Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/711fc8dc4691872f5e628253f3f086f010538c17.cer
File:                     711fc8dc4691872f5e628253f3f086f010538c17.cer (raw, json)
Hash identifier:          +y+uxvMsTH/sv5kcOCihkP01xZDmab68vycNWvFxZQM=
Subject key identifier:   35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF25AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/711fc8dc4691872f5e628253f3f086f010538c17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Dec 2020 14:03:50 +0000
Certificate not after:    Thu 28 Nov 2024 19:41:07 +0000
Subordinate resources:    IP: 2801:12a::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16721322 (0xff25aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  9 14:03:50 2020 GMT
            Not After : Nov 28 19:41:07 2024 GMT
        Subject: CN=711fc8dc4691872f5e628253f3f086f010538c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:74:30:74:e9:22:b3:02:e4:4f:1c:20:92:
                    84:48:15:7a:16:e2:8d:56:76:bd:60:d8:ba:a3:ad:
                    e0:b8:87:db:8e:96:13:59:a3:97:bb:c5:db:8d:18:
                    cd:fb:42:90:68:49:68:f3:46:5c:4a:27:29:cd:d4:
                    ef:69:f4:7d:e5:51:5a:b4:b2:30:20:a6:30:c1:4c:
                    82:c9:63:dd:41:ef:03:ff:0b:4a:92:c0:e5:92:44:
                    df:16:ee:79:7c:85:df:08:b1:07:7a:b5:c7:67:95:
                    71:a2:87:f1:46:75:85:39:d4:d6:34:bd:7a:52:50:
                    2f:a3:ba:eb:27:03:05:b9:96:9e:90:63:4b:e7:20:
                    ca:ee:8d:34:55:e5:a5:39:2f:f0:1c:90:b7:0c:4a:
                    19:48:fd:73:0f:84:4d:18:bd:f7:8b:d1:0a:9e:b5:
                    c5:dc:82:3c:93:52:8a:b8:11:bd:5e:11:e4:4a:d7:
                    e7:6b:b8:e5:6b:ab:5f:82:48:ff:78:97:4d:b4:4a:
                    28:d1:f3:a6:fd:5f:0f:74:fc:d4:bb:4a:46:05:5d:
                    ef:a2:b0:1c:e2:0f:5b:7b:26:73:b6:f1:f7:7d:b1:
                    4e:74:52:18:14:47:17:c5:8c:22:08:6f:67:a2:c1:
                    75:52:69:1c:1d:03:82:bf:cf:af:e5:91:ba:f3:b2:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/711fc8dc4691872f5e628253f3f086f010538c17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12a::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:00:2c:3e:f4:f2:fe:6e:18:76:8b:9c:e7:5e:60:7e:0e:
         e3:45:5a:14:72:94:fa:38:23:23:82:71:e2:ea:f3:7b:53:b3:
         b5:6b:5a:05:26:f2:55:80:06:0c:df:a1:ac:9e:9f:71:9f:05:
         4b:f7:eb:b0:07:c8:81:ae:de:9a:a4:40:ee:3b:67:eb:57:6f:
         ff:d7:4a:ec:79:bb:ab:4c:d9:a5:20:bf:ac:ae:0a:c8:54:f8:
         18:94:c4:52:6a:cd:61:9b:d1:c7:d6:a5:24:22:0b:6e:c3:5a:
         6a:1e:bc:38:c9:82:8c:52:bc:85:1f:68:7f:b9:5d:e2:cf:2d:
         58:d1:dd:4f:b9:83:c5:0e:11:9b:98:51:95:67:da:59:40:2d:
         db:c8:55:be:4f:15:0f:bd:ac:c7:11:ad:49:7e:04:95:08:53:
         43:75:8f:37:a3:47:97:dc:00:da:29:33:2a:63:fa:64:fe:7b:
         9e:24:22:5c:44:4d:04:9a:57:d3:b5:bb:c3:b1:55:31:e7:e1:
         05:10:ab:92:1c:ca:9e:04:bd:2e:9b:dd:4c:68:7e:50:10:02:
         d8:c3:43:ea:e3:20:1b:03:4e:40:bf:a7:d5:c1:56:98:d5:17:
         4a:7a:43:ab:dd:73:b5:f0:d6:75:98:c8:82:1f:99:4e:94:66:
         df:ac:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:02 2024 by rpki-client on console-ams.rpki-client.org