Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b55909016c8b69ae8ecdd0392d92494bd6f2ace.cer
File:                     6b55909016c8b69ae8ecdd0392d92494bd6f2ace.cer (raw, json)
Hash identifier:          /OJ3PXnglFDsYhnI4WwazHLY1YdGYUto199cMTq5NWU=
Subject key identifier:   B5:5D:00:A9:8A:88:E2:37:45:43:3F:30:63:B7:A3:52:C6:86:54:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CE350
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fef7bc8e-331a-4dd5-9915-d887abdc7e44/6b55909016c8b69ae8ecdd0392d92494bd6f2ace.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fef7bc8e-331a-4dd5-9915-d887abdc7e44/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 22:22:27 +0000
Certificate not after:    Sat 05 Apr 2025 22:01:52 +0000
Subordinate resources:    AS: 28515
                          IP: 201.131.36.0/24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17621840 (0x10ce350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 22:22:27 2023 GMT
            Not After : Apr  5 22:01:52 2025 GMT
        Subject: CN=6b55909016c8b69ae8ecdd0392d92494bd6f2ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:3a:6a:67:ba:0c:9b:40:2b:39:e7:48:84:
                    01:ea:ab:a9:8a:c5:5b:f8:1a:04:a0:6c:69:ae:83:
                    6c:6e:04:22:e7:fe:f6:57:f8:19:a7:0d:b7:ae:1c:
                    a3:f3:1c:6a:9c:2e:09:a2:9b:e8:64:2c:09:20:f3:
                    34:61:43:c1:0c:c5:f0:24:13:92:c3:69:37:a3:89:
                    cd:be:3c:19:f7:a0:fc:aa:fe:f3:37:62:77:82:65:
                    3d:90:25:e7:fc:6c:34:bc:c7:c2:f5:25:eb:43:ea:
                    e8:12:45:63:ca:a2:c3:56:c2:63:03:a4:a1:4c:0f:
                    39:bc:aa:20:fb:7b:a9:4f:3e:c0:f3:d9:42:f6:0f:
                    42:66:1e:00:5b:ae:07:87:45:d7:4a:57:8f:5f:a1:
                    ff:25:d9:a1:49:6c:91:ea:c6:2b:2f:7d:d0:54:fa:
                    7c:f5:b0:5b:0d:cb:26:e2:7a:fe:38:6f:e8:0a:f0:
                    f4:23:82:22:27:78:28:c5:14:f3:cd:c8:e0:93:10:
                    83:16:99:64:45:40:43:2b:71:c9:d3:b0:98:6d:22:
                    08:88:f2:50:74:b3:23:e0:61:74:48:2b:a3:11:01:
                    4a:fc:28:8d:bb:ec:c4:23:67:6d:64:f4:bf:c4:42:
                    1d:e7:fd:4c:b1:22:8f:ed:dc:fe:90:07:79:3e:6e:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5D:00:A9:8A:88:E2:37:45:43:3F:30:63:B7:A3:52:C6:86:54:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fef7bc8e-331a-4dd5-9915-d887abdc7e44/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fef7bc8e-331a-4dd5-9915-d887abdc7e44/6b55909016c8b69ae8ecdd0392d92494bd6f2ace.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.36.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28515

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:20:c7:95:2a:c7:86:cf:47:0f:c1:de:31:e9:0b:cd:e4:
         a0:12:c1:8d:3b:b5:b3:22:04:4d:9e:90:fe:b2:2f:b4:cd:08:
         bb:0a:fe:aa:78:27:79:6c:7f:36:85:43:b7:06:1e:f3:0b:87:
         6b:b3:f1:ac:6f:34:a7:67:3c:18:c9:f6:02:2a:47:1d:ff:18:
         2d:73:bb:13:21:de:f3:be:e6:bb:65:b1:99:0b:53:50:f2:08:
         b5:87:7e:eb:f3:96:6b:9e:20:a4:95:a3:62:04:04:cc:0b:9d:
         86:c5:b0:7b:68:0b:fa:9a:cb:6a:4d:df:e0:19:a2:8c:08:20:
         e6:c2:7f:4c:76:3d:23:37:f2:62:81:1e:80:99:8f:81:b9:02:
         db:9d:65:b3:ce:f9:57:2e:9c:5e:38:3d:08:38:53:92:dc:94:
         20:40:14:dc:d1:2f:0c:6d:98:2f:09:0a:e6:03:8a:95:97:f6:
         a9:38:5a:9e:94:a1:3e:a1:35:8a:45:74:0b:41:37:81:06:e1:
         db:a3:7c:2f:bc:42:bf:e7:70:57:55:fd:d0:1e:f3:f8:49:d5:
         09:e0:65:b0:3e:86:1d:10:5b:c6:4d:f9:21:61:59:ef:4e:4a:
         60:54:98:f3:1b:44:29:31:eb:00:1b:05:40:03:df:1d:d3:8d:
         91:79:3b:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:06 2024 by rpki-client on console-fra.rpki-client.org