Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88e65149963b042f7b215d5f327e64cfe5b1e2ab.cer
File:                     88e65149963b042f7b215d5f327e64cfe5b1e2ab.cer (raw, json)
Hash identifier:          pQRDlCnSVa5TAKEtZcFYE9buaDIYfJ8kh4enZI0D710=
Subject key identifier:   40:B2:33:A3:45:4C:B8:C3:BB:87:C6:46:33:B8:C4:55:A7:A4:6A:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101A322
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/88e65149963b042f7b215d5f327e64cfe5b1e2ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Apr 2020 03:37:28 +0000
Certificate not after:    Thu 19 Dec 2024 18:19:43 +0000
Subordinate resources:    AS: 269947
                          IP: 190.97.172.0/22
                          IP: 2803:bae0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16884514 (0x101a322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 03:37:28 2020 GMT
            Not After : Dec 19 18:19:43 2024 GMT
        Subject: CN=88e65149963b042f7b215d5f327e64cfe5b1e2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:69:6b:ad:9a:e4:04:ad:b4:b6:83:cd:55:
                    46:58:fd:b9:ea:12:d1:92:41:fa:a7:46:3f:39:c2:
                    33:f6:45:23:ed:3a:89:e3:6f:f4:ff:bf:19:da:e6:
                    50:a9:a6:2d:6c:0a:ee:af:ff:46:78:30:59:71:b1:
                    fa:5f:6a:de:17:5a:af:0f:ae:a4:e6:13:c6:e5:ee:
                    91:de:1b:fa:a2:46:78:d2:5f:fc:fa:8f:24:7e:e2:
                    06:3a:35:6b:23:91:9b:25:10:d2:6b:1d:e4:33:d0:
                    91:75:38:23:ac:49:67:ee:fd:8c:bb:bf:4d:ae:e9:
                    43:2a:e5:f3:cb:d9:b6:af:57:76:15:69:50:d1:bc:
                    28:5f:c7:d3:9e:64:d1:54:04:7a:79:e6:18:54:93:
                    87:58:bb:04:33:5f:bb:64:5a:34:a5:ce:ab:f9:79:
                    00:9e:f3:d7:ad:67:a0:2a:f5:05:55:93:b4:8b:c5:
                    c6:31:93:6a:41:cc:75:03:48:bd:fa:fd:c4:bb:24:
                    73:b0:44:25:23:a5:28:0e:ae:1a:bb:ee:6a:9b:3c:
                    2e:df:19:7d:b5:c8:dd:1c:9e:f5:df:4b:bc:3c:77:
                    ed:77:71:af:cd:06:4d:91:7a:ce:3d:70:52:b4:bf:
                    cb:e6:f0:43:bf:04:63:72:0f:23:ca:e0:cf:84:42:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:33:A3:45:4C:B8:C3:BB:87:C6:46:33:B8:C4:55:A7:A4:6A:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/88e65149963b042f7b215d5f327e64cfe5b1e2ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.172.0/22
                IPv6:
                  2803:bae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269947

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:6b:8a:4a:3a:0e:8b:49:04:29:c7:84:b8:0b:d8:96:41:
         03:cc:c5:b4:36:56:81:14:f9:6b:a0:ad:4b:d1:3c:6b:07:7a:
         04:b7:47:e4:9a:65:9f:99:81:a3:ea:80:5f:ff:e7:19:89:df:
         2f:1b:23:21:8a:31:64:a5:58:d9:12:e7:24:7c:2b:4c:96:4e:
         69:07:29:fb:10:57:72:54:3b:eb:e9:0b:b0:e8:a5:21:dc:ae:
         b4:d1:69:06:23:e9:8f:72:b7:92:5a:cb:56:77:60:b2:22:d6:
         44:9b:7e:3d:45:02:44:09:0a:6f:e4:5c:aa:41:19:d0:0a:04:
         41:0d:70:7f:e5:7b:82:51:08:8d:b4:f2:d5:a1:a5:7b:3f:6d:
         15:4b:9f:0d:cc:5e:a3:b2:95:53:fa:9e:d2:d1:6d:1e:91:50:
         db:07:fe:73:4d:e4:91:82:30:fd:1b:57:40:11:29:2e:12:28:
         2a:c7:53:68:40:bc:90:55:2f:70:88:22:2d:ca:6c:b6:aa:d6:
         e1:41:45:69:d7:db:f2:7f:b5:39:d3:e7:38:36:8a:b2:5f:01:
         aa:09:0a:13:ee:5f:d7:9c:0b:8c:54:24:ac:0e:98:59:4d:5e:
         bd:ad:6d:3e:1b:71:7f:57:29:4e:63:da:86:7e:63:00:f8:42:
         cd:7f:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:44 2024 by rpki-client on console-fra.rpki-client.org