Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer
File:                     62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer (raw, json)
Hash identifier:          JA2qvWRtsw4YK3GdEwPQDqQnMC32ZTJXRoCBSUNlnd4=
Subject key identifier:   CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01065ECE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 03 May 2019 17:04:17 +0000
Certificate not after:    Sun 09 Feb 2025 16:53:25 +0000
Subordinate resources:    AS: 267828
                          IP: 45.173.216.0/22
                          IP: 2803:b860::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17194702 (0x1065ece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 17:04:17 2019 GMT
            Not After : Feb  9 16:53:25 2025 GMT
        Subject: CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:62:3f:0d:f0:b8:37:d7:f9:02:a8:96:db:
                    ca:75:7e:92:5f:ba:4a:ba:f1:9e:f8:e8:64:33:60:
                    d7:dd:a8:ca:7c:24:b7:8b:6b:c9:fe:39:bf:54:49:
                    95:ec:d7:84:4d:b5:ce:40:e6:c3:c6:af:d0:d2:c4:
                    80:2c:3e:19:2b:28:18:cf:8c:b9:5c:a1:24:03:dc:
                    b8:b1:a5:40:b0:f7:85:17:f3:1d:10:a3:30:4d:59:
                    fe:e0:e8:dc:23:26:7f:99:77:6e:47:76:93:1b:52:
                    46:1e:88:81:9f:62:bb:cf:34:39:b9:27:e3:a6:8a:
                    4a:75:23:eb:c3:a5:d5:a0:11:c4:80:6b:a1:d6:0f:
                    f7:43:c3:8c:65:dd:51:00:cf:25:4b:06:fd:c7:47:
                    df:83:1b:62:f9:ae:78:7c:a4:f5:d5:7c:b3:63:bb:
                    4a:67:4c:40:05:71:5a:ad:c9:4c:07:4e:d5:ec:cd:
                    91:52:1c:f5:78:da:41:04:9b:ed:82:e8:b0:16:68:
                    c1:81:74:49:ef:df:b1:7b:3b:8d:f3:65:a4:06:a0:
                    87:2b:da:e2:7d:c4:74:d5:04:32:af:f8:51:ea:dc:
                    8e:cf:03:ed:67:99:8f:46:27:7b:57:9b:22:0e:4a:
                    71:ca:8f:a2:40:c6:45:08:1c:bd:e4:ae:48:f1:dd:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.216.0/22
                IPv6:
                  2803:b860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267828

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:49:b2:55:bf:a6:0f:15:c2:17:e2:55:4b:19:90:bd:70:
         0f:a7:02:39:63:d4:9f:76:e5:2f:31:ad:91:43:fe:42:03:7d:
         e4:da:cf:b2:ce:93:e2:6e:5b:6c:38:49:10:84:07:c1:7c:6a:
         06:91:fc:ff:48:78:3e:21:91:99:31:ba:30:c7:ee:b8:3c:c9:
         dd:ed:bc:8d:71:4a:aa:60:05:df:10:23:20:b4:90:6c:83:dc:
         bd:af:02:14:e6:19:ff:18:f9:18:0b:c6:55:99:cf:bd:cb:11:
         bf:ff:0c:6b:b0:c5:d3:19:01:88:63:70:95:f9:56:ff:f7:d9:
         22:fc:61:28:a2:91:59:61:60:ca:35:f0:73:77:da:c5:5c:d1:
         64:75:64:8c:c9:54:92:bb:68:04:d4:52:ff:66:5f:5d:9c:b1:
         a5:67:6d:c0:b2:58:32:e5:2c:1e:fa:a7:c6:1a:e5:9d:60:a0:
         5b:46:e7:20:ca:89:e2:4c:4a:6d:68:db:b4:3c:29:b5:46:98:
         28:e9:a2:e3:52:cc:9a:fd:38:82:21:a4:bd:8e:1c:28:22:f6:
         74:8b:ac:97:a2:cf:ff:8b:a5:ad:01:7e:bf:f0:27:74:ff:ad:
         ae:f3:28:f0:90:57:ff:6d:0d:1c:d4:29:59:3b:07:3e:98:a1:
         86:90:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:33 2024 by rpki-client on console-fra.rpki-client.org