Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
File:                     99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer (raw, json)
Hash identifier:          6n7FX07tGLZqUnQszXgANzELrQ8zkS367tyW6xG0zb4=
Subject key identifier:   11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6D477
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Sep 2020 17:05:44 +0000
Certificate not after:    Thu 23 May 2024 21:57:57 +0000
Subordinate resources:    AS: 262216
                          IP: 138.0.104.0/22
                          IP: 190.113.224.0/21
                          IP: 2803:5a00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15127671 (0xe6d477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  8 17:05:44 2020 GMT
            Not After : May 23 21:57:57 2024 GMT
        Subject: CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:05:61:bb:05:f0:04:32:c8:92:1f:aa:40:
                    ec:74:0d:c3:a2:76:05:52:4a:f8:75:51:cc:dd:09:
                    99:ff:a4:96:4a:8d:48:98:a5:1a:ab:35:9b:a2:01:
                    70:c8:03:14:00:78:64:9d:1f:3f:fd:f8:a4:cd:ed:
                    b4:22:88:c9:4e:c2:45:c0:bd:a9:9a:6a:c7:1a:96:
                    54:78:69:51:ea:fd:9c:cd:44:bc:30:60:df:0b:b3:
                    28:34:d3:25:bb:55:04:78:89:17:42:6a:7a:82:fa:
                    85:21:db:aa:f7:bb:b0:a7:f6:95:76:05:fc:06:e5:
                    7e:42:3c:09:d5:15:0b:16:ae:3f:98:70:6b:25:9d:
                    b9:b2:1f:cb:12:e8:c4:9d:53:a4:df:89:4a:4e:ed:
                    4f:fa:7f:cf:9d:01:54:6f:c9:50:14:b5:97:8d:d3:
                    2c:d3:bf:b5:13:10:7c:88:ea:b2:97:aa:48:29:39:
                    aa:dd:08:2a:72:4a:78:04:b5:aa:a5:62:41:34:3e:
                    79:18:c1:b4:82:50:90:19:a3:02:92:92:5f:07:b8:
                    37:c3:98:9e:0e:b5:0f:aa:bd:67:4f:6d:36:86:db:
                    e2:0d:08:40:15:05:35:a7:5a:77:c4:b6:63:68:d8:
                    d6:3d:7e:12:72:c6:a4:41:77:86:fb:c6:fe:14:76:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.104.0/22
                  190.113.224.0/21
                IPv6:
                  2803:5a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262216

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:a1:1b:44:8d:96:ac:83:6f:10:93:4e:4f:d6:43:08:ee:
         20:c9:21:23:c3:d4:f8:5f:f1:ff:24:72:34:74:ba:8e:df:ca:
         51:0b:60:96:31:b0:b7:14:7f:b6:0d:80:1a:19:6c:12:76:4f:
         27:bf:fa:2e:fa:0c:4c:f3:b6:ce:94:53:f3:14:47:84:ad:66:
         3a:19:ea:c0:40:50:61:e3:58:54:4d:a1:30:7e:b0:e5:54:82:
         1d:7a:1f:fb:6e:93:ca:9a:09:37:80:e2:60:50:72:0a:b4:4b:
         fe:23:69:29:4a:ed:fc:2e:61:ab:a0:0c:6d:d1:56:22:9f:c5:
         9f:3b:d3:09:14:be:6c:6e:97:72:4b:46:73:0b:6d:ab:ad:42:
         a7:87:94:a6:0b:70:39:05:a3:7a:b2:45:bb:d9:bc:eb:ec:e3:
         4d:0d:86:dd:d8:fd:0d:a1:3d:8d:76:ec:9f:69:85:4d:eb:11:
         f4:1b:5a:e4:35:c3:7b:c3:2d:5e:32:b1:7d:40:a5:d1:af:e0:
         97:5c:f3:81:78:f7:1f:17:ff:d0:ef:1a:21:fd:1c:23:9b:c9:
         d9:f6:35:3e:9d:43:f3:1c:6f:52:cc:d2:f9:0e:b6:52:26:24:
         77:67:42:52:dd:62:e2:9d:b9:f9:52:95:b4:67:12:fa:62:b2:
         3c:58:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:44 2024 by rpki-client on console-ams.rpki-client.org