Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5953521b0ed37abec8837745b03e97172d449657.cer
File:                     5953521b0ed37abec8837745b03e97172d449657.cer (raw, json)
Hash identifier:          VAMNsUMq8zJ9eG3AeV6eSRRN1N2yjx4LZOrNYmDlN9k=
Subject key identifier:   06:2A:6B:DD:70:6A:2E:1C:DB:9E:2A:17:18:F0:C6:CC:D7:D9:BA:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F0627
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/5953521b0ed37abec8837745b03e97172d449657.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 18:14:08 +0000
Certificate not after:    Wed 23 Apr 2025 22:42:47 +0000
Subordinate resources:    AS: 272814
                          IP: 2803:4490::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17761831 (0x10f0627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 19 18:14:08 2023 GMT
            Not After : Apr 23 22:42:47 2025 GMT
        Subject: CN=5953521b0ed37abec8837745b03e97172d449657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:d9:8d:26:3d:d9:9c:5c:b1:92:2c:97:1f:
                    03:7f:23:94:fa:53:96:7a:e7:6b:35:80:cb:00:b5:
                    a6:15:25:7c:5b:d8:86:53:b0:1b:3d:6a:c9:12:5c:
                    21:26:59:b3:a7:5c:08:34:0c:4b:07:19:f7:c1:47:
                    3d:1a:0a:7a:ed:4a:0d:09:a6:0b:00:b4:63:e2:fd:
                    1b:06:00:fd:65:ea:75:72:73:1e:6a:45:d0:8a:bc:
                    7c:4e:e4:28:16:a2:29:02:34:39:3f:da:43:dc:20:
                    fa:a3:53:e2:05:af:1f:78:09:41:b8:41:83:6c:75:
                    c8:a8:fd:6b:46:e7:47:09:91:a2:38:c9:b1:1a:b2:
                    b6:b2:77:70:0d:28:6a:29:e5:7d:63:5c:a5:ca:99:
                    a1:c6:42:63:84:36:28:41:bc:af:ab:55:37:c8:3c:
                    93:91:3a:f9:58:22:65:44:87:f3:8c:31:a0:e8:ed:
                    58:a0:9a:f5:af:36:7e:2c:38:fe:a6:2f:a4:07:50:
                    7a:32:27:ad:10:0c:3e:50:d3:24:98:9c:5d:75:cf:
                    c8:61:e3:97:8a:18:2e:2f:fd:37:15:a2:fd:f4:01:
                    0d:72:f5:0a:8c:2e:f7:be:d7:ad:bf:9c:23:c2:eb:
                    57:fd:86:40:de:ca:11:8d:34:3f:69:e6:84:8d:0b:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:6B:DD:70:6A:2E:1C:DB:9E:2A:17:18:F0:C6:CC:D7:D9:BA:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/5953521b0ed37abec8837745b03e97172d449657.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272814

    Signature Algorithm: sha256WithRSAEncryption
         74:28:de:68:c8:df:d1:88:64:dd:fd:3e:bb:35:73:33:4c:67:
         18:02:70:1d:3a:3c:fc:05:27:43:0c:13:ea:a7:99:d5:84:c8:
         e9:6d:03:c7:ce:7f:37:a7:c3:b0:30:4a:22:1e:19:63:b4:1c:
         c5:80:61:2a:bf:b3:01:33:68:99:6f:3b:22:38:98:71:e0:92:
         de:75:ed:d8:4f:31:97:9f:ce:c6:12:96:f8:5b:49:1b:04:cf:
         ef:aa:75:43:32:fd:f7:f8:76:13:91:dc:c3:31:fa:f3:45:5e:
         be:17:f8:20:f3:3a:9e:55:4a:de:df:6f:9d:42:cc:f6:1d:8a:
         1c:95:42:d0:37:cc:be:95:3d:65:fa:09:6c:4d:86:c1:bf:a2:
         5d:54:2c:ea:59:15:96:bf:07:7a:a8:1b:55:cd:ce:b8:28:10:
         f9:fc:c3:f1:8c:aa:62:75:b0:99:db:aa:a8:2e:5b:b3:55:a0:
         12:5a:80:46:e0:06:9f:47:26:ea:9c:8a:50:2e:db:a7:41:e5:
         78:68:65:16:d5:b2:c7:43:c7:56:0a:a6:e4:5a:04:fd:59:74:
         d2:e3:40:4a:01:fd:20:7e:07:ee:6e:58:bf:23:b7:4d:aa:29:
         b3:bc:d9:39:64:43:8f:92:a8:b7:6e:e8:8f:bc:aa:4d:70:64:
         fa:40:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:55 2024 by rpki-client on console-ams.rpki-client.org