Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer
File:                     73d66d1924e1166622ad12a1caea078bb4879ad0.cer (raw, json)
Hash identifier:          FqNpAQrJ7cNykNIQjhvRvhZKSyL1SKRCdb43FLgGz/o=
Subject key identifier:   B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E666A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 19 Sep 2020 17:17:08 +0000
Certificate not after:    Fri 12 Jul 2024 16:41:54 +0000
Subordinate resources:    AS: 264771
                          IP: 168.196.156.0/22
                          IP: 2803:30c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15099560 (0xe666a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 17:17:08 2020 GMT
            Not After : Jul 12 16:41:54 2024 GMT
        Subject: CN=73d66d1924e1166622ad12a1caea078bb4879ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:e8:c5:27:ad:5e:9d:33:76:ce:7f:93:3f:
                    7f:30:ae:6f:3d:3f:d3:0b:c2:95:5a:88:0f:be:42:
                    f6:4c:08:cc:49:35:f6:ea:77:9c:aa:a5:a0:e0:f9:
                    d4:fa:58:96:97:ec:39:11:65:e6:9e:0e:a2:a5:ea:
                    06:47:a0:54:b7:90:4b:51:f8:66:12:45:72:5c:d8:
                    1e:cc:17:be:23:e0:1f:48:67:45:ab:6b:e7:ea:4d:
                    31:b6:33:13:36:2f:ea:f0:2e:71:df:0e:e0:58:ab:
                    a4:fd:27:a3:ea:5c:cb:fd:88:80:8c:9f:c7:e0:2e:
                    a2:5a:90:46:db:0f:e8:e9:c6:14:97:9a:61:cd:24:
                    f6:0f:d4:41:36:54:8d:f2:ec:b1:b7:1b:84:0d:b6:
                    3c:67:90:2b:cd:02:2a:d4:af:ce:38:0f:05:9b:8f:
                    ba:34:69:e6:25:a3:05:0b:e0:f6:73:28:a6:94:0e:
                    db:84:ac:ce:63:6b:d4:0a:aa:e4:58:7e:aa:d8:91:
                    69:bc:84:23:47:b5:0d:fe:b4:d5:cd:a9:21:b0:57:
                    85:6e:61:32:66:20:c8:4c:75:b0:ce:a6:2b:9d:4f:
                    d6:90:ed:f3:2e:43:e7:5d:f0:d5:be:8b:86:76:26:
                    d7:42:98:79:8e:41:ac:eb:7a:77:b4:ec:dc:b2:a5:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.156.0/22
                IPv6:
                  2803:30c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264771

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:ed:80:19:e7:bc:a8:41:27:52:d3:ce:6e:f9:59:82:d3:
         4e:a2:fe:81:08:26:b8:99:e3:ad:32:f6:88:48:79:29:55:fc:
         d8:0d:9f:3c:2a:44:57:29:e8:b4:6c:86:0f:8c:e3:61:dc:9c:
         d6:98:a5:96:7b:06:dc:36:6d:7b:61:5f:cb:d2:f2:2d:8a:eb:
         a7:12:d2:fc:d1:4d:ec:fa:fb:a4:cd:3a:b9:4a:e5:f1:c2:ed:
         82:ce:b8:d8:c0:68:c6:3d:51:3b:56:02:e2:f8:51:71:2e:a1:
         47:b3:ff:75:92:c3:11:36:27:f7:97:94:db:4b:37:58:e7:3b:
         9d:11:d5:cc:94:57:c9:38:63:7b:df:d7:ac:6f:ab:e7:ca:82:
         88:b3:56:9f:8d:ba:e3:d6:14:fa:2a:b9:a8:f7:df:cb:83:4a:
         67:f3:02:4e:71:68:86:39:85:f4:8a:6c:f2:89:70:b0:ac:16:
         ae:91:db:f1:e7:64:6d:11:82:4f:cb:59:1d:53:47:07:61:b4:
         54:97:2f:83:c9:8b:a2:5a:9e:0c:5a:b7:43:67:53:54:56:1f:
         8c:e3:a7:16:d3:a0:74:7b:bd:f5:c0:da:18:18:3e:1e:a4:d9:
         4b:40:a4:cb:90:be:e4:03:71:a0:4e:c6:b8:14:d9:15:55:51:
         fd:22:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:08 2024 by rpki-client on console-fra.rpki-client.org