Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.cer
File:                     6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.cer (raw, json)
Hash identifier:          oyGC275OTZOsOor1gErthsQnr4nVIAXJYOaToq0XzRc=
Subject key identifier:   F4:26:CD:01:4F:0F:A6:7C:31:97:03:93:2F:1A:57:5D:D8:FB:33:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104874D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Nov 2019 19:37:18 +0000
Certificate not after:    Mon 20 Jan 2025 18:04:53 +0000
Subordinate resources:    AS: 266757
                          IP: 45.232.148.0/22
                          IP: 2803:a720::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17073997 (0x104874d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 19:37:18 2019 GMT
            Not After : Jan 20 18:04:53 2025 GMT
        Subject: CN=6b3ffbd6c9ed992f221e43c37fcf3dc89828f314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:51:1d:1e:05:dc:40:ce:0c:3b:ac:16:6c:
                    b4:f7:18:63:d4:4e:eb:24:a0:b6:55:38:a8:30:e4:
                    0b:19:af:8c:85:23:ca:47:0e:1d:21:38:ad:6a:da:
                    b7:12:2d:ab:a7:bb:a3:38:71:ad:b5:45:fb:06:56:
                    a7:f0:6c:83:37:1f:d4:ae:09:b2:a9:17:fa:7e:ce:
                    ca:d7:b0:60:65:65:86:3c:fa:98:d5:13:1a:72:03:
                    a9:f5:d7:33:2e:b9:e9:e5:56:7f:aa:65:52:25:b1:
                    ec:a6:b9:8c:75:71:d8:50:82:ed:d7:88:52:03:48:
                    43:5e:88:b1:5f:c2:2a:57:6d:65:09:33:06:e1:73:
                    e6:b0:91:94:d9:a3:f2:74:64:3a:88:f2:79:7b:88:
                    cd:91:30:fa:3c:92:a1:9e:26:30:ba:03:d8:11:16:
                    72:c7:81:bf:4a:52:6d:d1:15:c4:4d:3c:da:53:fa:
                    ee:fc:0b:f0:a0:2a:41:78:a0:5c:2e:46:21:99:1b:
                    5a:4a:91:c2:60:4b:40:1a:5a:fd:4f:fb:ed:5f:a3:
                    95:b4:30:1f:37:d2:40:c0:0a:df:c7:34:08:b2:1c:
                    61:f0:a6:72:fb:49:44:db:46:b7:ae:db:0d:00:e4:
                    16:71:f8:ba:8c:80:12:55:0e:77:e6:a0:96:0e:2a:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:26:CD:01:4F:0F:A6:7C:31:97:03:93:2F:1A:57:5D:D8:FB:33:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/74ccec03-f570-4a91-854b-d402c1570b40/6b3ffbd6c9ed992f221e43c37fcf3dc89828f314.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.148.0/22
                IPv6:
                  2803:a720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266757

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:e0:64:1c:ff:10:ce:77:2d:fe:3d:41:9c:88:ab:e9:44:
         b0:60:fe:7d:63:98:9b:2a:7e:db:26:0c:78:b6:46:3e:b9:29:
         34:83:29:32:6e:d6:6f:a6:dc:7e:bd:10:9b:a8:7c:1d:ab:56:
         2a:52:77:12:3c:57:5e:5a:77:ef:66:7b:92:65:81:58:50:3d:
         6a:5a:ac:5a:bd:d2:1a:72:7c:3a:49:dc:4a:33:67:e5:7d:ac:
         61:16:c1:4f:ef:8a:30:ad:78:57:4c:07:9d:00:40:a7:be:bc:
         fc:d5:40:77:7e:0f:28:e1:3f:c7:f0:18:a1:14:c6:03:d0:77:
         c0:bf:bb:bf:3a:1c:a0:a4:3c:b1:73:c0:f4:04:40:6f:4c:4d:
         70:1b:18:27:8e:07:bc:9a:c9:27:16:2d:49:e6:f6:db:88:33:
         f6:9e:3b:a5:6b:4b:6a:0e:4b:36:6d:cd:4e:54:ed:b0:bf:2e:
         18:ba:b2:9b:a7:61:c1:e0:a3:fc:4d:7b:e8:94:72:81:42:eb:
         e2:bb:15:f3:28:9e:c7:58:42:d5:75:76:d7:a7:43:cc:32:5b:
         f9:df:70:ac:65:c8:89:0b:89:95:c3:82:89:32:90:45:55:63:
         9f:b1:9f:aa:df:a7:ef:8b:2c:f5:66:c9:e7:70:94:4f:c3:49:
         71:da:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:31 2024 by rpki-client on console-ams.rpki-client.org