Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62f324297ce0aed25b1be5840b15e1d55bd04206.cer
File:                     62f324297ce0aed25b1be5840b15e1d55bd04206.cer (raw, json)
Hash identifier:          32ykUuJsxC04P0YibrEYTGPtW1PX3W3YgnOEUVuVpfM=
Subject key identifier:   DA:D6:C3:10:4F:E0:44:97:B5:71:B6:AF:FC:2A:25:89:2C:7B:5D:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109A1AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f3e0c97a-c32e-469a-ae5c-b6c69697758b/62f324297ce0aed25b1be5840b15e1d55bd04206.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f3e0c97a-c32e-469a-ae5c-b6c69697758b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 15:03:47 +0000
Certificate not after:    Sat 08 Mar 2025 20:33:59 +0000
Subordinate resources:    AS: 269995
                          IP: 200.108.191.0/24
                          IP: 2803:41e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17408428 (0x109a1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 15:03:47 2023 GMT
            Not After : Mar  8 20:33:59 2025 GMT
        Subject: CN=62f324297ce0aed25b1be5840b15e1d55bd04206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:6c:aa:64:a3:bc:b6:90:8c:8e:82:49:9e:
                    35:9c:92:85:b0:02:c6:2b:64:f8:8b:c5:79:aa:36:
                    72:f5:c1:74:9b:52:fb:1b:c5:1b:3a:0f:0c:36:f9:
                    56:1c:02:d4:51:63:b8:a7:27:06:b6:64:b8:33:a5:
                    a3:7f:31:d2:ce:3d:88:2d:4f:f1:d9:47:73:32:3b:
                    e2:12:7b:45:54:19:5d:9a:75:eb:81:41:0e:f1:fc:
                    ec:d7:bd:42:39:e1:37:b0:21:77:f2:f0:c5:59:ac:
                    f7:0f:10:fc:18:0b:e8:2c:e9:c4:e2:d1:3d:35:cc:
                    42:41:c2:75:32:a1:8e:5b:14:a6:5b:9d:cb:05:c8:
                    d4:74:dc:53:ef:31:e3:ac:3f:b2:23:5a:21:f1:25:
                    d1:69:9f:70:39:4b:31:62:d3:a4:44:c4:ee:84:57:
                    f3:50:86:c0:f6:0a:25:f1:be:3e:f0:f3:e6:71:9a:
                    28:de:a0:2b:ad:b3:82:f0:a5:8c:26:ec:4b:85:40:
                    6c:a5:79:14:a8:a0:1c:07:db:9d:c3:18:81:bc:9e:
                    7e:46:81:d9:be:ac:c0:eb:32:cc:34:69:ed:74:3a:
                    15:00:a3:c4:77:5f:65:a4:c1:82:43:d6:21:74:63:
                    d1:98:e2:05:4e:5b:12:53:d0:7e:cf:13:ba:4c:c9:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D6:C3:10:4F:E0:44:97:B5:71:B6:AF:FC:2A:25:89:2C:7B:5D:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e0c97a-c32e-469a-ae5c-b6c69697758b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e0c97a-c32e-469a-ae5c-b6c69697758b/62f324297ce0aed25b1be5840b15e1d55bd04206.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.191.0/24
                IPv6:
                  2803:41e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269995

    Signature Algorithm: sha256WithRSAEncryption
         af:42:b1:43:51:20:ee:50:64:60:23:6b:0a:a2:8c:8c:0d:50:
         0c:b2:3c:6c:43:b5:7b:5c:dc:6f:fa:93:92:79:17:23:a2:34:
         df:ef:bb:c4:22:0f:e2:25:26:fe:b3:ef:c7:23:03:01:c8:7e:
         63:ba:67:3c:b0:fe:52:17:b0:38:ba:65:31:78:84:cf:54:e2:
         2f:95:74:87:07:17:e9:b2:53:02:1a:d6:e3:de:a4:28:5d:f9:
         52:20:6b:11:35:98:b4:bc:38:56:05:16:a0:62:eb:74:6e:a3:
         45:8d:af:14:83:dc:45:eb:d8:1b:39:d5:4c:d2:87:a8:d2:50:
         1f:56:29:b9:00:b2:54:bb:89:fa:0c:e5:1c:40:03:eb:4a:87:
         ba:c1:aa:8e:55:c3:ec:b2:42:6c:b1:2b:c1:ef:1a:2f:1e:3e:
         94:74:96:a0:2b:0b:f9:e3:ec:8a:6d:55:87:85:f9:22:22:17:
         47:64:b1:79:bb:54:d5:17:da:2b:a6:98:79:a2:4b:db:1f:db:
         27:21:2f:a0:fa:37:7e:f9:85:33:50:69:b0:61:61:46:41:58:
         ef:c7:3b:c1:a1:e6:61:78:3f:a9:bb:e0:92:d1:dd:9b:11:3e:
         29:1b:e0:5e:88:93:8e:fc:c9:35:ec:c0:ce:b4:a7:ce:30:8b:
         57:e9:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:16 2024 by rpki-client on console-ams.rpki-client.org