Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.cer
File:                     93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.cer (raw, json)
Hash identifier:          ee0aVioOosY6Kj3MFBNwt4kJxhRX3ozAf3HYKG2V+PQ=
Subject key identifier:   25:F0:7C:1B:8B:8D:51:95:36:C4:4C:63:5F:F7:EE:6A:C9:78:BC:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6ED30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 08 Jul 2020 21:02:13 +0000
Certificate not after:    Sat 28 Sep 2024 16:14:17 +0000
Subordinate resources:    IP: 45.168.68.0/22
                          IP: 2803:d5a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16182576 (0xf6ed30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  8 21:02:13 2020 GMT
            Not After : Sep 28 16:14:17 2024 GMT
        Subject: CN=93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:6a:24:3f:d5:e8:16:1f:84:30:be:69:8a:
                    65:08:97:4c:5d:0e:78:1c:22:96:b6:c2:17:4e:0d:
                    8b:b9:b0:99:69:15:ab:b5:5c:2a:cf:4b:63:8e:55:
                    2f:54:5c:df:3c:e1:cf:64:d6:c0:fe:e4:dd:43:ef:
                    db:c7:c0:40:00:dd:7d:e6:2a:88:f0:9c:7d:61:f1:
                    1b:8e:52:63:b2:42:25:82:dc:4f:28:65:18:03:ab:
                    a5:2b:be:d7:5a:ec:e7:88:fd:2e:04:6d:20:66:2a:
                    2d:b6:d2:54:9e:27:54:03:83:ef:a1:e9:a5:30:38:
                    d0:61:e7:18:67:b0:33:14:72:15:f1:26:ea:40:de:
                    9e:35:a4:3c:21:02:1f:f5:41:84:9b:45:4a:3c:c5:
                    63:d4:4d:18:2e:59:40:47:10:41:93:8b:83:8c:8a:
                    38:0b:58:d3:33:b8:56:4e:58:90:b8:90:f1:d9:93:
                    46:08:c6:52:5c:9d:10:50:eb:cf:dc:b4:ad:a9:89:
                    b3:e2:ff:67:f1:3c:6f:26:24:c1:00:8f:b2:3e:d9:
                    d7:42:e9:b1:c1:6d:8a:4d:70:ec:ae:31:ae:e4:a4:
                    56:44:f3:bf:4c:ad:87:ba:ab:a3:0d:ee:ce:bb:95:
                    97:1f:01:4e:6a:6c:60:20:92:70:c3:f9:17:b2:bd:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F0:7C:1B:8B:8D:51:95:36:C4:4C:63:5F:F7:EE:6A:C9:78:BC:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.68.0/22
                IPv6:
                  2803:d5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:78:62:21:de:60:7e:52:65:f3:42:da:45:23:18:10:41:2c:
         db:0c:55:65:a3:3a:53:64:25:71:87:42:d9:65:eb:d1:75:53:
         2c:94:12:70:ad:a4:86:e5:9f:9e:16:1f:b8:37:b5:e9:0e:e5:
         b5:bc:67:38:e4:ba:1f:ed:77:91:51:40:3f:ab:7a:02:2a:ba:
         fa:9c:42:e5:6e:78:5a:a1:85:da:ac:00:72:d0:1a:a0:d5:31:
         54:a4:8d:fc:ce:77:f4:46:83:17:04:5d:e0:b1:83:c3:f9:2b:
         27:21:25:dd:d4:fc:17:c2:af:93:d6:13:c5:45:7a:30:e8:45:
         ad:83:c3:30:f9:c6:fe:88:c4:9b:6d:be:a8:d8:5a:ea:d8:c4:
         33:89:ad:2c:2c:da:a7:54:68:a9:5b:69:b5:14:7b:27:ca:27:
         a5:1a:04:f3:f1:99:d0:82:ae:e5:b2:4e:62:05:6b:5a:61:76:
         dc:cf:be:1f:75:5a:a1:ac:ee:c5:3d:0d:8e:8e:df:c8:e3:6d:
         2b:35:1b:14:5b:f6:43:0e:a5:9d:9e:01:bb:ed:6e:ff:7e:c4:
         91:d7:9e:f8:57:9c:79:13:2f:23:e6:d3:f1:fe:93:5c:cc:86:
         30:dc:0e:3e:68:0c:5c:a4:26:4c:38:a3:64:c6:35:8c:5f:79:
         60:89:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:39:47 2024 by rpki-client on console-fra.rpki-client.org