Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b6f9d1c25d428d1f5230553b96774229a1f8e4a.cer
File:                     7b6f9d1c25d428d1f5230553b96774229a1f8e4a.cer (raw, json)
Hash identifier:          +MJSURC48XYnB8WehSAwEhv8nPR7FjmzUCm+EfhQFvQ=
Subject key identifier:   8B:E1:E4:A3:6A:65:41:7C:8E:CE:60:EF:51:71:AA:AB:32:E8:01:96
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109B5A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/7b6f9d1c25d428d1f5230553b96774229a1f8e4a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 14:52:19 +0000
Certificate not after:    Sun 09 Mar 2025 17:33:07 +0000
Subordinate resources:    AS: 272138
                          IP: 2803:e090::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17413542 (0x109b5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 14:52:19 2023 GMT
            Not After : Mar  9 17:33:07 2025 GMT
        Subject: CN=7b6f9d1c25d428d1f5230553b96774229a1f8e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:95:55:d9:1c:cf:bb:32:0a:4a:0d:f4:35:
                    66:90:a3:f4:01:a9:f0:a3:17:72:15:27:76:7f:1c:
                    36:8f:3d:6b:65:fa:8b:b1:24:02:cb:9d:f8:97:f0:
                    44:53:af:fc:f7:81:c6:f8:69:76:d1:8f:74:7f:b6:
                    d0:40:6d:2e:13:82:1d:bd:a8:4f:3d:87:71:31:f0:
                    e0:a8:7c:8e:5a:b7:aa:45:77:46:f8:f6:d4:e0:67:
                    5e:71:73:35:12:83:6b:bc:27:a5:1c:3f:9f:28:e6:
                    db:69:a0:ca:df:82:a5:56:1e:28:0f:60:2d:ea:03:
                    52:cf:86:e4:32:e5:3b:e9:ee:c1:31:d9:5d:8f:ee:
                    17:19:64:42:de:35:52:4a:04:c7:74:ac:96:d4:45:
                    ea:cd:92:57:dd:de:60:9f:34:a1:81:64:c3:dc:5f:
                    d7:e8:dc:37:44:3e:6c:50:0a:89:53:66:14:76:0b:
                    85:8e:83:fc:e4:7a:be:b1:91:aa:40:7a:d4:90:e3:
                    a1:ec:64:19:dd:3a:d9:43:8f:ce:14:5a:4a:b9:91:
                    da:d9:5d:f2:a4:85:2c:61:d0:3d:c8:4f:14:a0:7a:
                    74:df:41:14:3f:41:09:28:bc:7e:a4:8d:82:3c:ba:
                    9b:ec:9a:02:9b:f6:a7:00:59:56:d9:29:67:22:e8:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:E4:A3:6A:65:41:7C:8E:CE:60:EF:51:71:AA:AB:32:E8:01:96
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/7b6f9d1c25d428d1f5230553b96774229a1f8e4a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272138

    Signature Algorithm: sha256WithRSAEncryption
         01:81:7c:2d:ab:f6:b6:12:e1:07:f9:99:a6:97:e8:27:84:d4:
         74:10:d1:05:98:53:99:21:6b:d0:bf:1a:d6:f4:18:56:1d:51:
         c8:c2:15:ff:ce:2d:4a:8b:20:0b:ef:a5:a0:e7:10:c9:28:52:
         de:84:5b:e9:54:d7:4c:28:0e:0a:f1:8e:53:37:1a:40:d7:11:
         c1:c2:ea:f5:a4:e7:c7:96:30:d1:82:e6:f8:82:21:d3:c5:fa:
         27:20:ce:4a:65:b5:f0:8a:b0:8d:17:6d:05:a3:55:28:fa:b6:
         f7:20:ba:53:d8:76:7d:ff:40:bd:26:1e:d7:1a:1f:59:05:3f:
         7b:ed:3b:84:27:34:d9:09:ab:18:51:9f:b8:e4:fd:82:6b:de:
         6f:07:b5:c7:cb:fc:c5:90:a5:35:66:f6:1d:7c:da:da:bb:f3:
         7e:74:af:21:f5:d5:55:54:88:a1:b7:42:f3:de:6d:b3:19:9f:
         73:c9:df:84:31:91:f0:eb:d5:f6:f7:25:d1:2c:b0:db:1c:d7:
         65:ea:7a:6d:87:c2:d2:d0:c2:1e:3a:4d:5e:20:c3:ab:dc:d9:
         f0:d4:91:b3:64:0e:2f:18:94:95:80:91:19:91:2b:5c:8e:8b:
         59:72:7f:c0:d0:e7:1b:71:90:33:70:bb:e4:88:0c:34:f5:cc:
         4a:8f:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:28:32 2024 by rpki-client on console-ams.rpki-client.org