Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e6d921545b03efad8b1304da74e6a1b2ab99bbb.cer
File:                     8e6d921545b03efad8b1304da74e6a1b2ab99bbb.cer (raw, json)
Hash identifier:          PTGcX7Lw1hPW0V2kpv5qBklrIcffcvGBvPEocgNwKEM=
Subject key identifier:   4E:7B:68:8F:D6:8D:86:EE:1D:A3:01:FA:32:88:14:93:6E:86:AA:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C6CAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/8e6d921545b03efad8b1304da74e6a1b2ab99bbb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 15:11:59 +0000
Certificate not after:    Tue 01 Apr 2025 16:58:01 +0000
Subordinate resources:    AS: 52512
                          IP: 45.7.228.0/22
                          IP: 2803:43c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17591471 (0x10c6caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 15:11:59 2023 GMT
            Not After : Apr  1 16:58:01 2025 GMT
        Subject: CN=8e6d921545b03efad8b1304da74e6a1b2ab99bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:0b:dd:aa:26:0c:5d:3f:ce:99:c0:4e:93:
                    93:9f:a6:57:01:8d:0d:df:22:f1:f7:6f:b4:f9:22:
                    8e:03:c8:04:3d:06:01:9c:9f:c1:28:bc:58:b4:fa:
                    df:08:12:fd:a2:41:70:95:65:1d:ee:f0:d5:53:b9:
                    d8:0c:11:13:c9:f1:30:52:c5:56:5e:23:01:f8:6a:
                    f5:ad:4d:ad:7e:37:17:c4:29:5f:e6:c9:90:03:d1:
                    83:b4:2b:e3:9c:d9:87:2b:7b:fa:00:79:78:b5:bc:
                    3e:97:0c:28:69:d0:ef:0c:44:77:5d:6a:35:c7:f7:
                    92:6f:b3:99:12:d1:ce:0a:34:a5:bf:06:c5:21:e6:
                    42:a6:9d:7e:72:69:5b:6a:fe:f3:7b:31:10:2e:ef:
                    b5:c9:30:bc:2e:04:35:93:c3:7c:a4:60:67:6b:91:
                    78:4a:7b:3a:1f:51:57:05:56:e2:78:f5:f0:b6:38:
                    57:df:b8:58:ce:75:ab:53:f2:fa:2e:64:cb:c2:01:
                    76:3d:2c:a7:fe:50:4a:b6:de:e6:37:64:e3:e2:9d:
                    70:60:eb:2d:ea:d9:b2:bf:bb:e5:3a:06:13:99:59:
                    43:98:c9:e7:4a:d7:7e:44:26:46:b2:7a:de:30:fe:
                    c9:56:27:8a:f4:76:a2:6f:5b:56:7f:29:db:61:74:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:68:8F:D6:8D:86:EE:1D:A3:01:FA:32:88:14:93:6E:86:AA:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/8e6d921545b03efad8b1304da74e6a1b2ab99bbb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.228.0/22
                IPv6:
                  2803:43c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52512

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:e1:df:6f:c6:89:f9:56:7b:b8:93:03:5b:aa:57:44:9d:
         f8:78:8d:9a:1f:fb:53:74:81:aa:a0:6b:73:6e:f5:1f:80:48:
         12:d7:23:d6:e0:87:1b:da:ae:54:bd:4b:39:1e:54:7d:29:b6:
         60:55:91:0b:8b:cb:b0:4f:9c:62:02:17:30:e8:94:a2:30:9d:
         43:c2:22:8e:2c:e9:a8:0f:68:b9:f4:07:f1:e1:9a:91:a8:61:
         8e:db:1a:69:41:40:c7:33:98:f9:d2:ab:91:38:3f:be:ef:f7:
         9d:53:0f:fb:12:5a:e1:f6:8b:b0:65:5a:b5:f5:93:0f:4a:c1:
         ac:a2:3e:89:18:11:10:64:33:db:34:95:28:5c:a8:a8:77:9b:
         d1:8d:a4:26:31:3d:06:11:09:c5:b0:5b:f3:d8:cb:98:3e:01:
         96:70:9a:6b:11:7c:a3:53:61:36:99:34:d1:41:06:d4:46:0d:
         eb:08:55:10:a3:15:af:4b:1d:a3:d9:b0:01:4d:5c:55:f1:ad:
         05:58:e5:ee:a0:16:84:d1:4a:ec:d0:5f:54:b0:5a:52:f1:21:
         48:71:d8:bf:66:ea:cc:d2:b8:d0:a7:ac:69:02:0b:68:1f:c0:
         8d:97:63:8f:2c:f7:27:7d:f3:b6:f5:a8:a1:3c:45:76:49:b2:
         2e:c2:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:10:53 2024 by rpki-client on console-fra.rpki-client.org