Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97fa08408a8541db6c54279772f066050e91b323.cer
File:                     97fa08408a8541db6c54279772f066050e91b323.cer (raw, json)
Hash identifier:          0hb3M6jkNvMfFbf6oEcwQQQx1pZnRv/nUcGrs7Gx6Ug=
Subject key identifier:   6C:E5:64:5A:A0:3B:0C:9B:29:07:15:15:53:8E:36:4A:FF:51:72:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01061614
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/97fa08408a8541db6c54279772f066050e91b323.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Aug 2020 15:55:06 +0000
Certificate not after:    Thu 06 Feb 2025 18:27:47 +0000
Subordinate resources:    IP: 138.97.236.0/22
                          IP: 2803:e040::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17176084 (0x1061614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 15:55:06 2020 GMT
            Not After : Feb  6 18:27:47 2025 GMT
        Subject: CN=97fa08408a8541db6c54279772f066050e91b323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:d8:91:d5:be:df:35:2b:f8:0d:84:60:6e:
                    d8:0d:37:da:0e:84:6b:c6:af:d7:b6:9c:4f:7c:6a:
                    c1:87:5a:61:97:3a:73:da:89:95:28:9f:16:fb:99:
                    d3:51:7b:5c:28:2c:00:e4:7e:c3:fe:cf:09:ec:d2:
                    57:b6:4e:97:46:1d:7b:23:a4:a9:89:e9:ce:d1:65:
                    e5:ee:d0:96:4e:51:ee:dc:a2:7f:b1:af:1f:6e:ac:
                    40:97:18:08:9f:e0:0b:59:a3:6e:77:a9:a0:0e:e3:
                    b3:e1:93:f4:9f:f2:1d:72:e4:09:94:c8:fe:fb:a2:
                    79:15:c7:34:90:8c:70:c3:86:fb:17:d6:20:46:f9:
                    fb:d5:73:42:d3:39:2f:90:54:3f:1e:62:3e:95:59:
                    2e:24:fd:fc:79:68:a6:f6:99:51:b1:58:42:2f:83:
                    c9:5a:92:72:3e:c2:15:cb:36:77:00:c8:b4:96:15:
                    e2:dc:8d:97:34:fe:d2:a6:1f:62:17:9c:83:ab:c5:
                    53:94:26:f8:cf:be:07:f4:9b:47:92:ba:11:3f:e3:
                    53:1b:40:33:46:b4:8c:ba:e0:6e:cd:a1:61:40:08:
                    69:12:c8:35:14:41:7a:8b:11:7f:45:76:2d:01:7b:
                    ad:0f:40:db:5d:92:20:b9:85:3b:20:d1:da:51:e5:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:64:5A:A0:3B:0C:9B:29:07:15:15:53:8E:36:4A:FF:51:72:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/608f1497-c989-461d-91bb-de00f3e19f42/97fa08408a8541db6c54279772f066050e91b323.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.236.0/22
                IPv6:
                  2803:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:68:6f:23:a5:bc:51:62:6c:c2:40:4d:eb:87:1f:1d:57:4e:
         8d:d3:88:15:97:8b:a5:d2:24:38:eb:0b:d1:6c:0a:b5:e0:77:
         fe:bb:37:b0:e2:19:30:70:b7:60:3d:97:90:ea:4e:d5:28:e0:
         cd:c5:97:55:44:b6:ca:4b:00:76:8e:4b:6a:6b:d9:1f:42:a4:
         41:dd:72:70:1e:51:da:1a:df:37:2a:01:d6:d3:b9:48:c5:e0:
         de:11:69:db:ae:27:9f:46:14:a7:24:4b:54:c9:f0:aa:78:8b:
         c2:f4:30:97:21:95:6f:f5:37:6a:8b:97:50:35:69:84:26:68:
         9b:df:15:5c:85:66:6d:65:86:62:3f:d9:5d:40:cf:38:c0:0f:
         08:95:6d:2f:17:2b:19:21:70:04:b4:22:05:8c:e8:e3:63:dd:
         39:b4:c4:19:4d:de:84:c9:4f:29:a0:0a:59:ff:f9:2a:80:f2:
         fc:73:c8:31:0b:00:93:86:33:c6:55:b3:7d:3e:5e:38:8a:b4:
         19:5d:09:d4:74:89:ab:10:6e:56:66:ed:af:66:82:68:a8:b8:
         70:cb:d1:38:56:cc:bf:66:b0:49:85:9c:8c:f6:72:d1:a4:11:
         57:15:eb:1b:a5:91:48:54:cc:99:7a:37:dd:fb:3d:21:68:70:
         4e:ea:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:57:08 2024 by rpki-client on console-fra.rpki-client.org