Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/589783623233141f65642bbbfa85d766ca194755.cer
File:                     589783623233141f65642bbbfa85d766ca194755.cer (raw, json)
Hash identifier:          ducnbJexuJv1XUbjoJ0K+Qe3JmBgv/xWaXWiA1aH1mQ=
Subject key identifier:   56:77:80:F7:92:9F:45:C4:11:A1:A0:E1:B0:B2:91:72:A5:70:3B:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E16D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/589783623233141f65642bbbfa85d766ca194755.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 13:00:04 +0000
Certificate not after:    Tue 15 Apr 2025 22:32:09 +0000
Subordinate resources:    AS: 264738
                          IP: 138.118.212.0/22
                          IP: 170.233.116.0/22
                          IP: 2803:5440::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17700564 (0x10e16d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 24 13:00:04 2023 GMT
            Not After : Apr 15 22:32:09 2025 GMT
        Subject: CN=589783623233141f65642bbbfa85d766ca194755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:0f:ba:d2:c9:38:5a:b8:7c:86:09:10:bc:
                    50:78:f2:0d:3a:56:9f:51:24:79:3a:a3:1d:02:4f:
                    d7:89:48:a7:0f:79:c3:90:f9:7d:f6:e8:5c:51:46:
                    eb:99:76:3d:4b:18:11:fc:1f:a9:f1:ab:14:af:4a:
                    8a:49:ec:f1:dc:78:f8:47:40:b8:cb:20:e8:1a:a2:
                    ce:30:16:56:d7:27:41:2d:c8:d0:4d:29:1d:16:2e:
                    61:57:73:00:f8:23:42:02:78:d6:1a:64:2e:74:84:
                    d2:63:ce:63:46:eb:83:01:5b:d3:d0:e8:a4:47:cd:
                    32:af:fc:50:ff:7f:7f:46:bb:14:ad:0e:9a:66:da:
                    6e:cf:63:71:4a:41:c2:00:fc:e1:51:8f:1d:1a:04:
                    1b:e7:4d:68:b5:38:08:ef:cb:24:af:9f:fd:e6:6e:
                    bb:7e:81:4f:fd:27:35:52:09:83:e3:8f:41:be:f2:
                    f2:7e:fa:b4:cd:40:f8:26:5c:21:a5:2c:2c:00:7c:
                    0c:73:36:44:c3:77:46:db:4f:e3:37:3f:67:19:46:
                    11:28:3b:54:5d:3f:b5:79:ad:53:61:00:7c:81:86:
                    ed:38:c5:e5:0d:8d:cf:f8:a1:ac:82:1e:28:49:55:
                    7c:8a:e1:11:30:49:8b:db:e2:da:68:7c:60:6e:78:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:80:F7:92:9F:45:C4:11:A1:A0:E1:B0:B2:91:72:A5:70:3B:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/589783623233141f65642bbbfa85d766ca194755.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.212.0/22
                  170.233.116.0/22
                IPv6:
                  2803:5440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264738

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:40:47:5c:3d:86:63:14:09:78:00:eb:f4:25:48:ae:d3:
         9a:98:9f:e6:f8:1f:86:3e:34:f5:c0:c5:87:1d:25:5f:b6:d1:
         7f:bd:76:12:16:f8:77:ec:84:09:11:69:94:0e:d6:70:7e:01:
         47:e2:e6:d8:77:07:08:3c:0b:9e:59:1a:fc:00:db:37:c9:e0:
         15:12:db:79:f5:ad:19:80:0e:f3:9e:0c:18:7d:04:f6:64:1e:
         1f:90:27:3d:4e:75:2a:52:87:69:2f:a4:f1:ec:25:54:f5:3b:
         66:40:3d:aa:4e:3c:96:9c:e4:d0:b1:64:10:97:cf:36:fe:d0:
         49:9d:f4:b1:b6:91:43:02:57:39:ec:cd:83:28:4e:c8:28:47:
         83:5f:16:02:f5:57:14:5b:69:31:af:a3:6f:4e:b9:80:f0:5a:
         1b:26:da:b0:f2:fa:d5:17:c4:65:34:03:74:65:25:2c:2b:67:
         5f:82:1c:48:78:a7:36:d9:30:14:1c:86:f0:55:27:e3:80:ac:
         8e:c0:5c:b3:45:8e:cb:77:ee:43:66:26:56:c8:79:4b:93:30:
         57:01:46:4b:16:e9:ea:3c:81:ee:d0:a2:c1:41:c6:d9:ed:06:
         a4:b7:53:5c:55:5b:84:df:4a:4d:a8:55:21:8a:06:95:d6:ef:
         e8:ba:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:00 2024 by rpki-client on console-fra.rpki-client.org