Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/745bea56b4863d7d9460b4d88954b7c05aa29dab.cer
File:                     745bea56b4863d7d9460b4d88954b7c05aa29dab.cer (raw, json)
Hash identifier:          5Jy166kvABHtRHWkvRgkJqlkD9m6P8U5H8Dp0lX59i0=
Subject key identifier:   0B:19:9C:8F:AF:67:F6:AE:B2:55:AA:5F:A7:73:BE:B6:84:34:40:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1DC5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5c218985-0c9e-447a-a456-9ebcd2628262/745bea56b4863d7d9460b4d88954b7c05aa29dab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5c218985-0c9e-447a-a456-9ebcd2628262/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Mar 2020 15:48:44 +0000
Certificate not after:    Wed 14 Aug 2024 21:49:00 +0000
Subordinate resources:    AS: 269892
                          IP: 143.202.88.0/22
                          IP: 2803:3e40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15850587 (0xf1dc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  9 15:48:44 2020 GMT
            Not After : Aug 14 21:49:00 2024 GMT
        Subject: CN=745bea56b4863d7d9460b4d88954b7c05aa29dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:d0:62:5f:95:b0:e3:20:18:13:7d:d1:2f:
                    0b:34:92:84:e8:91:cc:44:4d:b5:00:97:77:b3:6b:
                    7d:2c:c4:d4:17:0b:9f:80:d8:f5:90:6d:0c:a9:d0:
                    89:3e:7f:66:54:22:7d:cd:24:92:1a:e1:cb:80:61:
                    ad:3c:c1:49:d1:09:8b:27:34:fd:df:72:95:f8:91:
                    f6:a4:42:e5:77:e7:21:7a:fc:29:5f:14:a0:9e:85:
                    bd:70:e3:bf:28:e0:02:cb:15:80:d0:25:e2:a8:c1:
                    10:c5:53:3c:62:87:25:b3:8a:56:72:c9:db:8b:b3:
                    95:4e:20:6f:67:71:4d:90:87:eb:61:08:0c:90:08:
                    fa:f2:14:0b:46:31:ac:14:b7:62:bb:94:f4:91:24:
                    05:fc:91:79:c5:2d:a4:11:ab:55:13:c5:cf:e5:7b:
                    da:1e:f3:28:78:86:d5:54:55:73:40:00:86:59:09:
                    84:76:6a:f1:7a:a4:20:ad:29:65:ee:21:a3:c3:00:
                    98:fa:33:25:02:f0:fe:c7:9c:37:4d:b3:90:66:1f:
                    5c:ef:8f:5d:72:63:3a:b4:5c:d2:86:6c:7b:32:e5:
                    10:6c:86:90:26:48:11:45:95:0b:e0:11:6b:26:ce:
                    8a:1f:18:ef:d5:a4:ab:72:45:87:b8:82:9c:ad:77:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:9C:8F:AF:67:F6:AE:B2:55:AA:5F:A7:73:BE:B6:84:34:40:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5c218985-0c9e-447a-a456-9ebcd2628262/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5c218985-0c9e-447a-a456-9ebcd2628262/745bea56b4863d7d9460b4d88954b7c05aa29dab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.88.0/22
                IPv6:
                  2803:3e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269892

    Signature Algorithm: sha256WithRSAEncryption
         8f:d7:90:0c:35:f0:f0:cd:1e:03:c9:16:c2:24:8f:9b:9c:80:
         4c:4f:5c:2b:ac:5e:a7:fb:14:bb:18:92:20:3c:33:4f:29:e0:
         d2:65:0c:a8:ef:2f:be:da:86:36:89:6c:8e:6b:6f:c7:e9:a2:
         15:b3:a4:e2:67:97:c4:5d:ac:b5:f8:f4:7b:6e:86:8c:c5:d4:
         c8:60:fb:f3:c7:7c:aa:13:64:de:38:90:a1:d1:4d:72:7d:da:
         c0:71:51:00:f0:0d:51:a5:3a:5c:fd:6b:0d:9e:10:ee:8f:45:
         7e:38:ae:c6:59:7b:62:11:d8:24:d9:d0:d6:6f:d8:ee:a9:bd:
         0e:50:ce:e7:1d:bb:e6:ff:12:91:1e:19:c6:81:3d:d1:35:46:
         a0:4f:5e:00:de:68:3c:cc:28:59:2b:11:e9:34:b7:ff:36:b5:
         f3:27:be:f4:eb:07:63:11:4a:c5:56:10:7f:8a:35:f2:0f:26:
         52:6a:6e:f7:28:c0:97:ef:c3:78:90:9d:e4:de:0b:6c:9c:ee:
         d0:ec:09:a5:5c:e6:03:4c:ec:da:32:5d:80:df:fc:a4:9a:54:
         0a:69:d2:9f:c6:eb:bd:84:31:0c:09:a7:8d:bf:c9:1c:b5:58:
         e0:c6:9f:5c:8d:d4:a8:56:b1:15:60:11:e8:71:13:0c:70:0a:
         ae:99:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:02 2024 by rpki-client on console-ams.rpki-client.org