Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90e0b8a71889e1f495ad026eef6e7a0d676a14d5.cer
File:                     90e0b8a71889e1f495ad026eef6e7a0d676a14d5.cer (raw, json)
Hash identifier:          I2Rky5fn7f4sKU5Q3bFmM/FeDJQdQvahINgg7qi2xlY=
Subject key identifier:   29:36:5E:14:AB:0C:90:F2:4C:80:EF:B7:8A:D6:73:4D:57:BD:1F:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E42585
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8e7a1686-97b1-4d2b-b898-9f70ef5cec65/90e0b8a71889e1f495ad026eef6e7a0d676a14d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8e7a1686-97b1-4d2b-b898-9f70ef5cec65/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Apr 2023 05:38:48 +0000
Certificate not after:    Thu 22 Aug 2024 15:13:55 +0000
Subordinate resources:    AS: 272001
                          IP: 2803:c910::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14951813 (0xe42585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  7 05:38:48 2023 GMT
            Not After : Aug 22 15:13:55 2024 GMT
        Subject: CN=90e0b8a71889e1f495ad026eef6e7a0d676a14d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:65:e8:02:ce:88:9d:4b:26:cb:3d:d8:f0:
                    d9:fc:58:25:07:6f:64:85:4d:f6:6a:0c:ab:7a:71:
                    2f:12:d0:37:11:bb:1c:38:8c:c2:4e:59:3b:cb:01:
                    06:23:d0:b1:8c:44:2a:65:b5:2b:ec:3e:96:0e:71:
                    8c:65:83:d4:c6:98:2e:c8:12:96:96:db:8f:14:99:
                    87:b9:22:47:ad:93:59:ed:15:05:0f:bc:82:e8:46:
                    8d:52:f2:d0:d1:e5:c4:69:12:7a:6d:65:d0:e0:ce:
                    ca:ed:a5:ec:8f:8e:b4:af:f0:f8:62:8b:15:10:80:
                    e5:03:71:96:12:74:0b:00:fa:d1:45:4b:3e:47:df:
                    bf:a4:3f:6a:3e:3a:2f:24:c8:ea:2f:47:b5:cb:69:
                    30:ff:b2:95:1c:19:f7:42:3d:d2:e7:04:e2:02:9d:
                    84:63:fb:5c:be:cb:49:da:0b:03:54:51:cf:20:e2:
                    92:78:47:e5:0f:b2:92:57:86:5d:be:91:29:52:6e:
                    a0:01:ea:c9:63:ea:5f:9b:66:e5:67:f1:17:47:25:
                    e8:0f:01:16:cb:04:ec:89:39:c5:b4:ea:69:bc:e3:
                    15:b1:ea:75:e5:d4:48:b7:3a:7d:15:85:ba:04:57:
                    7d:2f:2c:44:e7:95:02:8e:dd:51:03:11:38:d9:c9:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:36:5E:14:AB:0C:90:F2:4C:80:EF:B7:8A:D6:73:4D:57:BD:1F:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8e7a1686-97b1-4d2b-b898-9f70ef5cec65/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8e7a1686-97b1-4d2b-b898-9f70ef5cec65/90e0b8a71889e1f495ad026eef6e7a0d676a14d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272001

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:30:88:83:cd:ed:ad:77:dd:06:50:40:5f:df:45:8a:d7:
         18:18:9b:38:25:a8:89:ab:1b:80:03:c1:8c:2e:f7:5e:42:fb:
         ba:13:8f:d1:a4:f1:8d:ec:35:c6:3f:bf:af:b1:4c:38:83:7f:
         d5:bd:d4:87:77:cf:77:8b:48:d5:0b:f9:c2:67:36:7c:f5:d7:
         56:17:d5:c9:7a:fc:48:0c:ee:a7:39:58:59:dd:b0:54:34:b9:
         98:6c:25:48:a0:2b:04:55:32:bd:cf:d2:e1:16:3a:2a:0f:95:
         25:ac:98:ad:35:32:cc:5b:36:6e:71:b5:5d:f1:e6:87:3f:3e:
         b2:b3:3d:bf:ae:bf:aa:f3:05:98:db:dd:db:b1:8a:7b:1c:a8:
         53:49:0d:62:05:f7:81:24:4f:cf:57:33:97:b3:20:8d:d8:25:
         b1:fa:98:90:ac:4d:84:d1:b9:c0:75:44:a0:16:c7:0e:2b:f7:
         cc:66:f9:d8:b5:f6:c7:a7:7d:1e:69:9b:6f:11:3b:62:f5:4f:
         0f:29:68:e8:65:4c:6b:cc:f6:7a:f5:e3:f3:22:fd:ad:e5:60:
         38:93:bc:49:b2:c6:2d:87:ec:d4:6d:09:a8:3f:c1:61:a8:4a:
         e1:10:8c:f3:89:7f:bc:08:82:f7:5f:22:e3:8d:d8:7d:94:63:
         48:c8:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:02:02 2024 by rpki-client on console-fra.rpki-client.org