Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d73a5452824e7689d3962a86f4835fbcdc5f69b.cer
File:                     9d73a5452824e7689d3962a86f4835fbcdc5f69b.cer (raw, json)
Hash identifier:          2RN5mDBi9oiJpjOKuMMdiArc6b1CeIJ0kirA3zPO+f8=
Subject key identifier:   DD:A1:3B:9A:57:62:DC:EF:FB:98:75:D2:EA:B5:E2:85:D9:80:22:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E35B7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d762cb0c-f99f-4f72-919f-3ba2a01f834b/9d73a5452824e7689d3962a86f4835fbcdc5f69b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d762cb0c-f99f-4f72-919f-3ba2a01f834b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 18:14:06 +0000
Certificate not after:    Wed 11 Dec 2024 18:38:43 +0000
Subordinate resources:    AS: 272070
                          IP: 2803:7310::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14900090 (0xe35b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 18:14:06 2023 GMT
            Not After : Dec 11 18:38:43 2024 GMT
        Subject: CN=9d73a5452824e7689d3962a86f4835fbcdc5f69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:b6:a2:70:03:93:e8:88:65:e6:60:ce:a1:
                    ce:9b:0e:b0:04:81:c2:4a:00:3a:54:a1:6a:23:f7:
                    91:e6:e6:03:f2:2b:b4:af:ed:37:f7:87:25:e8:32:
                    0b:67:17:66:8a:17:39:96:11:f5:64:d0:04:ef:c4:
                    ec:d2:20:d7:77:c4:5b:03:81:e3:21:c0:c4:05:02:
                    6c:d4:7e:fa:f0:51:a2:61:8e:c2:e2:01:18:87:d0:
                    52:96:d6:da:f1:ef:9b:be:07:7e:83:94:33:05:b6:
                    78:db:32:18:55:f9:44:b5:66:52:9e:33:24:e5:f2:
                    50:8a:e2:84:a0:26:e9:1e:ac:ce:0c:3e:74:a9:20:
                    fd:98:91:37:b9:84:62:bc:ac:a9:47:76:5a:0a:b1:
                    3c:f8:5f:51:40:c9:32:67:5d:fd:ad:c7:ab:46:a1:
                    56:a6:56:12:34:c6:57:c7:e7:f2:cd:0c:a9:98:1f:
                    9e:ca:82:fb:1a:e0:e4:5e:52:9a:ee:e9:3b:d0:36:
                    d2:e3:47:18:87:85:dd:37:e2:92:58:83:db:db:d3:
                    58:05:8a:1e:62:88:86:dd:d2:72:2f:71:28:70:4e:
                    dd:85:bd:3c:ca:01:52:b3:9f:c7:cd:e1:32:56:ec:
                    42:43:b1:76:b9:e0:c3:ab:74:c6:55:f9:a2:c8:96:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:3B:9A:57:62:DC:EF:FB:98:75:D2:EA:B5:E2:85:D9:80:22:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d762cb0c-f99f-4f72-919f-3ba2a01f834b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d762cb0c-f99f-4f72-919f-3ba2a01f834b/9d73a5452824e7689d3962a86f4835fbcdc5f69b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272070

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:2e:f6:3e:2e:48:b3:65:b7:2e:16:9c:6d:da:65:16:d6:
         b8:da:0b:7f:20:6a:5e:4a:ac:b8:f9:d2:c6:37:1c:1a:e3:3f:
         ab:cd:f3:65:fb:50:d0:be:a0:57:e8:b2:cf:7f:7a:10:b1:11:
         f3:0f:20:74:9c:9f:c3:8a:d5:fe:0b:23:36:cc:e0:32:30:6b:
         5d:98:6e:86:08:62:f2:ed:90:82:e5:9d:52:50:0f:e5:df:25:
         fb:eb:63:54:16:6c:bc:04:d1:09:8a:6f:16:7a:2e:5a:c8:a4:
         1b:84:32:cd:80:d4:3f:ff:85:98:75:1f:ac:05:0a:3b:29:e6:
         bc:1e:7e:5a:28:c5:9e:52:06:32:05:8b:af:35:e9:d6:ac:2f:
         cf:b8:aa:ef:19:17:84:d7:33:b1:29:db:01:0e:8b:a6:07:f9:
         91:eb:98:b0:df:ef:8c:82:e8:8d:ad:35:1b:27:38:c1:c9:52:
         4b:32:a7:3c:65:66:06:6e:c2:08:da:21:1f:4f:41:80:b8:dd:
         0e:35:82:ad:5d:2d:66:e6:1e:83:ae:69:f0:19:d6:8c:de:17:
         03:4e:7c:a0:82:1f:a5:44:24:f3:64:a8:af:b3:6e:ce:29:73:
         ae:db:a3:26:6d:c6:16:71:a4:93:58:3a:5b:65:fd:ea:05:5b:
         42:94:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:28:42 2024 by rpki-client on console-ams.rpki-client.org