Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.cer
File:                     5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.cer (raw, json)
Hash identifier:          DLXfUA3amPXxjx00eBbotgMjybIj4CDUBgSqh+TPgf0=
Subject key identifier:   A2:99:D7:56:89:68:0F:AD:0A:0F:04:83:52:77:E3:68:3B:E5:36:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F5F8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 16:50:07 +0000
Certificate not after:    Sat 17 Jan 2026 17:47:13 +0000
Subordinate resources:    AS: 272965
                          IP: 2801:11:3800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17784719 (0x10f5f8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 17 16:50:07 2023 GMT
            Not After : Jan 17 17:47:13 2026 GMT
        Subject: CN=5d3488bdd011aaba522a8ada0307e9a6c60ebc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:8b:79:ac:90:40:ba:04:95:09:f1:b4:f0:
                    6f:c4:4e:61:47:11:97:39:5a:c0:6e:ef:3a:0d:a1:
                    fc:af:43:e4:dd:3c:f4:c5:dd:26:ed:64:92:d4:6f:
                    39:1c:1f:67:8d:ae:0d:59:c9:bc:3a:55:c2:9e:ee:
                    e3:d6:48:75:4d:65:3b:ac:9e:0d:38:3b:86:c4:59:
                    2c:d0:fc:ee:0b:cb:ca:e1:79:26:34:64:65:38:33:
                    e9:e7:62:f2:34:e3:81:9c:cb:1b:16:7d:0b:0d:78:
                    1e:4c:22:a8:ed:53:21:20:b3:12:1e:48:12:64:04:
                    4b:e1:de:1e:19:98:37:25:f9:d1:20:8d:2c:f0:a3:
                    d0:8c:35:ba:d3:49:9e:32:22:3f:7c:cd:ac:6b:92:
                    a5:fb:52:e8:af:0a:a2:67:11:c9:36:71:8c:97:95:
                    8a:5b:8e:31:cb:4e:d1:eb:4c:b9:be:28:ef:ff:a4:
                    ed:9e:1d:35:88:2f:b5:f9:09:3a:d1:87:14:76:cc:
                    68:a9:be:8f:47:67:cc:b4:12:0d:83:1e:ac:72:a1:
                    f9:ec:18:a3:01:91:81:07:2a:85:6d:4a:4c:e0:3f:
                    75:29:95:ea:24:e3:82:f2:a2:6f:22:53:97:cc:72:
                    4f:f5:5c:a5:3c:a0:be:0d:1f:6d:e6:3b:3f:f3:14:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:D7:56:89:68:0F:AD:0A:0F:04:83:52:77:E3:68:3B:E5:36:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:3800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272965

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:5a:fe:03:cb:8b:87:af:53:92:8f:13:66:0a:dc:67:c9:
         ce:cc:f8:94:58:6d:d8:11:9c:58:4e:c3:c2:79:2d:9c:2a:be:
         c9:85:b0:ba:6e:37:de:de:b7:c3:8a:6d:ee:b2:e1:86:14:14:
         e8:0f:83:32:4a:20:90:e2:78:f2:02:10:02:7f:73:df:f6:c6:
         fd:00:01:7d:fa:73:a3:4b:f4:52:e0:73:b0:44:3e:6a:1e:ec:
         3a:7e:1d:a4:2f:cc:61:2e:6a:9e:cb:6d:fb:9b:a0:ae:c5:b3:
         2a:97:7f:c9:a6:3b:77:a4:f2:50:c3:94:3e:67:d5:6c:36:79:
         82:84:6b:e6:2b:d1:50:a9:9b:60:03:cc:be:a4:54:0f:1a:20:
         9f:62:71:dc:b3:a4:61:71:de:a9:cc:a6:67:00:3f:a9:24:a2:
         d3:8d:d2:be:36:fc:5a:96:fa:bd:b2:9a:07:4e:2c:57:c1:ff:
         a7:da:fc:f1:c5:ee:52:21:91:87:1f:f9:e4:cb:66:55:f7:0e:
         ee:3d:84:49:c1:ed:16:df:28:26:37:d7:74:c3:0d:a1:db:9d:
         20:a4:96:b1:d4:c8:15:f9:84:e5:91:b4:e5:21:4b:0f:e1:28:
         d2:56:69:f1:75:36:95:5b:ed:96:66:90:a5:21:87:6d:b7:1e:
         d1:4b:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:32 2024 by rpki-client on console-fra.rpki-client.org