Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
File:                     6700d78d2e18243ea736c1288c50a9461ced8b3c.cer (raw, json)
Hash identifier:          DgyyUhlHGRQL9IyT+Pt0Jcc4OuFtfD+icUB7kUpi4Pg=
Subject key identifier:   6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDA6FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Sun 26 May 2024 15:26:56 +0000
Subordinate resources:    AS: 262171
                          IP: 190.93.160.0/20
                          IP: 2803:fb40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14526204 (0xdda6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : May 26 15:26:56 2024 GMT
        Subject: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:7b:75:1d:9c:34:7c:c7:24:7f:44:2b:02:
                    01:d8:7b:8b:87:9e:81:61:2a:9c:80:08:37:dd:19:
                    d8:2c:bd:df:5d:a6:9e:c3:c9:e1:dc:e9:43:08:1f:
                    9f:42:22:bd:08:9b:ac:4f:5d:74:ee:d4:af:b0:a7:
                    e7:2f:e6:89:69:dd:94:59:70:0b:ed:c7:8a:ff:42:
                    f2:bd:6d:cd:93:3a:26:70:ca:53:a7:ca:13:e4:2d:
                    4a:0f:ce:75:86:c6:2f:3e:ca:09:d7:43:a3:fb:21:
                    cd:af:07:c9:72:25:02:14:b1:6c:af:16:8b:dd:35:
                    8d:11:45:2b:90:41:4c:21:81:90:81:80:5d:7c:fe:
                    84:fe:e4:42:cf:08:50:1e:4b:ca:01:83:29:b1:00:
                    2d:33:3c:d4:4c:6e:eb:f7:f8:d3:b6:97:01:19:9d:
                    57:76:32:9d:1b:ef:cd:52:e3:f6:d2:6c:3e:75:b4:
                    b1:3a:cb:69:c3:72:51:d3:e4:00:54:05:0b:9a:47:
                    20:89:e2:b4:b6:23:b5:16:03:43:17:70:45:46:b0:
                    81:2c:7b:47:ea:75:34:1b:5a:2f:1f:7d:24:55:d9:
                    c1:73:c5:10:7b:5b:f6:c0:86:0f:f1:fc:f5:9f:ca:
                    f1:5f:5b:6b:18:b6:d9:1f:69:96:ec:36:b6:ed:90:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20
                IPv6:
                  2803:fb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262171

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:e6:b4:d8:03:89:c5:6b:8d:4a:9e:c7:2e:14:7f:af:3a:
         65:9d:3e:d2:0a:4a:09:48:be:f0:14:c7:02:24:0a:85:f3:c3:
         79:2f:14:8f:85:2e:9b:04:44:02:8b:ed:3c:04:78:e6:70:35:
         13:50:65:2a:68:9b:b8:d2:25:ef:fb:98:3b:2a:98:ed:a2:73:
         23:b1:8c:0f:c8:77:73:46:df:3f:f5:05:51:6a:3f:9c:9a:3d:
         24:19:e5:33:c0:78:7e:f1:21:68:db:31:21:4b:ac:e8:df:65:
         fd:53:a9:59:57:49:0f:dc:06:4c:9a:80:77:65:c7:89:ec:b6:
         90:3c:70:8b:0d:49:92:8e:97:04:af:67:d0:59:ae:ef:ff:b1:
         33:aa:c3:e1:77:4f:36:e2:0a:72:3a:2f:ef:39:92:73:47:66:
         89:02:fe:a0:eb:c9:7f:a2:bf:be:e6:c1:0d:a7:5d:20:b0:de:
         25:7c:f6:4b:e7:74:57:be:16:9d:f6:eb:ef:7b:b3:bc:60:4a:
         e7:cb:c9:26:8f:10:61:e9:1c:58:74:2d:1a:ea:b8:aa:f0:96:
         05:22:7e:12:d2:6b:87:dd:af:6a:0a:21:28:20:16:3e:a4:1d:
         29:24:69:4f:63:b8:41:54:76:f8:a6:13:20:1f:d3:42:e1:8e:
         3f:7d:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:49 2024 by rpki-client on console-fra.rpki-client.org