Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a24b99de8214e794d39a40fdcf541c49d513d8d.cer
File:                     5a24b99de8214e794d39a40fdcf541c49d513d8d.cer (raw, json)
Hash identifier:          PTwZOk9hiDuv3kCGpdgX5mQ7UuQ6kx+2qL2onEaIx+M=
Subject key identifier:   67:A4:6F:FE:30:CC:BD:F3:F2:2D:E9:FB:F1:26:EE:DA:B6:27:07:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100EA9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d5100c26-8bbb-4474-aca9-48f888d28a40/5a24b99de8214e794d39a40fdcf541c49d513d8d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d5100c26-8bbb-4474-aca9-48f888d28a40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Mar 2020 22:42:20 +0000
Certificate not after:    Wed 11 Dec 2024 14:53:11 +0000
Subordinate resources:    AS: 270046
                          IP: 2803:cae0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16837275 (0x100ea9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  9 22:42:20 2020 GMT
            Not After : Dec 11 14:53:11 2024 GMT
        Subject: CN=5a24b99de8214e794d39a40fdcf541c49d513d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:19:07:63:18:8a:1f:d1:ed:e6:48:a9:2e:
                    b4:a1:e0:3b:69:67:4b:17:17:de:3b:5e:34:b5:80:
                    92:ed:da:08:71:65:ed:f6:f8:40:bc:d1:c9:44:b0:
                    71:df:f6:a1:41:77:2e:f5:b8:15:92:d9:7a:e0:9e:
                    eb:48:74:f9:04:5c:6f:41:12:d0:b6:39:0b:c3:37:
                    e0:33:b1:82:d1:e0:76:a8:0f:95:ef:7b:fd:8e:24:
                    45:97:cf:57:a8:70:e7:cf:0b:d1:45:b7:0f:6c:8f:
                    02:f8:99:72:dc:16:16:cd:e1:36:61:02:aa:a6:6c:
                    77:d6:55:f9:8d:40:b0:9d:26:8a:48:e4:47:54:14:
                    e8:f0:72:5f:61:b1:c2:aa:7f:d1:a2:d0:96:ad:43:
                    e3:19:ce:cd:09:68:a9:0c:e8:d2:3a:5c:74:6f:89:
                    85:7d:0a:fd:bd:30:e1:17:0f:15:a0:1e:48:a5:e5:
                    c5:63:87:0a:4a:be:4f:e7:83:72:f0:4a:04:b2:bf:
                    28:45:f2:44:b3:1e:06:3a:40:7b:68:65:07:e6:22:
                    91:6d:f5:a3:9b:31:ae:b9:ae:05:fa:34:bf:08:ba:
                    35:0e:b8:52:b4:36:42:1f:0d:9f:8e:4d:64:88:b2:
                    32:ee:e7:35:e8:cf:22:49:67:f1:fe:67:a6:7c:d4:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:6F:FE:30:CC:BD:F3:F2:2D:E9:FB:F1:26:EE:DA:B6:27:07:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d5100c26-8bbb-4474-aca9-48f888d28a40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d5100c26-8bbb-4474-aca9-48f888d28a40/5a24b99de8214e794d39a40fdcf541c49d513d8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270046

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:da:93:1f:67:b8:c9:17:96:79:f8:06:7d:78:69:11:cb:
         54:de:8c:4f:e8:7a:82:25:d8:e3:1d:c1:28:5c:4b:4f:7a:cc:
         1c:d7:ca:ee:61:10:15:78:f7:d8:b3:d6:dd:50:24:ce:a9:95:
         b3:75:0d:6e:4f:07:fb:90:9e:e5:61:fa:83:aa:b8:95:42:92:
         02:ef:b3:78:4a:8c:b1:a8:f1:38:9f:da:cd:dc:5c:27:78:9d:
         86:d9:83:8b:4c:71:c0:98:01:1a:68:55:11:8f:06:c7:72:3f:
         c7:cb:5c:8f:5f:ed:b4:2a:b8:28:c6:17:73:ea:6b:6b:67:d0:
         92:12:13:39:e8:ce:96:cb:ea:aa:82:50:09:0b:e5:56:9c:23:
         b4:e3:54:3c:b9:b3:5c:44:50:01:6c:02:39:d1:5c:08:d2:1f:
         00:6f:23:ec:f6:52:7a:e8:4d:19:11:60:95:7d:93:9b:6b:69:
         de:3d:8e:f4:21:f5:9a:80:6e:e3:9c:18:c5:10:3c:48:95:53:
         74:05:ca:93:0d:08:7e:1f:25:ed:bd:e8:de:74:a3:e6:99:6c:
         9e:9b:df:50:c5:ca:6c:64:45:e9:b6:fc:41:a2:9f:77:01:cc:
         dd:49:49:1e:1d:74:4c:5e:c8:87:67:bc:02:f6:5f:e8:14:40:
         1a:db:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:00 2024 by rpki-client on console-fra.rpki-client.org