Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
File:                     a00f13820b977914dc96250807fd66f6707db9ec.cer (raw, json)
Hash identifier:          gYjUtDtuISRiBDsch0PkBkkEHqO46jXaR9LS1ZYPDZY=
Subject key identifier:   62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102650F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Oct 2018 20:49:38 +0000
Certificate not after:    Sat 28 Dec 2024 13:22:51 +0000
Subordinate resources:    AS: 266742
                          IP: 45.230.168.0/22
                          IP: 2803:ab20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16934159 (0x102650f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 20:49:38 2018 GMT
            Not After : Dec 28 13:22:51 2024 GMT
        Subject: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:4e:4d:24:87:fe:09:41:cd:ec:48:b2:75:
                    28:b6:74:f9:0d:c9:0f:bc:1a:da:30:6f:63:d4:da:
                    86:bb:18:ef:d1:8c:0b:ab:d0:af:35:40:1b:83:6f:
                    f6:89:75:10:40:2d:5a:74:11:de:81:4e:43:b5:a5:
                    aa:ec:1e:5a:7e:6f:91:da:4a:41:a6:de:6a:6b:70:
                    0b:42:99:9e:28:4a:de:d0:19:f4:f9:4a:0b:ea:30:
                    04:25:5b:81:1d:48:91:bd:fb:9c:d0:b9:f1:78:7c:
                    39:75:e8:b7:20:de:e6:5a:4a:de:0e:b1:fa:dc:b0:
                    53:21:1c:f2:66:a5:ee:fd:79:81:1c:52:11:82:5c:
                    45:13:ab:55:6a:44:25:7a:02:87:c9:ff:d9:08:01:
                    bb:32:88:82:79:11:7b:6f:e4:e7:06:d9:21:b8:ea:
                    87:8d:f9:c3:1a:57:6e:1e:36:fd:5c:a2:c7:19:33:
                    77:08:ec:ab:a2:02:c8:61:cd:54:37:93:f1:9b:9c:
                    f1:7b:1a:04:59:37:33:fb:9c:01:ea:d5:b6:91:40:
                    78:d6:c4:48:c7:f1:2a:65:21:8d:5c:1c:8b:ca:05:
                    30:c7:74:90:27:ea:8f:8e:79:f5:76:37:58:ea:02:
                    ce:41:2e:e5:dc:02:e0:ae:6d:cc:aa:8a:67:5f:0a:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22
                IPv6:
                  2803:ab20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266742

    Signature Algorithm: sha256WithRSAEncryption
         0f:bb:df:3a:5a:56:83:be:da:bb:fd:86:13:f8:b1:2f:d6:10:
         5d:a2:37:94:1e:38:16:51:b1:ce:07:bb:b3:c0:48:d2:40:49:
         fc:fe:c1:a9:bf:b7:9b:75:63:68:b6:42:f9:e7:84:0c:a3:bd:
         bc:77:00:22:b9:96:02:6e:df:53:e0:56:5e:02:39:b8:d9:14:
         d7:d3:9c:e5:b4:2d:ae:69:da:ef:fe:a9:b1:0e:dd:9d:5f:72:
         86:3c:4b:54:3a:80:25:f9:ea:a0:4b:af:39:9e:0c:62:24:1d:
         17:49:26:2b:6c:84:e8:e3:05:bd:d6:86:79:88:05:63:31:99:
         fb:fd:14:a5:5b:d4:7e:9a:bf:63:b1:49:d9:b5:54:41:e6:ee:
         59:5f:7e:eb:e7:65:a2:1a:e0:89:77:1b:e0:c2:3c:28:ff:6a:
         b9:c8:1c:1e:68:03:4d:e6:f9:f6:90:06:0d:d4:62:97:e1:ea:
         26:09:4c:64:ef:cf:45:25:4a:e2:86:42:7b:ee:67:b1:20:61:
         4e:39:68:dc:91:77:f4:ca:fe:24:73:eb:d0:4e:20:6b:f5:ea:
         60:96:6a:3d:9c:0a:d7:59:0d:86:9d:83:ad:e0:0a:2c:23:22:
         11:33:3a:b3:43:71:19:9a:f8:9a:13:7b:a5:36:7e:1e:8b:36:
         97:e2:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:16 2024 by rpki-client on console-fra.rpki-client.org