Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer
File:                     98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer (raw, json)
Hash identifier:          zawGbJykkQgMFIIzNGe5dEFBDfTHDI6NvIWun2WpvHI=
Subject key identifier:   EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E679F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 Sep 2020 15:37:21 +0000
Certificate not after:    Fri 11 Oct 2024 07:45:51 +0000
Subordinate resources:    AS: 269874
                          IP: 45.189.184.0/22
                          IP: 2803:68e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15104504 (0xe679f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  3 15:37:21 2020 GMT
            Not After : Oct 11 07:45:51 2024 GMT
        Subject: CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:2c:b7:a9:05:9a:de:73:b3:51:d1:0f:c6:
                    bb:33:b7:e2:01:3a:e0:35:10:a9:07:c1:8c:f5:df:
                    c8:5c:6a:27:2c:88:75:3f:91:37:db:17:be:32:c0:
                    cf:d7:69:46:3e:00:5e:2f:d4:8d:3f:be:bd:6a:e2:
                    0c:f5:aa:b6:84:7e:4f:92:10:0d:57:a2:4e:5c:24:
                    dc:23:2b:d1:9e:89:91:07:98:dc:d4:ee:cd:01:7e:
                    39:5a:78:86:61:42:a1:74:5e:d5:90:fc:55:0d:be:
                    47:3c:69:a8:e8:51:08:f7:ed:2c:dc:28:d1:8f:98:
                    cf:d0:e0:f1:ae:9a:7c:3c:65:4a:dd:45:bc:98:82:
                    18:73:3d:7c:b0:6a:1c:aa:88:9f:e0:a0:cd:64:2f:
                    ab:34:ac:31:92:86:87:13:9d:f1:97:84:15:49:b5:
                    9a:13:d0:03:58:f4:2a:8e:b0:30:7c:2e:c5:93:f9:
                    9e:bf:8d:9f:1c:f0:01:48:1f:29:54:98:84:86:8c:
                    a1:5f:25:3c:7c:b7:14:53:37:fa:bd:5b:5b:54:d8:
                    3e:05:05:a9:c2:89:d6:5a:9e:83:7f:9f:6e:b4:06:
                    17:2c:6b:6d:49:08:45:c3:6a:42:1d:93:58:a9:41:
                    15:e1:18:58:c6:7f:9d:e0:ee:1b:ab:73:ed:11:2a:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.184.0/22
                IPv6:
                  2803:68e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269874

    Signature Algorithm: sha256WithRSAEncryption
         8a:8d:ff:5c:ea:93:74:2d:84:fc:f7:e7:24:d5:05:7f:14:da:
         b9:77:a8:2a:f7:50:12:3a:2c:86:b9:ab:64:6e:79:c9:77:1b:
         39:e4:8b:d7:db:3d:0a:6f:37:34:11:93:ad:c7:95:87:2a:4a:
         20:41:2f:0d:a6:76:25:88:ea:44:94:7b:57:b3:52:83:4d:7f:
         e9:13:f2:17:62:69:13:f4:fc:b5:c2:ff:db:7a:21:76:a9:f5:
         df:ab:88:97:fe:51:62:a6:5b:7e:00:bf:41:96:76:c4:b7:af:
         0e:8a:b1:c0:fe:de:f7:51:02:a1:74:10:29:03:46:7f:1d:af:
         5a:e8:a9:e1:bd:0f:7d:8a:0e:53:41:d0:45:dd:1d:f7:76:22:
         0c:cf:19:b3:d4:5a:01:f0:63:70:29:69:53:13:98:98:06:f5:
         e5:4b:84:f8:18:21:46:49:7b:47:1f:be:4d:ac:ad:b6:d2:c8:
         c1:09:05:4c:b7:b7:a3:33:89:fb:ad:6c:12:a5:34:df:2a:11:
         a6:7a:7b:d1:1c:6b:90:fd:ac:1b:d4:aa:00:6d:a6:e7:30:ce:
         f5:7c:36:94:fa:cc:84:86:7e:cd:a4:ba:00:d1:e8:87:30:45:
         97:e2:f3:53:40:b4:94:01:80:a7:6e:fb:9c:bc:23:93:50:04:
         c4:a7:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:12 2024 by rpki-client on console-ams.rpki-client.org