Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
File:                     62a782cb41463cc649a6c52c762bea430cdc06b2.cer (raw, json)
Hash identifier:          hax8GTMrtsH9n+1QwmdEg90o4H8Z40VLi6WlbVyadUs=
Subject key identifier:   B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AE903
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Feb 2020 21:16:41 +0000
Certificate not after:    Wed 19 Mar 2025 23:07:05 +0000
Subordinate resources:    AS: 28036
                          IP: 152.231.32.0/20
                          IP: 190.143.240.0/20
                          IP: 2803:180::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17492227 (0x10ae903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  7 21:16:41 2020 GMT
            Not After : Mar 19 23:07:05 2025 GMT
        Subject: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:94:81:54:a6:69:09:e9:81:a5:fc:5f:32:
                    c8:75:6d:a0:69:aa:8b:2d:f3:e8:44:ad:ce:a8:07:
                    54:e0:25:df:86:31:17:74:47:22:c9:a0:f0:57:75:
                    8b:40:40:fa:ae:25:e2:2f:f7:69:e8:ea:65:16:63:
                    02:65:8e:92:50:e7:b1:36:12:c3:20:07:84:01:cd:
                    bf:09:1d:a2:e3:5d:17:1e:2b:87:ce:b0:7f:10:c9:
                    22:8b:11:0e:4d:4c:84:a7:0d:67:59:31:47:80:3c:
                    e3:53:90:cf:c7:42:c6:c2:92:dd:0c:18:e1:0c:52:
                    5c:c9:25:1a:7a:dc:8e:43:86:9a:8e:c2:29:ec:5e:
                    6a:3e:b4:25:7a:55:17:1e:b5:1a:c0:08:a1:10:b5:
                    c6:ca:a9:3a:0a:9a:e4:d5:5a:1c:ea:2a:74:8f:d4:
                    b2:8f:3e:ab:7d:f7:e7:82:4c:aa:c3:21:ea:42:3d:
                    38:eb:0d:0d:99:54:4b:f2:75:94:61:73:71:07:58:
                    6c:37:1c:64:1d:e8:90:80:5f:66:82:16:98:78:b7:
                    3a:2b:69:ee:97:8d:a0:c1:ba:db:54:c7:e3:56:f9:
                    95:d9:d1:a7:93:17:9d:a8:34:73:74:8e:c7:b6:dc:
                    b8:c4:70:2d:7b:3c:eb:62:e9:99:29:98:1a:7a:60:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.32.0/20
                  190.143.240.0/20
                IPv6:
                  2803:180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28036

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:8d:4a:a5:81:f0:15:2a:7e:ad:eb:67:bb:6b:9c:00:87:
         40:d5:2e:a2:c7:dd:e5:cd:7c:95:d3:68:64:9e:75:ca:72:27:
         b7:c7:3b:e3:50:9b:e5:73:3a:58:9e:39:1f:33:0e:d4:19:ae:
         f4:20:57:7a:2b:ed:fb:66:96:d8:e1:71:c5:4c:0f:85:98:6e:
         45:95:c1:6f:97:c1:2f:b1:13:55:c4:d2:27:74:7c:d1:da:39:
         6f:70:65:f2:1c:b6:68:f1:6f:6b:93:f1:32:f4:47:63:78:5c:
         db:62:fd:57:07:84:a9:57:fe:7f:4d:4c:6f:44:e7:b1:3e:a6:
         04:77:ae:64:b1:93:05:08:3b:ab:42:2c:18:5a:68:56:97:21:
         59:8b:54:32:74:61:00:3e:1c:93:a5:4d:2d:cd:a3:61:c3:0e:
         29:7c:4b:85:75:1d:97:02:6a:dd:3d:a9:ce:e6:b0:99:5d:46:
         76:90:e3:42:72:3a:61:c7:28:cb:b5:bf:0f:aa:c5:d2:4f:4c:
         37:a6:5b:ce:b3:70:90:07:0c:84:6c:fc:d8:c9:4d:f0:90:b3:
         b9:34:db:8c:4d:f0:34:57:70:05:be:8b:b6:c5:21:57:63:f5:
         bf:6c:b9:1e:b9:ca:cf:88:29:d6:a2:f1:ab:5a:20:07:b4:a6:
         09:b0:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:13:27 2024 by rpki-client on console-ams.rpki-client.org