Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.cer
File:                     8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.cer (raw, json)
Hash identifier:          04L+UNpJa5FR4IScMlIKomcQ3aKbn1k6GJooV6di5SA=
Subject key identifier:   CA:A2:37:45:E3:C8:C6:97:4F:6A:67:C0:B7:6E:0E:3A:B0:69:C4:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A1AC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 May 2019 15:29:44 +0000
Certificate not after:    Thu 13 Mar 2025 14:39:52 +0000
Subordinate resources:    IP: 45.173.228.0/22
                          IP: 2803:5c60::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17439427 (0x10a1ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 14 15:29:44 2019 GMT
            Not After : Mar 13 14:39:52 2025 GMT
        Subject: CN=8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:51:b1:2c:3a:fe:12:30:6b:6a:9a:31:fc:
                    e4:aa:13:62:8c:d4:54:08:df:eb:12:e2:df:20:b8:
                    bb:81:13:54:d1:df:64:b4:9e:e2:f9:ed:1e:6b:eb:
                    d0:3c:f4:01:cb:9b:49:5b:dc:5b:13:86:62:91:b9:
                    55:d6:b5:a9:c4:a6:3e:ff:d0:fb:a2:65:af:28:42:
                    0b:02:3b:c2:7a:e4:ee:b3:d5:b1:8d:78:5a:e1:a6:
                    e9:2f:83:ff:1c:56:5c:19:ee:c6:56:95:34:f6:b9:
                    98:b0:51:45:b7:0d:19:83:6a:a9:4a:60:05:4e:3b:
                    83:a5:c7:89:fa:74:49:14:02:01:20:e5:d7:a0:6b:
                    44:57:ef:8a:09:bb:8e:93:5b:99:33:bb:70:c4:4e:
                    9c:a5:10:da:fa:d3:28:d7:b4:1f:cd:35:86:8e:fb:
                    e6:96:ce:ae:0c:cd:1c:19:85:de:77:92:5d:46:e7:
                    07:ed:32:ad:98:c1:a6:27:de:62:c6:ef:dc:2c:c5:
                    68:15:f5:73:ed:c9:cd:9e:b7:68:c2:b7:9c:1f:18:
                    a7:f2:aa:60:ca:18:37:c3:53:e4:de:f3:3f:28:e8:
                    13:f0:93:e9:13:02:14:e0:ec:22:d4:7e:72:cd:4d:
                    3f:9e:49:f6:84:7f:ca:db:14:40:f7:21:0f:85:60:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:37:45:E3:C8:C6:97:4F:6A:67:C0:B7:6E:0E:3A:B0:69:C4:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.228.0/22
                IPv6:
                  2803:5c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:42:2e:ff:cb:4d:6e:78:1d:85:57:22:cb:6f:0f:81:0b:
         d5:37:2f:21:11:25:b3:7f:51:18:80:c4:58:97:e6:31:9d:e1:
         5f:dd:00:1d:e4:36:2e:70:c3:44:21:c5:3d:a1:dc:bb:9d:dd:
         42:2a:c1:4d:6f:1b:71:a3:bd:35:f2:fe:fd:ff:5b:ac:78:f1:
         9f:89:a6:85:eb:e4:fc:1a:2a:ad:82:6e:06:78:39:c5:8c:b4:
         50:af:07:cb:39:3c:ce:f4:86:05:6f:44:85:2e:42:21:18:9a:
         fc:f9:bd:3f:e2:b8:fd:d1:0d:e4:25:fb:ee:e2:36:ed:6f:2e:
         d7:7b:ba:ee:6e:09:97:61:2e:e8:61:fd:90:3f:f1:8f:d6:f1:
         77:a2:91:e8:4f:db:70:5a:6d:ba:13:60:7a:4c:60:b9:3e:d9:
         e3:9b:7f:4e:03:ee:c1:86:57:db:47:e0:dc:de:4c:ea:99:79:
         b5:be:c6:65:07:89:21:22:aa:61:39:53:88:d9:b7:cd:07:16:
         6e:f9:ae:a4:c6:36:c0:e9:a7:63:3f:b3:f0:76:9a:72:0b:df:
         6e:13:db:65:d0:51:d5:37:c7:aa:ec:33:b1:3e:36:82:fc:0e:
         36:2f:ad:48:ed:59:27:52:dd:50:ca:ed:38:14:35:a4:3f:e2:
         77:a7:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:09 2024 by rpki-client on console-ams.rpki-client.org