Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9819269b1bcbbf74692674d5c55c0b13979acd6f.cer
File:                     9819269b1bcbbf74692674d5c55c0b13979acd6f.cer (raw, json)
Hash identifier:          yYRw9yuP+sk/S8VvYhsLqs8ULIPFtFAkMfFWozt+6y0=
Subject key identifier:   FE:0F:4E:F0:E0:0B:C3:8E:DD:5F:BF:49:AA:B1:B4:D5:27:EF:4A:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E42B9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6f05a77c-5a3a-40ec-a520-0c49bfa4d23f/9819269b1bcbbf74692674d5c55c0b13979acd6f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6f05a77c-5a3a-40ec-a520-0c49bfa4d23f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Apr 2023 10:11:32 +0000
Certificate not after:    Mon 02 Dec 2024 21:52:40 +0000
Subordinate resources:    AS: 272946
                          IP: 2803:4990::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14953375 (0xe42b9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  7 10:11:32 2023 GMT
            Not After : Dec  2 21:52:40 2024 GMT
        Subject: CN=9819269b1bcbbf74692674d5c55c0b13979acd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:88:2d:df:58:68:eb:43:65:c7:10:eb:1e:
                    5b:70:0c:c3:7f:f6:ec:2a:fe:00:1b:94:25:0f:d0:
                    8c:e9:c6:0e:1d:79:b9:83:6a:3c:22:f1:8b:06:de:
                    54:ad:2c:64:fb:08:d2:15:10:98:78:d4:41:86:94:
                    ef:84:fa:9c:fa:39:fb:0b:5f:71:6d:e9:56:95:30:
                    13:73:95:b3:b2:01:99:43:1b:1f:2c:26:88:a1:18:
                    2f:4f:85:96:37:0a:bb:95:0f:4d:a0:d5:7b:4e:34:
                    d4:8b:0f:b1:27:cd:c7:6a:75:b1:cc:e2:91:77:58:
                    47:2b:b0:48:4d:02:2b:a7:40:83:11:e8:39:0d:90:
                    ba:33:2b:df:cf:f7:41:22:95:0d:33:ea:43:6e:9f:
                    ce:7b:30:57:a5:e1:5e:80:22:1d:c6:36:74:f7:cf:
                    13:23:1a:34:2b:b6:54:5f:02:ef:1b:bf:57:9c:78:
                    3e:23:a7:8b:fe:e0:1b:08:01:c8:dc:71:47:84:17:
                    1a:cc:8e:68:f9:fe:b3:0c:38:03:7e:28:d3:ba:12:
                    14:97:63:5e:5b:de:24:ad:1b:59:81:53:0b:f2:64:
                    dc:ae:bf:07:db:de:98:b3:73:97:ac:15:0f:64:5e:
                    9f:41:26:30:10:59:67:a2:0d:84:46:c1:c2:f8:f7:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:4E:F0:E0:0B:C3:8E:DD:5F:BF:49:AA:B1:B4:D5:27:EF:4A:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6f05a77c-5a3a-40ec-a520-0c49bfa4d23f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6f05a77c-5a3a-40ec-a520-0c49bfa4d23f/9819269b1bcbbf74692674d5c55c0b13979acd6f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272946

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:ab:83:d8:8d:ab:9a:bb:52:fe:41:df:e7:33:10:46:1c:
         64:17:39:cb:5b:af:b7:3c:ba:0b:fc:8e:1a:f6:69:00:c3:d9:
         d0:af:b7:14:94:40:c4:54:b3:36:92:54:50:8e:cc:37:a9:68:
         78:b0:6f:db:81:0a:30:3e:a9:90:f6:b1:c3:64:0c:52:ec:8e:
         07:83:30:4f:56:32:d3:f1:31:6c:7c:e5:2f:ca:38:23:f4:41:
         88:3a:f0:8d:bc:7d:b3:21:7c:63:8f:0b:2d:76:b2:a5:01:19:
         90:30:f1:e3:74:ea:49:bb:eb:5e:2a:e9:a3:28:94:f6:70:f3:
         56:c9:2a:ee:da:81:ff:ae:a9:4c:e4:73:f8:ed:a4:88:05:97:
         9c:ad:82:ea:7e:a3:f9:95:fa:28:58:7b:5f:ae:fa:56:93:d5:
         8d:8d:07:43:73:44:d8:b2:3f:31:33:0d:09:d2:6c:4f:d7:3e:
         6e:6a:34:c3:cb:52:24:50:12:6b:67:a1:37:de:3d:a1:70:c3:
         d3:ea:1b:44:17:d2:4a:a6:fb:94:c6:c2:cc:89:34:56:55:cf:
         1d:96:bb:35:69:37:b8:10:5f:32:8c:fc:0f:fd:41:eb:9d:0e:
         6f:a2:7f:85:ca:8c:60:22:70:cf:e5:f2:95:1f:35:a7:36:a0:
         20:b9:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:02:04 2024 by rpki-client on console-fra.rpki-client.org