Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/735219299be31feced07dd9523bac5dd0d86f653.cer
File:                     735219299be31feced07dd9523bac5dd0d86f653.cer (raw, json)
Hash identifier:          zNvbwElbuKNU9PyFw7lnxiCgB01dRwat5SzQqZtgruc=
Subject key identifier:   A0:40:7E:C3:05:7E:2A:37:84:B5:6B:22:38:80:EB:21:22:78:0A:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFF972
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/735219299be31feced07dd9523bac5dd0d86f653.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Apr 2021 01:37:45 +0000
Certificate not after:    Mon 02 Dec 2024 16:09:09 +0000
Subordinate resources:    AS: 271962
                          IP: 45.231.32.0/22
                          IP: 2803:a320::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16775538 (0xfff972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 22 01:37:45 2021 GMT
            Not After : Dec  2 16:09:09 2024 GMT
        Subject: CN=735219299be31feced07dd9523bac5dd0d86f653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:c4:f9:f3:cb:31:f5:9d:bc:43:cc:ec:0a:
                    fa:5b:76:14:39:e8:9a:34:29:37:67:85:a2:47:fc:
                    97:6f:93:2a:f6:24:72:ab:fc:72:92:09:f9:60:a8:
                    c0:af:39:5b:49:74:42:e1:03:10:c3:4a:30:d6:30:
                    d8:84:f9:0a:e5:aa:2a:af:c4:86:82:5d:d7:95:b4:
                    86:f9:2e:21:2c:b7:76:39:ae:1d:47:6c:b1:5d:07:
                    f1:f8:ec:22:01:31:83:4a:0a:d7:91:4b:74:9b:6a:
                    ca:b3:6d:36:59:44:7f:14:70:1c:1c:6d:92:8c:87:
                    80:ec:d1:09:85:27:ba:82:aa:e0:e2:58:29:be:0e:
                    e7:f3:58:02:0b:0b:99:d6:8a:96:a7:4f:98:04:86:
                    8c:3c:05:2e:c5:51:f7:9b:03:69:a5:e8:17:5f:5f:
                    1a:25:b9:4d:d9:c4:70:b7:4d:a2:ef:21:f5:b9:27:
                    ba:13:f1:5b:65:6e:1f:3c:5d:6f:94:5f:a1:db:61:
                    13:e4:d1:f6:f7:03:73:1f:8c:6c:e6:e3:91:83:a6:
                    75:99:dc:02:90:aa:d8:1b:85:25:03:ea:32:10:9a:
                    29:9b:2e:3d:ac:a9:e7:59:3f:3b:db:dd:c6:22:fe:
                    4d:01:74:ac:38:d9:75:1d:e7:96:58:b6:20:f9:bc:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:7E:C3:05:7E:2A:37:84:B5:6B:22:38:80:EB:21:22:78:0A:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/735219299be31feced07dd9523bac5dd0d86f653.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.32.0/22
                IPv6:
                  2803:a320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271962

    Signature Algorithm: sha256WithRSAEncryption
         48:d6:76:e1:04:12:5d:a3:1f:64:83:2d:8d:4a:fe:93:d3:26:
         5f:53:2d:33:df:3d:8b:50:13:d7:19:8e:8f:02:e8:9d:28:d8:
         87:a5:f6:39:ad:ba:ad:de:37:be:d9:61:56:eb:43:8f:79:18:
         fd:cd:e9:f4:8e:e5:ef:32:fb:cb:8a:5a:07:1c:99:72:88:49:
         df:e4:a7:72:ce:ae:33:7c:40:b6:b8:cb:e5:79:85:c9:c9:fb:
         63:c1:38:f0:99:ed:0d:0d:8e:48:0e:57:7e:f7:fe:b4:bd:c2:
         3d:b2:dd:75:a3:c0:0d:99:83:b5:99:42:54:b1:ef:b5:a1:f7:
         cd:81:a6:ae:19:7f:ab:9b:eb:ba:ee:e1:b7:34:93:f6:e7:8e:
         ce:53:6b:13:96:97:7d:af:a2:a7:50:1b:88:ce:58:ad:d4:9e:
         c0:25:36:31:25:b2:0c:94:be:25:3b:a2:5e:a2:82:e3:2f:a4:
         01:d0:bd:60:97:61:a1:03:76:89:1c:34:cd:5d:74:7a:2f:7e:
         3d:4f:80:7c:ea:a9:9d:ad:e9:45:56:f9:ec:b2:d4:c3:c6:49:
         56:4e:9d:a5:68:58:7f:dc:ff:1a:36:c8:9d:47:17:aa:b9:14:
         39:d1:34:e6:6b:83:48:b3:ec:42:e4:f6:01:13:5a:61:15:97:
         03:e2:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:58:20 2024 by rpki-client on console-fra.rpki-client.org