Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer
File:                     64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer (raw, json)
Hash identifier:          krs8tvdwmg0ewtxTU6gAwHm3f5xWBcf2z3ULe3Haz/U=
Subject key identifier:   C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105BFB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Dec 2021 02:14:09 +0000
Certificate not after:    Mon 03 Feb 2025 18:38:25 +0000
Subordinate resources:    AS: 269981
                          IP: 200.215.248.0/22
                          IP: 2803:4ee0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17153974 (0x105bfb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 02:14:09 2021 GMT
            Not After : Feb  3 18:38:25 2025 GMT
        Subject: CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:79:d6:9b:67:94:e7:40:9f:7d:aa:f2:0e:
                    3e:15:29:bd:de:88:b3:2d:9b:48:f4:7b:d3:b4:80:
                    1c:2f:c6:6a:12:52:51:cd:48:1e:c3:f0:0d:bb:e4:
                    da:3d:eb:3a:78:1c:4c:f4:6d:41:88:d8:dc:f1:df:
                    dd:8f:b9:85:52:22:d3:5a:54:2d:4d:47:a5:5c:c2:
                    8a:50:ee:f5:b0:c9:02:76:75:39:e2:bc:56:f5:f8:
                    57:2e:12:1e:dc:7b:99:6d:9b:c1:b8:2d:36:ab:dc:
                    0f:8d:53:38:bd:87:b8:f6:d1:8e:e5:62:07:01:68:
                    f6:ad:4d:19:9d:52:08:06:d6:40:f9:f0:3f:e0:4d:
                    de:b2:3e:82:4d:78:90:f4:81:5b:13:e2:09:5c:6d:
                    c7:94:1c:8f:b5:24:30:e3:65:46:a1:18:39:81:9e:
                    19:77:59:79:20:7a:5c:10:7c:4a:d3:b4:67:e9:a4:
                    8f:22:12:b7:45:34:1c:c6:bc:10:05:52:f0:db:96:
                    1d:79:48:f9:07:80:d0:1a:40:47:f8:bb:b5:9e:89:
                    17:c7:92:13:95:42:38:50:7d:b0:c1:1e:4e:38:99:
                    f7:f9:2e:49:33:93:6e:ca:47:f8:2e:15:c9:27:c1:
                    f3:bb:a6:30:9c:a8:f9:4e:34:f1:f9:86:9f:0f:31:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.248.0/22
                IPv6:
                  2803:4ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269981

    Signature Algorithm: sha256WithRSAEncryption
         73:58:cf:5c:7b:ba:3f:38:1d:04:bc:58:f5:e0:9f:dc:de:c6:
         db:3f:a8:f8:2f:70:19:d8:48:17:1f:13:f2:78:72:6a:03:e4:
         3f:41:45:8f:c8:f6:ac:67:31:14:73:c3:f3:10:47:84:9a:80:
         28:22:f6:51:7b:aa:56:a7:e9:5c:2d:1b:38:8a:67:66:37:34:
         1e:d3:8c:b4:c2:e0:b4:92:92:3b:9d:76:bd:2c:20:81:d4:1a:
         10:6a:df:1f:1b:62:6c:8c:a3:9a:3a:42:62:b3:aa:e7:10:5f:
         6a:6a:35:77:f3:ad:4d:07:20:11:d0:f8:b1:27:1f:9d:50:21:
         a7:77:f6:0e:c6:3c:c5:16:48:58:ca:17:0c:15:2a:dd:91:1c:
         19:14:c0:1d:7c:95:c0:72:37:b9:7d:b4:6f:35:43:e3:6a:d2:
         0d:3a:3d:a1:f4:f4:71:84:be:53:7c:68:60:32:72:df:85:bb:
         82:8a:02:78:4e:fe:84:ce:e2:02:0e:9a:fc:c8:76:cf:3b:4f:
         73:cb:e4:9f:b1:f4:47:59:4b:44:31:9e:15:6c:ab:e7:c4:0f:
         08:77:e5:ec:97:7c:a3:d8:39:f4:7c:a6:01:f3:6d:d1:39:0d:
         f3:46:f4:69:a9:7b:2a:25:15:39:19:1d:3d:79:ab:40:95:3b:
         2e:23:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:58:16 2024 by rpki-client on console-fra.rpki-client.org