Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/770e1abd110be430cfdaff1a4797b6c876329f89.cer
File:                     770e1abd110be430cfdaff1a4797b6c876329f89.cer (raw, json)
Hash identifier:          /3xsNsE/dbSU1lFMhyS8NF9lFqpr8ykMJWBneUWEnDY=
Subject key identifier:   1D:03:2A:0F:D9:9B:86:5B:86:15:8F:B1:8D:71:4E:25:80:DF:95:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7C191
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6927e76b-3c73-4bd0-a916-53e8583bb266/770e1abd110be430cfdaff1a4797b6c876329f89.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6927e76b-3c73-4bd0-a916-53e8583bb266/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Jul 2022 15:52:39 +0000
Certificate not after:    Wed 02 Oct 2024 16:20:22 +0000
Subordinate resources:    AS: 52300
                          IP: 190.110.176.0/21
                          IP: 2803:2ac0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16236945 (0xf7c191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 15:52:39 2022 GMT
            Not After : Oct  2 16:20:22 2024 GMT
        Subject: CN=770e1abd110be430cfdaff1a4797b6c876329f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:26:d7:3c:19:0b:4d:d1:cd:17:f3:e2:2b:a0:
                    94:0e:f1:dc:bb:99:bc:a2:e2:66:01:fa:ec:7e:bf:
                    8b:2a:69:a0:9c:cb:b2:94:a6:29:87:b9:1b:4e:40:
                    60:8a:83:1e:e5:85:09:c0:bd:47:04:d0:06:d2:0a:
                    9c:3d:e1:ba:dd:c0:cd:99:52:cc:33:d2:b8:00:d0:
                    fc:76:e4:7d:35:4c:5e:81:3d:a8:e7:2c:90:54:86:
                    ad:a0:9a:1d:38:00:85:b1:f4:20:09:e2:66:8f:f5:
                    32:66:db:ec:a6:87:97:a7:5f:bd:ff:f3:15:8f:c3:
                    81:2d:15:28:0e:24:7a:db:52:01:44:8b:42:f4:20:
                    f0:20:25:92:80:0f:c1:27:8e:b8:e0:1a:11:46:6d:
                    49:1e:f6:a0:db:f4:ec:ec:fd:b0:4e:59:3e:5d:3f:
                    c0:0c:a5:a7:98:ec:c0:de:2f:68:79:a3:e0:4a:90:
                    03:bd:a0:99:70:13:b7:fd:99:d2:8f:09:b8:20:a9:
                    81:ac:83:0a:29:ac:2d:fd:b4:1b:f3:e7:1c:e0:9d:
                    74:80:01:df:89:44:78:22:56:cb:ad:65:36:d8:d0:
                    06:ac:1e:b5:c2:87:95:d5:96:2d:63:4f:b3:ba:c5:
                    d4:13:1a:49:89:ac:4d:03:26:64:7b:49:2b:bb:ca:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:2A:0F:D9:9B:86:5B:86:15:8F:B1:8D:71:4E:25:80:DF:95:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6927e76b-3c73-4bd0-a916-53e8583bb266/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6927e76b-3c73-4bd0-a916-53e8583bb266/770e1abd110be430cfdaff1a4797b6c876329f89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.176.0/21
                IPv6:
                  2803:2ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52300

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:fb:b6:9e:e8:22:5c:81:40:91:d2:9a:7c:1c:01:27:6b:
         8b:ef:67:99:f0:7e:66:26:da:2e:a9:90:86:8b:19:22:6d:91:
         a2:e1:69:9f:a0:8c:a6:6c:c5:7e:09:76:ae:61:a7:ae:29:8b:
         61:b1:7e:76:d4:28:20:79:0d:55:61:05:34:c9:9c:cc:4c:bb:
         40:27:54:c7:95:60:bb:64:c4:c6:79:1e:a7:fb:a8:0d:04:28:
         88:f8:50:a2:23:9a:74:ab:c4:7d:76:b9:2d:d9:7f:34:83:73:
         2e:fe:e7:39:9e:69:72:69:8e:d6:be:3a:4e:6b:d8:57:2e:df:
         2f:bb:63:83:ef:ab:31:5f:98:e8:47:3a:9e:c6:82:c2:e1:d2:
         dc:75:3b:f5:84:a5:36:63:20:9b:4f:bf:9a:2b:e2:27:30:93:
         72:14:0d:7c:fc:d0:b8:f0:44:fb:95:07:88:25:72:57:17:e1:
         a6:fd:f0:34:44:86:50:8b:de:b8:45:5e:76:05:d5:92:f2:4c:
         6d:eb:8a:c5:60:41:cd:13:97:ba:69:dd:90:b9:5f:91:65:50:
         61:d3:33:5c:3a:a5:ef:69:b9:77:35:2f:e1:12:f0:3f:32:b9:
         61:08:58:36:26:b8:e7:19:e1:b3:f1:89:9c:bf:1e:b6:1f:3f:
         c5:ce:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:39 2024 by rpki-client on console-fra.rpki-client.org