Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
File:                     8e9cf41123ed6894a352817e4249195f52cfe85e.cer (raw, json)
Hash identifier:          qtbe7bcUoKXI9oxBQOo3wJ9Law57luipBC62yyvfYhQ=
Subject key identifier:   B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01069963
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Sep 2021 15:22:20 +0000
Certificate not after:    Tue 11 Feb 2025 14:48:47 +0000
Subordinate resources:    AS: 266769
                          IP: 45.234.32.0/22
                          IP: 2803:2f20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17209699 (0x1069963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 15:22:20 2021 GMT
            Not After : Feb 11 14:48:47 2025 GMT
        Subject: CN=8e9cf41123ed6894a352817e4249195f52cfe85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:7f:a9:35:65:2b:1c:29:f0:82:ae:6e:dd:
                    1c:5d:de:08:0c:ca:71:36:4e:07:c4:d8:99:56:f0:
                    84:69:f9:8f:13:85:cb:cb:63:00:7f:3b:9d:eb:f2:
                    7e:6f:2b:ad:15:af:d7:ad:e8:0b:b8:cc:80:a1:d9:
                    c1:e5:30:46:73:2b:a3:c8:21:82:85:d5:c7:a7:5d:
                    29:7a:4e:e3:d2:ba:ed:25:b7:42:25:20:a2:56:f3:
                    60:a8:14:40:48:29:7d:fe:53:e1:48:ff:62:1e:2c:
                    a9:ec:f5:0b:1e:8f:36:1c:83:2c:76:83:38:d8:8c:
                    6d:37:4d:ad:ec:6a:2c:6f:51:a7:c4:b7:66:a9:ec:
                    55:09:d4:13:65:bf:df:4b:5f:8f:66:a0:61:11:8b:
                    b0:46:6a:8f:40:2e:e3:49:8a:bf:e8:f2:14:a8:59:
                    23:b4:d9:1d:1f:27:74:fa:3d:8f:ac:55:ec:6d:6e:
                    be:f4:29:8c:ec:0e:16:3c:50:b2:0c:77:71:e9:df:
                    ae:e2:6b:96:4f:15:86:93:bb:92:b7:8e:21:b8:1f:
                    d2:29:4c:88:32:40:64:24:d8:e0:7f:1f:16:06:fd:
                    87:74:45:ee:b6:3e:ac:d1:f4:4d:e2:d6:b3:54:c2:
                    4d:86:a1:c9:60:42:9a:7a:21:5f:c3:c1:34:71:ea:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/22
                IPv6:
                  2803:2f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266769

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:9c:07:c9:d3:73:43:b2:53:ae:ab:5e:19:c6:39:bb:86:
         cf:7a:8f:f3:51:c7:48:85:c6:b9:ac:1d:9f:cd:68:0d:a7:9f:
         f8:15:ad:65:f3:0d:01:42:d4:04:b3:17:05:b6:82:9f:98:24:
         48:7b:5c:15:23:70:ec:f8:88:b3:0e:d9:ad:39:13:fc:d4:f3:
         9d:04:cc:0d:c3:2a:91:1c:ab:f0:df:c2:49:14:bf:fd:fb:dd:
         69:2f:45:5d:54:5d:29:2e:70:e9:18:07:72:06:68:30:c0:67:
         4f:a2:55:ab:04:13:10:0c:98:1c:d9:96:38:90:98:6c:8d:16:
         ba:bc:2b:d3:f2:de:39:29:eb:c1:23:f5:40:0b:f1:37:85:81:
         ec:9f:be:12:8d:69:64:c3:fa:05:1f:c2:d3:74:d8:0c:c9:9b:
         fa:f0:71:59:f5:d1:b1:4c:d7:7c:16:6d:65:a3:60:d7:12:6a:
         53:93:09:83:d1:6a:71:9b:c6:b4:d3:2f:d2:61:24:8c:0e:a9:
         73:d9:c7:94:e1:26:b8:34:0d:b6:17:23:d6:9b:38:b7:ff:17:
         12:a9:cd:4c:5e:2a:52:99:4e:0e:d0:15:34:94:8a:ab:13:9a:
         51:a1:57:c7:b2:b7:0b:9c:ce:ad:3b:b6:db:8e:3a:b6:e3:2b:
         e8:92:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:30 2024 by rpki-client on console-ams.rpki-client.org