Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer
File:                     6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer (raw, json)
Hash identifier:          PoSfjuXNPMZAxZAAVDY3UtCOPlj/XkEtwZqKJS4wAWc=
Subject key identifier:   C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9CAAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6c6abe556edb1aa4b4b3686da974eefb141a89fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Jun 2021 15:27:11 +0000
Certificate not after:    Fri 14 Jun 2024 20:00:00 +0000
Subordinate resources:    IP: 181.191.220.0/22
                          IP: 2803:2020::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15321770 (0xe9caaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 15:27:11 2021 GMT
            Not After : Jun 14 20:00:00 2024 GMT
        Subject: CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:e5:04:26:1b:35:50:82:93:9b:c9:28:bf:
                    57:0d:db:ce:74:86:81:9c:77:71:b8:e3:5e:df:d0:
                    d4:92:76:5f:e3:d4:c7:54:a9:d5:c2:a8:c7:6c:a0:
                    32:69:c0:b6:30:6a:aa:f6:2d:65:4a:9e:91:7a:7a:
                    ea:f2:d5:92:d8:62:87:a8:a1:1c:21:52:56:f6:da:
                    38:5f:3b:5b:31:7a:3a:fd:27:23:1a:22:4c:a0:62:
                    60:b6:73:a2:54:1c:f8:a1:22:99:46:a4:65:bd:e1:
                    92:4b:71:c6:1e:03:5e:e3:7e:2f:77:54:ee:a1:35:
                    b8:5b:3f:fc:70:e0:25:f5:3b:b3:61:65:64:83:4c:
                    be:41:c3:fe:60:5b:6d:01:e6:b0:03:04:d2:27:fd:
                    fd:83:c6:ff:0e:79:6b:39:52:26:9e:44:44:46:a1:
                    d3:cb:25:8c:21:13:9f:de:26:2b:db:35:67:0e:a1:
                    e3:df:16:b4:6e:00:4d:26:57:4b:df:03:73:7d:e6:
                    00:e4:91:6d:a8:d0:16:e0:75:07:8d:c7:3e:9e:bc:
                    f4:b2:3f:9a:b8:b9:52:97:61:c2:03:0c:9a:e0:e3:
                    e7:5d:85:99:4c:f8:09:08:48:9b:0d:01:0c:0a:44:
                    36:3c:fa:9f:37:9d:65:7e:3c:f3:a4:98:89:01:8b:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6c6abe556edb1aa4b4b3686da974eefb141a89fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.220.0/22
                IPv6:
                  2803:2020::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:c1:35:7e:e7:64:c6:e2:68:39:5a:82:62:4c:ac:82:31:
         2a:1e:82:cc:31:ab:81:79:df:97:bd:b2:b8:72:66:3d:dc:c1:
         cf:3b:4a:eb:8e:3b:8c:ba:87:b5:11:a9:10:76:7b:e7:7f:07:
         49:73:e3:e9:44:f5:11:f4:aa:4e:15:25:b7:c5:a2:6e:bb:84:
         31:ad:dd:74:30:34:a4:53:a0:05:cb:e8:c2:c3:77:0a:98:07:
         7e:8a:ba:0b:9b:9e:a4:e2:75:e4:fc:1e:a5:2a:4a:ad:0e:d6:
         37:a9:37:16:4c:65:ef:6d:be:30:55:de:5c:57:6a:b7:e9:25:
         95:31:be:92:a1:b5:7d:d2:e7:2a:7b:8f:7b:37:20:39:9b:c1:
         b1:bf:ea:ae:4a:c9:b6:e8:0b:4a:3e:c3:ce:cc:7b:4f:a7:64:
         1e:7f:5c:e3:7b:c1:11:c5:31:b8:8d:bf:9d:b1:15:e5:cc:e2:
         3c:53:70:e1:08:42:a3:44:e3:f2:42:1c:99:cd:2a:a1:9a:3d:
         cf:cb:40:0c:2a:6b:a9:c0:0a:3b:db:e3:5c:84:d6:8f:e7:c7:
         0d:cb:96:98:52:46:ee:e4:60:0e:b7:01:eb:db:cf:a2:7f:37:
         e9:dc:60:e0:77:2b:1d:af:86:c7:1e:69:dd:3d:cc:2b:01:14:
         b4:3a:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:58:18 2024 by rpki-client on console-fra.rpki-client.org