Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3ae922638ff81e225680ea4c3aac3257c696ced.cer
File:                     a3ae922638ff81e225680ea4c3aac3257c696ced.cer (raw, json)
Hash identifier:          Wz5rU1Vo/fTCVlh79mM1lsoPsvhwRrCiV3YNIypR26E=
Subject key identifier:   2E:3B:A7:9E:FC:E5:D6:CA:A3:4C:00:96:20:C0:30:2A:7F:5A:EB:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F1D21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/a3ae922638ff81e225680ea4c3aac3257c696ced.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Sep 2022 13:24:50 +0000
Certificate not after:    Thu 24 Apr 2025 19:02:25 +0000
Subordinate resources:    AS: 264725
                          IP: 170.231.176.0/22
                          IP: 2803:6740::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17767713 (0x10f1d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 13:24:50 2022 GMT
            Not After : Apr 24 19:02:25 2025 GMT
        Subject: CN=a3ae922638ff81e225680ea4c3aac3257c696ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:75:bd:a5:d1:61:95:33:e3:d6:3d:e5:52:
                    3c:7b:93:27:85:14:06:e2:2c:ab:5b:d9:cc:13:c2:
                    d3:3c:82:9a:00:ad:42:b1:58:b0:92:ec:5f:f7:78:
                    9e:50:b2:44:da:f6:3e:85:e0:6e:b5:bb:4f:26:1c:
                    11:fd:f1:ad:c4:62:b4:d5:30:62:28:2e:6d:b6:b3:
                    71:15:26:10:d1:6d:2e:3c:38:0d:45:f8:ed:a4:05:
                    f7:cc:5b:46:38:ea:a4:75:b1:9f:c8:08:a3:1b:79:
                    13:bb:8e:a9:96:ec:93:d3:f2:30:55:42:f5:d6:73:
                    ed:13:71:ec:5b:54:67:59:94:9c:73:61:04:84:4e:
                    5c:4e:aa:f8:04:53:78:02:a7:c8:ab:4b:e7:f8:de:
                    64:0c:be:c6:bd:7f:33:bc:a2:97:03:a8:c4:3d:5b:
                    48:95:68:bb:96:5d:d6:f4:be:04:32:dd:07:ba:05:
                    71:a4:cf:52:b0:31:2e:ec:41:e2:55:bb:71:d9:b2:
                    3f:de:51:42:df:d2:72:33:f5:ee:e8:9a:b4:92:b9:
                    16:4a:80:0a:8c:45:70:3a:b4:c4:12:2d:d1:04:ce:
                    d7:9c:fa:b7:88:91:e2:2c:44:02:ba:99:e2:60:cc:
                    e6:cc:28:cc:50:5a:c3:11:35:b1:60:26:fe:33:76:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:A7:9E:FC:E5:D6:CA:A3:4C:00:96:20:C0:30:2A:7F:5A:EB:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/a3ae922638ff81e225680ea4c3aac3257c696ced.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.176.0/22
                IPv6:
                  2803:6740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264725

    Signature Algorithm: sha256WithRSAEncryption
         35:da:3a:8f:b0:13:23:07:d5:d0:92:2a:55:f1:30:41:72:08:
         38:0b:f3:3e:55:62:8f:eb:2e:1c:13:65:f2:63:83:47:e9:4d:
         5c:80:36:47:e4:be:fa:39:7d:c2:bb:66:33:ef:b8:8a:ac:da:
         99:56:34:3b:d7:0d:04:78:bd:41:fb:1e:18:04:fb:dc:94:8c:
         13:85:ff:3c:16:6f:f5:f6:2d:75:da:c3:e0:97:28:32:df:12:
         14:4f:5c:36:65:0c:15:69:24:85:1e:39:98:53:f4:b0:20:33:
         cf:a8:8b:29:6f:3f:34:a2:99:49:58:6e:4c:4f:f3:46:94:97:
         76:b7:c8:70:cb:32:d1:15:cd:44:d4:13:63:66:8c:af:81:9e:
         84:59:ad:76:ce:f5:bf:77:c7:36:e0:d2:39:21:c1:39:4c:56:
         08:f1:00:46:5b:af:e8:80:ab:2e:c4:d3:c8:01:27:79:3c:02:
         a3:dc:64:6c:de:ae:db:b4:26:a5:6f:4c:10:c7:dd:b0:e0:cf:
         55:11:60:d1:ba:6d:ca:59:da:f1:fb:11:4d:22:4e:8f:cd:6a:
         ff:dc:4f:2b:d0:17:b4:b8:d1:b6:c1:f9:bd:70:70:b5:0e:7d:
         3c:5b:10:cb:98:ae:aa:6a:72:d3:87:d2:e6:0f:90:b5:1e:b3:
         c1:42:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:15 2024 by rpki-client on console-ams.rpki-client.org