Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69352d5404c33cc229c22b48be8672eab920961f.cer
File:                     69352d5404c33cc229c22b48be8672eab920961f.cer (raw, json)
Hash identifier:          s72sW0iUcOm+V0lUAT9KlXWdWnnlDnQiaq6LATQkvVQ=
Subject key identifier:   9E:05:BC:5F:46:94:B6:9A:5C:07:76:94:B6:04:D3:CA:3F:AD:14:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F86256
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/69352d5404c33cc229c22b48be8672eab920961f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Aug 2020 18:10:06 +0000
Certificate not after:    Sun 06 Oct 2024 23:12:03 +0000
Subordinate resources:    AS: 266665
                          IP: 45.227.200.0/22
                          IP: 2803:4920::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16278102 (0xf86256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 14 18:10:06 2020 GMT
            Not After : Oct  6 23:12:03 2024 GMT
        Subject: CN=69352d5404c33cc229c22b48be8672eab920961f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:01:8b:c9:da:91:5b:62:55:a2:a9:77:66:
                    16:0a:d3:54:e4:c1:6c:48:0a:d3:2e:2c:08:7c:d8:
                    dc:f5:9f:b3:53:08:56:b4:ac:3d:35:d1:bc:4f:26:
                    34:e0:d8:28:f0:14:e1:92:5d:e1:85:85:f0:64:cd:
                    f9:c2:3a:56:31:ce:05:97:4b:44:bb:5a:54:67:49:
                    ee:51:3a:84:b5:fb:88:fd:58:5d:93:bb:3d:04:d1:
                    b0:af:d0:d9:70:a3:fe:6d:02:32:10:e4:cb:ff:ab:
                    4f:d1:3f:02:39:fa:dc:94:5d:61:da:69:dc:b4:15:
                    87:ea:b0:f8:b8:00:92:8b:30:88:20:a0:ee:af:9a:
                    be:aa:a9:d6:0a:5c:69:cf:38:3d:2d:dd:e9:e5:bb:
                    7a:92:d8:ff:5e:d2:20:80:30:0a:98:16:d8:22:94:
                    ab:60:4f:74:4c:2c:7e:62:91:55:26:4a:1e:1a:44:
                    00:58:cc:6c:18:de:3a:9e:67:09:d0:26:75:cd:b0:
                    d8:bc:e6:49:f8:b3:82:40:a4:1e:d0:18:41:e5:56:
                    0a:d1:59:9f:b4:8c:43:47:d6:8f:1b:43:73:29:22:
                    c3:ae:9b:02:b3:c8:48:09:5d:d2:84:fa:14:e1:3f:
                    4c:35:87:4e:e6:34:2c:82:a8:56:71:10:76:ee:cf:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:BC:5F:46:94:B6:9A:5C:07:76:94:B6:04:D3:CA:3F:AD:14:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/69352d5404c33cc229c22b48be8672eab920961f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.200.0/22
                IPv6:
                  2803:4920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266665

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:b7:7e:99:59:47:c7:d9:7c:a5:2e:f9:25:f9:c3:38:6e:
         ff:40:a3:a2:e7:36:45:67:7e:17:de:2c:2f:6f:2e:f3:d6:5f:
         61:bc:d9:93:02:98:17:3b:33:a6:48:b9:be:2c:8c:35:43:5e:
         48:23:47:d0:d7:36:9d:23:65:02:be:bf:aa:68:65:6b:57:e2:
         b0:9e:78:bc:69:71:ec:20:3d:d2:9f:47:26:c7:7d:1a:35:3c:
         a9:64:04:38:ed:62:a7:91:68:28:86:d5:ac:99:b0:06:ab:34:
         ec:2f:6c:92:10:80:01:86:6a:53:9c:71:ef:69:69:8a:c5:18:
         47:b6:37:46:7a:df:78:a3:1d:c0:d4:25:e3:9c:23:c6:96:af:
         dd:16:ff:1e:3e:0d:2d:e0:14:aa:99:cb:3c:92:7f:71:71:f8:
         65:62:bc:f8:2a:de:dd:7a:a6:e2:3b:1a:d0:ed:fa:04:cf:eb:
         52:c8:70:36:13:cf:07:a9:50:49:9f:51:57:f0:a7:bb:f4:55:
         f2:67:87:05:36:78:2d:c2:38:0a:b8:22:a5:5d:c0:57:bf:b7:
         64:95:df:74:91:a2:3f:ca:37:67:11:37:c8:d9:3f:02:6e:e6:
         32:cd:c7:59:a8:60:a5:12:99:aa:90:d6:c6:66:d2:5b:02:bf:
         44:56:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:19:13 2024 by rpki-client on console-fra.rpki-client.org