Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a02a3081b7b759b372455eb4682ba4044091d583.cer
File:                     a02a3081b7b759b372455eb4682ba4044091d583.cer (raw, json)
Hash identifier:          WChzhpD+XYQ2y6IrcOSNS3kRj0eBlvL2FzBhRzICNPA=
Subject key identifier:   AA:D5:21:E3:EF:00:59:64:CF:DE:CE:A7:C7:4F:4F:D6:6D:DA:DF:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AB911
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/a02a3081b7b759b372455eb4682ba4044091d583.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 15:35:00 +0000
Certificate not after:    Tue 18 Mar 2025 14:57:35 +0000
Subordinate resources:    AS: 270001
                          IP: 200.142.236.0/22
                          IP: 2803:61e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17479953 (0x10ab911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 15:35:00 2023 GMT
            Not After : Mar 18 14:57:35 2025 GMT
        Subject: CN=a02a3081b7b759b372455eb4682ba4044091d583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:9f:aa:0c:f4:4e:5a:24:3d:e4:a4:ca:ce:
                    e6:86:00:f2:92:aa:c7:48:90:27:e6:52:32:96:b0:
                    23:f7:71:25:f2:76:a4:25:1a:f5:2c:d1:30:5e:a5:
                    30:7a:8b:23:37:24:a1:d2:1d:19:69:da:21:72:08:
                    98:d0:19:11:2e:e7:b3:7b:f4:bb:bd:7f:83:22:0f:
                    57:f1:6d:ac:1a:7c:3a:d2:43:44:e4:46:af:86:1c:
                    c0:ee:aa:d0:22:9a:d9:cd:a5:b4:5c:48:a3:b3:80:
                    a3:f2:e7:2d:d2:8e:4d:7b:13:4e:71:47:cd:f5:75:
                    b1:5f:63:a2:41:77:c9:07:f9:c7:54:b0:6d:1f:50:
                    ef:29:84:4b:30:eb:fa:ca:82:60:13:24:29:f2:ff:
                    64:8a:33:9f:e8:87:57:c7:af:e6:d4:b1:d4:81:2b:
                    e0:2f:2a:88:68:c4:d7:43:a5:e6:82:fc:c8:27:ff:
                    77:e9:54:b7:cd:7d:91:81:a2:fe:5d:90:03:07:3e:
                    88:c1:69:39:9b:cb:b1:60:cb:b0:ed:f2:fc:89:60:
                    d9:33:95:cb:52:55:ec:fb:36:af:8b:10:07:ba:fd:
                    cf:af:a9:4d:09:98:91:50:ce:37:c6:6b:ee:72:e8:
                    c8:8a:cc:fa:9b:bd:13:8c:53:87:5f:c3:1d:23:ff:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D5:21:E3:EF:00:59:64:CF:DE:CE:A7:C7:4F:4F:D6:6D:DA:DF:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf3116bf-cf15-490f-8ba0-873ec39d22a6/a02a3081b7b759b372455eb4682ba4044091d583.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.236.0/22
                IPv6:
                  2803:61e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270001

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:a7:38:b5:1d:9a:9c:66:40:29:ac:a4:b4:f0:0a:d2:a8:
         11:21:71:42:fa:cd:c0:0a:40:f3:1f:7b:3d:a2:cc:81:87:b3:
         4d:a3:ce:a4:99:ad:fd:89:0e:3e:8b:61:f2:16:3d:cf:c6:60:
         cb:de:0b:13:a9:f2:2e:d3:a6:80:32:38:7a:a0:25:65:a1:f5:
         00:e0:34:10:53:df:03:54:c4:b0:3a:9a:0d:dd:03:d2:59:dd:
         7c:b3:25:ca:cd:13:04:e3:92:0d:43:bc:04:da:9a:d1:06:3e:
         d8:06:61:17:9a:53:8d:21:b9:ef:49:5c:0b:cc:6f:97:20:a2:
         9a:4a:4c:87:54:ed:f2:b5:91:c3:b0:8f:6e:c3:fc:31:39:6b:
         f4:e2:1b:9b:86:c6:7c:10:3e:95:24:0e:d1:f9:ef:28:2c:c5:
         d0:28:17:0b:86:26:47:a2:0c:cd:45:15:27:e1:9c:52:8c:56:
         65:ff:71:b4:87:a3:40:c4:ea:45:5f:c5:78:eb:d3:a2:35:b4:
         f4:c1:40:e9:46:51:70:38:a7:19:0b:b9:bd:25:8c:8b:e5:fd:
         13:2b:1e:d7:2b:7c:6b:74:e9:8e:09:d3:6d:86:e4:1e:2c:e8:
         c8:7d:76:7d:d1:7e:a5:bf:d5:bf:13:7d:e0:1f:c6:2a:d4:72:
         8d:68:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:51 2024 by rpki-client on console-fra.rpki-client.org