Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/726fc713f70013fc80d9b11b79678747707d332f.cer
File:                     726fc713f70013fc80d9b11b79678747707d332f.cer (raw, json)
Hash identifier:          JKobiBte0KxcSNtJsEwqY2RRQuFOGAzAMe8AmFPhvEc=
Subject key identifier:   91:EC:04:B6:89:B3:82:A7:27:DB:F5:71:4B:29:78:D1:E0:EA:A0:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E69F24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/161f4cfd-895b-45ad-94d7-6641598612eb/726fc713f70013fc80d9b11b79678747707d332f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/161f4cfd-895b-45ad-94d7-6641598612eb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 22:02:44 +0000
Certificate not after:    Sun 16 Feb 2025 06:00:00 +0000
Subordinate resources:    AS: 52460
                          IP: 179.0.2.0/23
                          IP: 179.0.8.0/24
                          IP: 200.10.211.0/24
                          IP: 2801:1a:8000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15114020 (0xe69f24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 22:02:44 2023 GMT
            Not After : Feb 16 06:00:00 2025 GMT
        Subject: CN=726fc713f70013fc80d9b11b79678747707d332f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:23:df:fe:64:9d:8a:23:24:8e:52:49:ed:
                    91:66:66:29:98:81:54:d2:31:1a:03:ac:78:a5:d2:
                    e6:c6:b4:00:4b:d2:94:5a:5d:2d:d8:f0:9d:b8:13:
                    97:13:e3:c3:20:6c:ff:12:5a:c5:58:54:e9:d8:d9:
                    60:04:f1:0f:e5:b0:6b:2b:32:0b:54:58:fa:36:a9:
                    87:60:cf:2d:d7:b7:99:7f:b2:66:cb:11:09:6b:24:
                    1b:c1:24:09:7b:bd:25:59:72:57:95:f0:50:ad:90:
                    65:79:73:40:95:63:05:dc:9d:be:60:96:4a:84:61:
                    30:20:5b:89:d1:c0:c2:cc:85:0d:56:ae:6e:10:d1:
                    d4:ff:9e:9f:6a:a4:f1:b1:8c:2a:12:1a:76:41:1c:
                    f9:88:16:42:b9:89:fa:f7:54:eb:f5:30:db:14:12:
                    bf:58:cc:16:51:9e:95:6b:0d:f0:40:79:4a:fb:53:
                    a9:0d:c1:34:67:06:60:d5:83:b8:51:8f:4c:3c:67:
                    95:3a:fb:3f:e3:d4:ce:a4:c7:1b:6d:c3:13:60:fe:
                    5e:42:e7:ec:e3:b3:0c:c5:8c:dd:ef:27:84:5b:f8:
                    7b:f4:55:ad:ec:09:0b:7e:ca:5f:e1:7f:26:07:2f:
                    26:c1:13:ec:7e:4b:1b:17:03:cc:2b:e0:4a:20:b9:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EC:04:B6:89:B3:82:A7:27:DB:F5:71:4B:29:78:D1:E0:EA:A0:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/161f4cfd-895b-45ad-94d7-6641598612eb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/161f4cfd-895b-45ad-94d7-6641598612eb/726fc713f70013fc80d9b11b79678747707d332f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.2.0/23
                  179.0.8.0/24
                  200.10.211.0/24
                IPv6:
                  2801:1a:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52460

    Signature Algorithm: sha256WithRSAEncryption
         06:44:07:92:ea:4e:84:88:aa:eb:08:31:94:53:91:b5:2a:7a:
         48:ed:49:08:e5:da:23:d8:6f:ca:85:bb:f9:f7:df:a4:52:35:
         c6:63:56:7f:91:1b:c7:2c:a8:19:e9:a3:78:bc:e8:d1:91:fb:
         84:5f:f6:45:e8:ab:fe:d4:a2:24:02:39:90:2a:00:7f:c1:1e:
         69:10:95:c3:68:e0:6c:20:60:3b:ec:89:f6:e1:75:f2:30:33:
         14:7d:78:43:0a:93:a1:34:17:17:d9:5c:11:07:e2:90:74:ac:
         e8:a9:7e:14:ff:4f:a8:8c:71:f7:9b:45:07:b8:f4:02:c7:d3:
         ae:29:43:55:16:1a:e5:59:22:d3:64:74:79:99:90:be:a7:e5:
         3f:1d:16:12:d9:6c:aa:6b:aa:b8:81:a5:18:25:1d:9c:87:d8:
         76:d9:2d:45:c0:e7:e2:d8:71:ed:ad:21:4d:f4:97:8b:5c:0e:
         4b:86:73:50:cb:2d:08:18:08:50:e4:27:d6:2b:25:9f:44:e2:
         50:9b:9d:11:75:a5:f2:45:6f:23:1d:cd:a0:20:61:26:41:a3:
         c4:5c:38:b6:79:68:0f:36:18:66:dd:9a:eb:3c:db:fe:89:57:
         45:c5:58:40:69:21:4f:da:09:38:d4:ab:b2:e4:7c:ce:ef:a3:
         cd:71:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:02 2024 by rpki-client on console-ams.rpki-client.org