Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78d6bd718ca23c4856aac580306ef0a91b79134c.cer
File:                     78d6bd718ca23c4856aac580306ef0a91b79134c.cer (raw, json)
Hash identifier:          tQ2oQFgNWkNpW4X46gGUSVBM+4GCGM4qb3druj7LxQA=
Subject key identifier:   47:56:67:24:F2:AA:5C:4F:A4:0F:DC:6F:3E:BE:B1:16:12:35:7F:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6D82A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a8115179-3830-45e1-b2dc-cbe53a14ffef/78d6bd718ca23c4856aac580306ef0a91b79134c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a8115179-3830-45e1-b2dc-cbe53a14ffef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 25 Aug 2019 17:31:46 +0000
Certificate not after:    Thu 23 May 2024 22:23:52 +0000
Subordinate resources:    AS: 269729
                          IP: 45.181.84.0/22
                          IP: 2803:9160::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15128618 (0xe6d82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 25 17:31:46 2019 GMT
            Not After : May 23 22:23:52 2024 GMT
        Subject: CN=78d6bd718ca23c4856aac580306ef0a91b79134c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:60:dc:5e:34:e2:37:63:16:30:ee:70:89:
                    fe:69:a6:09:76:20:67:14:29:d9:cd:b3:df:b4:87:
                    18:9a:e2:ac:de:c3:74:ea:45:47:42:75:df:52:bc:
                    d1:a7:81:d4:74:25:3c:be:73:ef:01:18:6d:6c:f7:
                    3c:e6:33:bb:15:a3:b7:90:79:db:c2:f7:b3:69:2b:
                    c4:6b:07:7c:c3:00:d6:e3:b5:6a:33:b7:a1:0e:19:
                    44:29:5c:76:68:50:c3:59:f5:41:a5:0c:1c:88:e2:
                    2c:7d:f7:7a:ef:da:2b:ec:81:c2:12:85:63:23:6d:
                    3b:c1:55:85:93:74:e1:90:5a:08:1f:78:34:00:e3:
                    5d:26:42:23:46:77:b8:6e:f4:8c:41:6c:39:3e:dc:
                    54:fc:21:8d:12:17:2c:b8:af:25:e4:b5:55:e5:7d:
                    bc:d9:54:81:9b:75:6a:c7:20:0d:ed:f5:c6:4e:96:
                    28:b6:0e:c1:93:98:56:25:87:f5:84:7a:f9:c2:ee:
                    b0:49:81:d0:b4:71:c6:ee:93:0e:ae:61:89:d3:c3:
                    e1:2c:22:1e:34:90:f7:c6:17:ac:1d:d7:d8:c6:b1:
                    67:bc:d4:a2:6a:5d:55:5b:7e:d1:c1:76:8e:71:7b:
                    4f:4a:a9:fc:cd:60:3b:25:a5:09:f3:b4:f7:f1:17:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:56:67:24:F2:AA:5C:4F:A4:0F:DC:6F:3E:BE:B1:16:12:35:7F:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a8115179-3830-45e1-b2dc-cbe53a14ffef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a8115179-3830-45e1-b2dc-cbe53a14ffef/78d6bd718ca23c4856aac580306ef0a91b79134c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.84.0/22
                IPv6:
                  2803:9160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269729

    Signature Algorithm: sha256WithRSAEncryption
         23:f4:3a:db:53:4f:7f:50:0e:c1:5a:f7:56:f2:38:c7:8a:f6:
         45:53:b8:cb:13:8c:71:ee:4d:56:2c:72:45:63:07:23:79:8c:
         3c:d6:06:59:18:d5:1d:93:fb:3c:68:56:90:b3:1c:44:eb:28:
         a5:b7:2c:49:1d:28:9d:ed:f4:d0:5e:28:a0:32:cc:4e:3b:d7:
         36:80:9a:60:17:6b:3b:c7:f6:fa:ee:7b:a9:49:7d:ee:8e:aa:
         37:eb:f6:5b:4c:56:86:43:82:92:99:56:16:29:04:81:93:54:
         84:0e:8d:11:40:ed:f7:8c:af:22:80:1f:89:0b:3b:67:42:64:
         08:51:67:79:a9:bd:2a:8a:59:5c:8e:dd:61:52:81:df:6e:25:
         18:ba:57:49:d4:2e:09:29:90:37:f2:98:4f:58:71:52:8d:bf:
         0f:2a:81:f3:e9:1c:df:bf:60:44:cd:54:f3:92:fe:32:5f:12:
         9e:b5:22:31:c7:97:9b:f5:cf:9c:9e:4c:3a:07:90:4e:fb:b0:
         a3:ef:f1:af:81:b7:bd:19:fd:94:d6:13:c1:c3:5e:aa:1f:18:
         30:7f:9b:2e:77:35:83:0d:af:00:50:de:7a:e3:98:92:46:f4:
         a6:5e:c6:a1:da:ee:10:b9:54:12:8b:61:37:df:4b:37:ab:d3:
         47:13:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:04 2024 by rpki-client on console-ams.rpki-client.org