Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
File:                     6f35480750f171363a97d0fff033a3b0d1b09a18.cer (raw, json)
Hash identifier:          Fl2Pl1T3z6p+UZ5ammJmL9FsWb6l2nDCIsJsPohPumY=
Subject key identifier:   79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6F6C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 05:55:23 +0000
Certificate not after:    Sun 28 Jul 2024 16:31:41 +0000
Subordinate resources:    AS: 272883
                          IP: 2803:5a90::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14087881 (0xd6f6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 05:55:23 2022 GMT
            Not After : Jul 28 16:31:41 2024 GMT
        Subject: CN=6f35480750f171363a97d0fff033a3b0d1b09a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:ba:01:cb:2a:1b:43:c3:70:f0:72:b3:b3:
                    ac:c2:e5:ac:4c:96:0e:5e:11:08:77:ba:36:ea:ae:
                    b5:ce:65:fb:f8:f2:ce:17:ae:47:8b:c4:fb:47:ad:
                    86:ef:02:03:30:1a:b4:29:d1:5d:fd:c0:de:68:d9:
                    b9:48:52:d5:2c:d4:ff:a5:6b:f5:98:9c:cd:a9:66:
                    f5:fa:bc:13:6a:51:d0:c4:42:a5:44:54:4d:ea:c3:
                    41:78:4a:db:39:11:09:d7:03:59:1f:15:1a:b2:7d:
                    50:03:02:5b:d6:2e:7f:d6:08:11:95:ec:f5:b8:e9:
                    a6:f6:bc:d8:a4:01:f6:ed:a5:76:72:a9:2e:2a:c7:
                    5f:64:82:2f:28:a2:89:12:c1:f3:13:59:96:ab:45:
                    89:79:6d:b4:37:aa:e3:44:73:97:ba:3e:27:10:22:
                    ad:e1:3a:d2:fc:e2:b6:0f:d5:b4:7f:f6:37:c5:a3:
                    3f:b2:2c:2c:c3:4e:24:a8:98:c2:86:ca:77:5d:33:
                    18:70:eb:1d:2e:d6:60:83:0d:4f:f8:8a:1a:e1:48:
                    66:c1:17:8f:82:68:88:88:7e:ed:a7:f0:49:c7:a9:
                    74:da:46:24:6a:ba:8b:e6:b5:89:52:11:86:2f:5d:
                    fc:a1:ed:17:14:35:e8:5b:47:20:10:0f:ce:e5:f7:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272883

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:47:0e:0f:b7:a1:08:ba:ba:b0:ae:93:d7:f4:cd:3f:0e:
         84:27:5d:d9:8d:b9:67:10:5e:9c:64:1b:7c:60:ac:75:5c:89:
         1e:72:c1:a0:3e:13:30:95:58:9a:f8:d0:db:ec:04:22:ed:81:
         b5:14:46:8f:bf:5d:b4:8d:e4:29:5f:de:2c:03:5d:55:7c:ff:
         56:b6:9b:50:4f:6e:c8:4b:d0:1e:a2:ab:19:f1:c0:dd:59:85:
         44:3f:e2:bb:6b:22:c4:f3:5c:b8:4a:b1:e4:22:bb:9e:d3:4b:
         70:6c:d5:51:03:61:50:59:49:da:ba:5d:b3:b2:ab:5f:4e:54:
         fc:9e:ed:07:90:1a:f6:a5:99:e9:52:24:9b:8a:33:10:16:86:
         3c:a7:93:77:06:68:f8:01:87:74:73:b3:bc:f1:da:3e:da:97:
         39:71:36:6f:6c:e7:de:b6:df:84:ad:88:ff:e2:e8:98:88:71:
         95:f4:41:e2:c1:af:46:6c:6f:2d:36:1c:10:2d:e5:94:d4:ac:
         0c:fe:0b:4d:cd:ed:99:7e:f7:d2:40:df:ce:9a:a2:7d:cb:47:
         4b:34:25:7a:5b:3a:28:70:51:d9:ba:c9:1f:4f:a7:9e:0e:70:
         e2:9e:3b:ab:05:ed:08:6b:a4:99:2f:5c:25:79:d4:26:a0:66:
         d6:90:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:28:28 2024 by rpki-client on console-ams.rpki-client.org