Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/727db5d1954e4a503a874fd6f3f5a48d88a59d59.cer
File:                     727db5d1954e4a503a874fd6f3f5a48d88a59d59.cer (raw, json)
Hash identifier:          eVx3QCD4O/rR09klqA6VfUc3SyD4ENPk+KeF+HDJQQ0=
Subject key identifier:   E7:6B:76:2D:B2:9E:C2:82:FC:6C:97:F2:D4:BB:32:6C:CE:26:E9:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE443D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/727db5d1954e4a503a874fd6f3f5a48d88a59d59.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Jan 2021 12:48:03 +0000
Certificate not after:    Tue 26 Nov 2024 15:34:50 +0000
Subordinate resources:    AS: 271851
                          IP: 138.117.168.0/22
                          IP: 2803:c410::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16663613 (0xfe443d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 27 12:48:03 2021 GMT
            Not After : Nov 26 15:34:50 2024 GMT
        Subject: CN=727db5d1954e4a503a874fd6f3f5a48d88a59d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:31:45:45:b6:29:b3:66:b4:31:2b:ab:52:
                    c1:7c:78:e4:cc:6a:94:42:b2:5f:83:ce:c5:ec:f5:
                    ba:b1:b9:fe:00:94:42:07:af:d4:60:d0:d6:97:e6:
                    a6:0e:e8:0f:e7:b8:c6:60:f4:fd:fb:1d:07:25:d7:
                    c2:bd:8f:99:b2:db:42:55:65:31:24:bf:0e:42:7f:
                    2e:ce:87:d2:5e:53:76:49:b0:c0:46:cb:21:37:57:
                    96:31:08:7a:dc:b8:20:db:6b:64:2b:b5:3b:02:de:
                    22:7e:d0:1f:e7:5b:d2:7a:5a:e8:42:e0:84:86:d3:
                    82:9a:83:68:83:e8:4a:92:4a:eb:d7:97:e6:54:45:
                    b5:f2:37:b2:71:31:f4:8b:14:78:bf:ee:c7:f8:bb:
                    4d:3a:c1:9d:80:df:71:dd:e8:39:6f:19:30:78:5d:
                    ea:f0:fe:15:a6:e4:82:57:89:f7:99:9d:af:6f:58:
                    d1:3b:da:ce:2f:18:bd:be:8a:df:42:43:ab:2b:99:
                    16:64:cb:91:70:d0:0a:99:a4:bc:3f:4e:c4:67:96:
                    fc:91:32:9f:c0:c1:b6:ef:2f:6d:5f:fb:74:64:92:
                    bb:9e:03:55:47:62:df:e8:ff:f8:2b:d7:93:2c:a1:
                    34:fa:9b:aa:bd:4f:f6:ee:b3:1c:56:ca:49:3a:60:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:76:2D:B2:9E:C2:82:FC:6C:97:F2:D4:BB:32:6C:CE:26:E9:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bd3172-ee2d-4fd3-b8be-fc73da802a8d/727db5d1954e4a503a874fd6f3f5a48d88a59d59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.168.0/22
                IPv6:
                  2803:c410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271851

    Signature Algorithm: sha256WithRSAEncryption
         6c:c3:1a:9c:5b:de:cb:a4:b9:95:4f:30:aa:f1:77:fd:62:7a:
         f4:81:6c:3b:69:03:5a:6c:e1:a1:b7:54:01:66:2b:3d:54:93:
         d2:0f:58:69:25:6e:bf:37:03:5c:57:57:c0:aa:29:27:d2:d4:
         c5:3a:9d:e6:14:f2:13:f8:ea:0b:cb:1b:37:11:b5:ff:aa:e0:
         e5:f0:f4:69:a7:b7:6c:1c:34:15:55:ac:b3:e8:0d:05:e5:0d:
         d0:fd:2a:9f:9c:f4:e3:18:6a:3e:fe:3a:3b:b2:e7:d5:20:be:
         f8:96:9c:93:3e:f6:c5:98:73:cc:2c:9f:47:4c:17:c8:9f:d9:
         55:0d:28:96:a9:35:16:04:99:5e:56:65:c6:2a:48:a3:f1:8e:
         bc:7e:79:ac:f1:fb:a8:46:8b:ec:6b:30:8a:38:af:b7:ab:4f:
         22:f4:c2:b4:2c:f2:20:86:25:e1:ee:48:af:6e:ae:8f:d4:db:
         65:a7:f5:a8:3a:25:81:f9:e4:6a:e9:83:c1:dd:21:d7:a4:e6:
         6f:01:fa:a3:75:8c:d0:d8:c7:28:ae:18:1a:60:b9:f3:45:b6:
         14:35:f2:fe:69:b2:a2:2c:a5:3c:65:ff:a8:ef:41:41:d5:03:
         8e:21:aa:04:4e:e3:1e:17:49:d2:12:c3:15:90:21:32:f3:a6:
         41:22:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:39:37 2024 by rpki-client on console-fra.rpki-client.org