Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a9974affe519a761de253e75b4917ce610cedda.cer
File:                     6a9974affe519a761de253e75b4917ce610cedda.cer (raw, json)
Hash identifier:          Q6RyN33Up5CcL9KR85fMYXIT40kayAXM4vOqoPbfvPg=
Subject key identifier:   DE:32:14:74:F6:7C:CC:2E:2D:E3:EA:EB:A6:87:9A:2C:8E:DF:0E:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC5714
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/17baa6d2-7c48-4910-9130-5d5bf121ec86/6a9974affe519a761de253e75b4917ce610cedda.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/17baa6d2-7c48-4910-9130-5d5bf121ec86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 12:32:21 +0000
Certificate not after:    Thu 28 Nov 2024 20:32:29 +0000
Subordinate resources:    IP: 45.170.40.0/22
                          IP: 2803:eba0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15488788 (0xec5714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 12:32:21 2023 GMT
            Not After : Nov 28 20:32:29 2024 GMT
        Subject: CN=6a9974affe519a761de253e75b4917ce610cedda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:05:c7:4d:81:af:34:22:a7:c5:f4:46:2c:
                    3c:cf:78:24:07:7d:74:71:d0:49:fc:d3:09:a0:fd:
                    62:f9:63:70:a0:61:5e:27:af:76:1e:82:48:51:04:
                    0c:fe:c4:97:2f:47:03:42:18:1b:98:2c:31:df:ff:
                    61:88:c9:76:ea:05:70:77:f8:a7:8e:6c:b8:e5:41:
                    b1:e5:56:b5:4b:b8:4f:ae:40:50:ce:a8:54:fb:98:
                    3e:cd:ec:6c:3f:8a:12:d4:53:cc:93:98:0d:2c:c6:
                    2b:e0:56:a8:07:2f:28:84:10:cb:bd:9c:c3:82:59:
                    a8:f1:d9:6c:ef:40:6e:d2:28:83:a1:d9:f0:07:1a:
                    38:09:c9:b3:93:de:2f:77:0b:d1:f1:0d:2f:c4:24:
                    eb:b9:f8:8e:84:ca:61:4f:0d:1f:e9:8c:a3:56:80:
                    ac:92:d3:65:b5:14:27:bd:93:59:f1:ca:19:3a:52:
                    41:fc:db:9e:79:32:26:2d:9e:9c:a1:30:c6:b1:6c:
                    0c:f9:57:f6:e5:47:45:55:58:6a:77:7f:e9:14:37:
                    52:42:19:6e:7b:32:ae:10:79:cf:ea:41:53:55:ed:
                    72:5b:1e:5d:83:db:e0:b3:0d:33:dc:07:b8:10:2d:
                    09:4d:11:d0:44:d7:a5:59:39:d5:c3:81:54:d8:09:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:14:74:F6:7C:CC:2E:2D:E3:EA:EB:A6:87:9A:2C:8E:DF:0E:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17baa6d2-7c48-4910-9130-5d5bf121ec86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17baa6d2-7c48-4910-9130-5d5bf121ec86/6a9974affe519a761de253e75b4917ce610cedda.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.40.0/22
                IPv6:
                  2803:eba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:34:7b:1a:b9:37:bc:40:c1:e6:8a:76:04:96:fd:02:23:23:
         25:9a:c7:89:09:8a:5a:76:34:7e:df:26:5a:8c:6b:3d:60:84:
         c3:db:4b:25:2e:ef:6e:20:c5:34:39:bc:81:50:62:bc:07:13:
         9c:b2:80:10:57:fd:26:33:da:ca:07:8d:1a:c6:a2:68:ae:1b:
         11:cd:75:35:98:50:19:7a:d2:6f:d3:cd:d6:d5:63:ff:f7:73:
         43:cb:d3:2a:c9:96:fe:ce:f4:53:21:64:2d:8e:0b:03:45:ec:
         51:43:d3:ef:9e:c2:f9:8b:9f:83:1a:fd:82:26:bb:e0:29:14:
         0f:d9:c2:f7:05:eb:10:cb:49:b2:24:1e:4b:40:e6:7b:e4:24:
         70:38:ab:18:c3:58:38:11:df:48:52:3b:e2:ed:f4:8c:57:b3:
         08:91:24:40:46:77:46:93:d5:5c:0b:8a:f9:05:88:bc:87:0a:
         1b:d7:02:6e:90:15:60:9e:8d:7d:7d:31:e6:6f:5f:84:6e:5e:
         26:c3:b1:4f:4f:5a:9f:c5:42:f9:b1:15:bf:74:c8:14:c4:8d:
         23:e0:fc:72:e3:45:27:11:8e:03:30:71:06:41:b0:89:67:f4:
         c2:2c:30:a6:b1:f5:55:8d:9a:21:65:43:3a:0b:ad:7c:54:de:
         4c:13:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:50:06 2024 by rpki-client on console-ams.rpki-client.org