Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.cer
File:                     5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.cer (raw, json)
Hash identifier:          NT7z1nj1Kr8jsMnWckmY6FlRZon6JVgSwSnBn8xZMpo=
Subject key identifier:   4A:66:F0:41:B0:BA:F4:1F:CF:8E:2D:5E:D8:2F:DB:60:9C:5A:53:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA5AA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 May 2023 18:02:02 +0000
Certificate not after:    Mon 17 Mar 2025 20:36:45 +0000
Subordinate resources:    AS: 265585
                          IP: 45.175.252.0/22
                          IP: 2806:33a::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15358631 (0xea5aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 18 18:02:02 2023 GMT
            Not After : Mar 17 20:36:45 2025 GMT
        Subject: CN=5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:9f:20:b9:94:e1:40:e2:ed:10:c7:55:3b:
                    d3:ab:ab:16:ea:a4:b8:72:5b:7e:3f:97:c9:64:f7:
                    f9:97:6f:a2:39:ac:7f:a3:29:f4:89:ba:d1:e7:64:
                    b9:be:62:4e:bd:66:bf:a0:8e:56:b7:86:8e:c8:14:
                    73:78:45:85:bf:f6:1b:d1:7a:af:de:80:77:3e:57:
                    89:cd:52:98:89:ea:12:b9:c6:4c:11:15:da:52:1f:
                    de:68:7c:34:89:38:7a:fe:c2:46:85:17:a4:fa:39:
                    c5:b7:da:f2:f7:91:d6:fd:10:c4:7e:ee:cd:48:9c:
                    2a:04:fa:24:8e:67:fb:82:fa:52:14:07:92:f5:1b:
                    08:06:25:45:77:3f:21:59:81:74:e1:51:dc:64:6e:
                    fc:a9:00:b2:bf:08:6a:8e:c7:66:ec:57:b5:18:f5:
                    c7:35:bd:ff:47:c4:a7:55:c6:14:37:56:b1:6b:f1:
                    5f:68:1a:e3:9a:4b:03:9c:a6:71:a4:0d:7a:bb:43:
                    15:60:12:7c:fb:fc:78:27:9f:09:90:e9:29:70:75:
                    93:1f:f7:ec:6f:a2:7a:ce:40:f5:ac:32:99:fc:ea:
                    19:c8:5f:1f:df:a6:76:7d:3b:1f:b6:82:e3:27:a2:
                    58:3f:6a:a3:ac:ed:14:f1:ce:74:a2:ef:3f:52:4b:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:F0:41:B0:BA:F4:1F:CF:8E:2D:5E:D8:2F:DB:60:9C:5A:53:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.252.0/22
                IPv6:
                  2806:33a::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265585

    Signature Algorithm: sha256WithRSAEncryption
         20:d4:15:fc:76:94:07:74:88:5b:88:2f:08:fb:c5:88:a7:22:
         cb:5b:70:0b:cf:68:f0:7b:e6:61:cb:39:29:16:9d:53:45:90:
         f7:99:6e:48:e7:07:86:16:7c:94:7e:c2:77:e7:92:55:d6:02:
         fd:64:c1:e6:ca:8a:25:ea:cb:cb:c9:b1:cf:39:fe:96:2a:29:
         74:30:a2:01:3a:05:de:53:d8:e0:52:b8:ac:23:e1:29:0c:72:
         51:2f:fc:a2:64:63:26:6c:8d:eb:ab:9f:78:be:c7:7d:6e:d4:
         34:80:e7:67:75:0d:34:c3:f9:02:27:36:27:e9:e0:1c:c2:40:
         bf:17:94:39:18:f8:51:58:83:1d:be:a4:37:e9:9f:c0:c1:4e:
         9c:84:f4:d6:10:4d:3c:45:40:f5:96:1f:1d:5b:8e:60:6b:79:
         62:42:0f:e3:3f:da:66:ac:e0:1d:b3:fd:25:c5:b6:e4:22:36:
         f4:0e:3f:6d:5d:a0:aa:c8:ab:2d:02:e9:d3:33:91:c3:1e:46:
         2c:f7:b5:e1:01:7d:aa:0e:ca:3d:02:1c:8a:f0:9e:e5:09:bb:
         73:78:86:74:c4:5a:d8:7b:12:54:b8:34:a6:32:ff:cc:fe:4e:
         54:1e:41:36:68:b9:f9:0d:32:e8:db:d5:ab:3e:64:10:c4:bf:
         9e:c3:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:00 2024 by rpki-client on console-fra.rpki-client.org