Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a006be3294834a97360867e56c44def164af37bc.cer
File:                     a006be3294834a97360867e56c44def164af37bc.cer (raw, json)
Hash identifier:          1i5RyHvi90pQW1n5MbuA6KzLCRxgPXOcRrMs297sFiU=
Subject key identifier:   C4:DB:46:06:48:1E:4E:4B:00:98:46:3C:19:84:E4:FC:52:25:E2:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBFFA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/292b901b-7ad9-4b8b-af3a-8f337f8bbf74/a006be3294834a97360867e56c44def164af37bc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/292b901b-7ad9-4b8b-af3a-8f337f8bbf74/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 14 Jan 2023 03:21:42 +0000
Certificate not after:    Wed 13 Nov 2024 19:31:44 +0000
Subordinate resources:    AS: 272935
                          IP: 2803:5190::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14417827 (0xdbffa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 03:21:42 2023 GMT
            Not After : Nov 13 19:31:44 2024 GMT
        Subject: CN=a006be3294834a97360867e56c44def164af37bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:bf:d5:ad:24:54:7f:e2:8d:10:75:5f:19:
                    f3:a0:7d:78:99:55:af:95:6a:36:d3:1e:02:18:c7:
                    0f:ac:5c:03:c3:86:2c:04:0a:2a:21:12:88:cf:a4:
                    ae:74:19:2b:33:1d:eb:ba:37:cc:5d:97:7b:ab:c7:
                    a1:13:b4:3f:f1:60:78:c4:cd:a3:a3:cc:09:58:27:
                    b5:e4:18:a6:9e:7c:96:03:16:13:c2:63:90:58:88:
                    9b:fb:0e:d5:ad:03:8e:21:8a:9e:3a:cf:50:e4:c7:
                    51:a2:54:e1:bf:db:75:9c:df:3e:79:53:e3:f7:3b:
                    1c:3e:55:49:f4:c9:b5:3c:d8:f6:d1:90:53:47:1e:
                    e2:4e:c5:c3:6e:1b:f0:37:a7:7c:bb:5f:b7:05:5f:
                    f4:bb:2a:d1:43:6f:48:21:3f:11:d6:68:2e:3d:d1:
                    24:fa:43:f1:41:ba:ef:c8:21:ad:5e:d7:37:3a:18:
                    82:21:9b:6b:92:94:8c:f6:24:2a:96:97:06:41:35:
                    39:52:c6:b5:ac:f6:51:b1:9d:14:75:6c:cb:69:26:
                    d0:36:fd:e5:a9:e8:c4:c7:6d:5a:8b:7b:1e:10:bb:
                    73:fc:d7:d9:66:50:9f:36:24:9f:a5:5f:62:42:e5:
                    2f:4a:ab:15:70:7e:50:2f:20:7b:83:fe:56:6e:63:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DB:46:06:48:1E:4E:4B:00:98:46:3C:19:84:E4:FC:52:25:E2:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/292b901b-7ad9-4b8b-af3a-8f337f8bbf74/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/292b901b-7ad9-4b8b-af3a-8f337f8bbf74/a006be3294834a97360867e56c44def164af37bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272935

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:4e:f5:3b:f6:be:67:e3:6d:3f:17:b6:dc:3e:00:10:0c:
         53:26:aa:4e:99:88:d4:5a:3b:4b:c2:24:cd:32:93:62:be:27:
         19:cb:b7:e2:54:f4:fb:2c:1d:58:b7:8b:09:01:1f:81:2d:62:
         a9:ec:ac:16:a2:89:99:72:56:40:04:8c:cf:d2:c4:66:0d:37:
         8a:8d:75:dc:ce:d4:85:5e:13:68:0d:8c:a9:c3:d5:92:6e:73:
         25:ed:83:92:77:71:61:cc:71:79:49:44:81:c2:a0:0e:33:e8:
         ed:58:2a:0c:46:92:f4:20:bc:51:3f:78:f0:8e:47:53:81:dd:
         bf:4a:1a:65:ca:0e:78:e6:2a:36:18:a8:6b:13:b7:46:f9:f4:
         18:1d:c7:92:eb:fc:4e:0e:8f:8c:88:2a:5d:2c:1e:c2:95:8a:
         e4:76:05:27:fb:39:47:e1:ee:bc:14:2e:95:7e:b8:97:34:93:
         20:7b:3e:5c:3c:f9:5a:01:fd:34:8c:96:6f:a2:d5:d2:55:37:
         d8:90:a1:3f:2f:b7:d6:f4:77:c8:0b:3e:a3:52:06:31:f3:f1:
         5b:54:87:56:ea:da:1b:95:aa:89:cc:8e:2b:bd:4b:57:c9:45:
         19:b3:cb:27:b6:c9:eb:d2:06:25:a3:6f:6f:61:88:9a:ac:71:
         79:fa:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:51 2024 by rpki-client on console-fra.rpki-client.org