8:05:60:96:cc:c0:2c:27:47:0b:6d:29:5b:
         d6:8c:9f:e2:d7:d5:2c:43:0d:4c:23:90:6e:7a:49:a1:7b:f1:
         dc:9b:81:7f:98:de:bc:66:91:7a:c9:a4:e1:4e:36:8c:f3:ff:
         0f:22:dc:16:87:6f:98:7c:70:2d:b1:aa:f5:70:9b:fb:21:c5:
         e4:cf:44:3a:3b:08:6f:9c:3a:09:87:2c:45:58:7f:c8:d6:ef:
         ef:8f:20:24:de:a0:20:5d:62:69:07:b3:7d:b0:d4:bf:f3:96:
         5b:fc:17:9c:f5:c5:d0:32:3a:08:36:99:88:59:cb:6a:07:06:
         ec:f0:2c:5d:c6:ae:40:be:ad:28:77:59:00:29:c0:f8:53:ff:
         45:fa:02:89:d4:e0:50:39:fa:bd:2b:ee:f7:63:9d:6b:71:68:
         e8:b2:f7:8e:2c:b6:5c:8e:e1:d6:31:59:df:5e:82:fd:87:2c:
         54:f8:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:55 2024 by rpki-client on console-ams.rpki-client.org