Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76d90377efbc90b9ba21fd3765577bd78777c12d.cer
File:                     76d90377efbc90b9ba21fd3765577bd78777c12d.cer (raw, json)
Hash identifier:          EZxA9mF4C0EfYM4b7ex/EXxhSTn49eH4/E2NGmsCeSU=
Subject key identifier:   B0:E6:B7:21:B4:02:CF:1E:48:FF:EE:9B:71:C6:C9:4C:2E:68:B5:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC5F43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/76d90377efbc90b9ba21fd3765577bd78777c12d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 15:40:09 +0000
Certificate not after:    Mon 30 Sep 2024 22:25:17 +0000
Subordinate resources:    AS: 267736
                          IP: 45.165.154.0/23
                          IP: 45.167.127.0/24
                          IP: 2803:4da0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15490883 (0xec5f43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 15:40:09 2023 GMT
            Not After : Sep 30 22:25:17 2024 GMT
        Subject: CN=76d90377efbc90b9ba21fd3765577bd78777c12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:5f:ca:3a:e2:41:c7:c9:f4:b1:b9:b6:47:
                    a8:bf:bf:3a:a2:53:13:73:2d:e8:d5:32:f1:2f:16:
                    7b:86:1b:b5:f4:2f:f5:3e:df:6f:5f:4a:05:65:e6:
                    dd:39:a3:99:f0:7a:ff:b7:ff:05:e7:1b:d3:1c:13:
                    4f:56:bd:30:1e:a5:0a:3e:93:29:d3:ad:70:ec:19:
                    9a:fb:be:84:86:67:3d:dc:ee:96:df:67:e4:1f:08:
                    5d:4a:5a:ac:5f:9f:3c:ca:12:78:6e:99:d3:c1:50:
                    43:45:45:7a:7c:10:8d:3d:49:55:91:d6:14:c7:98:
                    de:04:92:06:c0:4e:ab:3b:86:2b:5f:e9:2f:de:69:
                    fd:47:79:f6:31:28:ad:7e:e0:30:89:a8:e7:d3:dd:
                    d2:95:5e:6f:97:e6:ec:81:09:ef:c6:e8:62:3f:8e:
                    23:7d:28:8f:5f:90:34:62:d9:1e:6d:25:f2:57:1e:
                    23:35:8d:48:96:6c:f2:fb:fd:0f:e3:f4:45:f0:24:
                    a3:0a:2e:a7:77:3e:0f:14:dd:b6:2e:9f:35:b5:fd:
                    6f:b7:76:04:79:50:59:e0:84:a4:36:9c:98:f6:c8:
                    38:8d:74:a6:7f:b2:ae:29:f8:08:15:ca:fc:58:ab:
                    c1:cc:45:40:94:de:56:91:d6:84:1d:85:d9:00:fa:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:B7:21:B4:02:CF:1E:48:FF:EE:9B:71:C6:C9:4C:2E:68:B5:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a562061e-c849-49b9-8336-fd77c8c33865/76d90377efbc90b9ba21fd3765577bd78777c12d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.154.0/23
                  45.167.127.0/24
                IPv6:
                  2803:4da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267736

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:2c:98:5b:4e:33:0c:0e:2f:2e:b4:03:29:9b:50:a2:0c:
         4c:ee:14:46:67:0e:df:8f:fe:37:d4:4e:70:f7:84:00:3b:8f:
         9e:b7:90:53:a0:dd:13:95:ac:44:85:57:c2:d0:26:22:ca:09:
         32:ab:c2:82:c7:5a:38:50:61:5b:59:18:00:c8:5e:7e:bf:6d:
         57:ee:c4:74:8c:1a:51:c0:ec:1a:bb:c6:4e:a1:5b:86:78:fd:
         14:b7:6b:bd:56:66:48:74:9f:53:2e:6c:37:19:a4:58:f7:92:
         81:ab:d5:bb:db:80:0f:a7:5d:2b:29:32:51:24:3b:12:36:e8:
         d4:72:d7:ee:ad:b3:ed:ed:b1:b5:19:a2:20:38:e9:d3:06:da:
         20:a4:0c:cd:dc:bf:79:50:68:cb:e3:ec:04:dd:0f:5e:0d:d8:
         ad:2b:f0:af:62:bf:76:ff:48:47:8e:63:b9:dc:d8:7a:76:95:
         07:47:dc:a4:eb:dd:63:3b:b8:36:91:21:54:40:45:05:77:d4:
         d2:6c:1e:36:9d:f2:0c:2d:3a:27:2c:16:50:f6:56:52:3f:79:
         77:8f:92:f5:dd:25:8f:de:64:7a:b6:25:45:dd:69:ca:03:2c:
         5b:44:e9:0d:20:15:47:b1:d0:05:e0:2d:c5:64:ec:53:2a:33:
         8f:d8:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:09 2024 by rpki-client on console-fra.rpki-client.org