Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d02586442e6bcef08f18170297faf76439ff22f.cer
File:                     7d02586442e6bcef08f18170297faf76439ff22f.cer (raw, json)
Hash identifier:          R7RvHvC/dW2pbPRi0dJkQT3Jukg3NXdP3VnEpwhT/fI=
Subject key identifier:   83:79:42:86:60:49:BE:B8:81:9D:A9:2D:8B:20:C3:D9:F1:CD:AE:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F42A4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/7d02586442e6bcef08f18170297faf76439ff22f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Oct 2021 13:12:06 +0000
Certificate not after:    Fri 06 Sep 2024 19:53:31 +0000
Subordinate resources:    AS: 265866
                          IP: 45.226.224.0/22
                          IP: 2803:d620::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16001614 (0xf42a4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 13:12:06 2021 GMT
            Not After : Sep  6 19:53:31 2024 GMT
        Subject: CN=7d02586442e6bcef08f18170297faf76439ff22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:05:b1:d9:c8:37:7c:8e:fd:bc:9a:46:18:
                    15:d9:a3:b4:85:52:08:ac:78:c1:d3:6a:55:a4:03:
                    49:29:72:f4:c6:32:2b:17:a8:a1:bb:b0:1c:7c:43:
                    3b:92:b0:4a:d6:c2:99:39:0c:bf:7f:b1:15:c7:73:
                    4d:60:f7:92:67:64:6f:95:62:92:98:f4:f2:96:c4:
                    2b:06:29:6d:dc:10:1b:01:d5:de:bd:be:1b:ec:b2:
                    90:81:31:07:65:98:da:8b:d7:9b:6c:39:ce:7d:56:
                    73:2d:ce:0b:19:26:de:fc:a5:45:ac:31:a9:6b:f3:
                    c4:8b:a3:b5:99:e3:97:69:04:f5:59:f5:ff:7f:ae:
                    8f:b3:df:89:80:a5:d0:54:02:81:cb:5b:50:fe:46:
                    75:33:ca:54:37:ed:70:b8:a6:bf:f6:ab:7a:bd:81:
                    89:90:d8:ff:ee:df:11:a5:b2:28:b8:03:7d:f4:de:
                    92:7e:b3:54:64:af:fd:b0:07:86:63:79:3c:cb:fe:
                    c0:86:83:2f:8f:9a:f5:80:e1:ad:0e:e1:1b:b7:b0:
                    f6:f3:4e:f7:01:5b:12:80:4a:ed:da:1f:05:41:fc:
                    31:48:df:d8:da:26:5f:74:50:52:85:c6:87:31:54:
                    31:e5:08:da:d9:84:41:8d:d6:b0:41:a9:bf:2a:f8:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:79:42:86:60:49:BE:B8:81:9D:A9:2D:8B:20:C3:D9:F1:CD:AE:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/7d02586442e6bcef08f18170297faf76439ff22f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.224.0/22
                IPv6:
                  2803:d620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265866

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:6a:9b:14:5c:d2:b7:40:7b:cd:d5:b6:b8:7b:bb:8b:03:
         7b:18:60:91:d0:14:28:45:8c:2c:00:1b:06:e1:91:8f:44:c5:
         db:48:44:01:88:0f:58:0e:41:4d:65:89:67:aa:99:ea:22:20:
         83:16:49:70:82:e3:de:36:e6:2e:7f:93:7c:a8:f4:47:17:1d:
         ec:47:8d:f1:f6:4c:6e:fa:82:c1:a5:fe:4f:8c:33:70:0a:7b:
         58:0e:5e:90:da:9b:e2:97:c2:be:6f:49:b7:e4:ca:e5:87:76:
         de:7a:74:db:88:04:fe:c5:7a:72:d4:d4:f2:3a:34:dd:81:fe:
         2a:ed:5e:db:bc:33:63:b8:aa:38:c3:17:8f:48:5f:01:89:a6:
         60:8c:89:84:ab:7d:6a:43:1d:e4:26:cc:eb:11:6b:01:72:21:
         7c:d3:dd:37:60:42:ec:63:cf:79:77:dc:18:68:09:1e:1e:ee:
         0e:59:8b:45:aa:31:f5:64:c8:8b:a8:a6:60:70:ed:fa:af:56:
         16:1d:a8:21:ce:4f:c8:e1:5a:09:c4:b7:68:ce:9c:90:84:d2:
         94:9e:b0:22:eb:28:32:45:af:e8:5c:11:1b:b8:05:60:78:e7:
         32:d3:f9:da:4a:ad:c8:42:52:9e:6b:46:aa:89:71:73:01:cf:
         ce:30:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:13:34 2024 by rpki-client on console-ams.rpki-client.org