Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/926e0640a8eef8a9a9983aec971ac12cc0904509.cer
File:                     926e0640a8eef8a9a9983aec971ac12cc0904509.cer (raw, json)
Hash identifier:          XI+aoASJHbmcCyy76bbhMYImu/QQUAqMl9QQERxRKdI=
Subject key identifier:   DD:76:97:D7:0A:E6:2C:54:B5:EB:2D:E0:6A:5B:A8:FC:5F:B7:80:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010373AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ab0fceb-6575-469a-bfb7-fae5b8949471/926e0640a8eef8a9a9983aec971ac12cc0904509.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ab0fceb-6575-469a-bfb7-fae5b8949471/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Nov 2022 00:52:44 +0000
Certificate not after:    Sat 11 Jan 2025 14:24:31 +0000
Subordinate resources:    AS: 271878
                          IP: 207.248.12.0/22
                          IP: 2803:9c10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17003438 (0x10373ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 00:52:44 2022 GMT
            Not After : Jan 11 14:24:31 2025 GMT
        Subject: CN=926e0640a8eef8a9a9983aec971ac12cc0904509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:31:cf:df:f4:36:42:a6:9e:e9:ad:bd:04:
                    9d:77:ea:43:e0:2f:47:ba:13:e8:dc:18:81:42:ad:
                    86:da:f6:08:55:1a:e0:87:90:f1:17:1f:8d:7b:3d:
                    2b:4b:ae:9f:3f:a0:b2:84:55:18:cf:4b:73:90:b5:
                    31:71:62:3a:6d:92:5b:6c:2b:c9:a2:f1:82:08:d5:
                    ae:55:e9:a8:50:ea:5f:b1:ae:f8:c0:8b:dd:ab:68:
                    f1:10:ce:21:ce:44:16:01:20:c0:37:99:ec:6c:d6:
                    d7:e1:86:31:53:ca:62:75:ee:95:2c:56:33:b6:a6:
                    47:dc:c6:9e:7d:b8:db:60:83:f9:dc:70:f4:b3:b0:
                    cb:69:1a:3a:d1:72:a5:ad:ed:90:b2:fb:6d:d7:12:
                    3c:a8:16:07:09:44:a9:c5:c4:e6:3e:d3:a3:93:13:
                    38:54:6c:be:b9:69:8d:88:c1:ee:5b:15:82:a8:7b:
                    df:8d:c6:c9:da:f1:e3:58:6c:6a:50:65:bd:90:38:
                    9d:53:f8:d3:83:09:cd:a9:91:06:e3:11:d8:ae:c2:
                    e1:45:6f:00:ea:ee:ff:86:9b:9a:f5:cb:a4:c7:51:
                    07:1d:0e:8b:b8:75:29:b8:6b:95:4d:0b:4a:d3:b4:
                    33:dd:e7:9a:33:bb:58:11:8f:a8:c1:9f:1f:1a:76:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:76:97:D7:0A:E6:2C:54:B5:EB:2D:E0:6A:5B:A8:FC:5F:B7:80:AC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab0fceb-6575-469a-bfb7-fae5b8949471/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab0fceb-6575-469a-bfb7-fae5b8949471/926e0640a8eef8a9a9983aec971ac12cc0904509.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.12.0/22
                IPv6:
                  2803:9c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271878

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:46:bd:1d:de:07:b9:2d:fc:b1:d9:c7:6b:47:4f:9d:05:
         89:29:a7:cd:c5:38:4f:e4:55:8f:1d:7a:fa:22:87:d3:99:fc:
         f9:bf:1b:b2:c2:be:88:76:eb:0e:04:19:0d:79:b1:12:9f:e4:
         ed:f6:fe:b5:61:fd:07:9e:2e:91:ab:24:df:5a:0e:fe:88:99:
         c0:e6:a3:46:ae:4c:1f:25:aa:a6:79:ba:fe:2e:ab:f0:07:e6:
         72:49:ba:de:06:eb:0e:8e:00:f7:3e:e6:18:73:5a:d0:a1:5f:
         0b:ba:7d:51:e7:f7:df:6f:3d:4b:49:c5:d3:34:67:69:5d:cc:
         0e:c6:4d:0a:5e:a6:a5:04:aa:ab:6f:38:27:f8:75:3a:cd:30:
         2f:bd:b0:47:e6:26:96:89:c7:88:a6:d2:30:72:b3:7a:3c:36:
         18:68:25:75:6b:7f:41:f9:56:b9:93:2a:7d:17:17:74:2a:0c:
         37:d1:69:dd:ea:aa:9a:c4:75:da:0f:44:27:46:7a:5d:1b:f3:
         8b:cf:1f:47:37:dd:73:c4:c0:2d:0d:3a:0a:9c:12:66:a6:1a:
         a7:70:78:e1:cf:35:be:a8:a5:03:96:48:5b:93:f8:a8:27:c7:
         e8:df:e5:b6:51:a5:9e:b4:d3:42:1d:08:79:9b:37:81:eb:bd:
         4c:19:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:47 2024 by rpki-client on console-fra.rpki-client.org