Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a45ed9891ebefc1daf2825f1096211931bbf962c.cer
File:                     a45ed9891ebefc1daf2825f1096211931bbf962c.cer (raw, json)
Hash identifier:          qN4KJvF9SFEb6YHjfuohilKuMJRnAjzmF/0JtXLuS/I=
Subject key identifier:   68:AB:51:0E:DC:D3:0E:EF:55:3E:96:50:9C:AB:1F:FD:3B:F7:B2:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A5510
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/a45ed9891ebefc1daf2825f1096211931bbf962c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Oct 2018 16:29:02 +0000
Certificate not after:    Sat 15 Mar 2025 22:02:18 +0000
Subordinate resources:    AS: 266801
                          IP: 45.236.124.0/22
                          IP: 2803:c8a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17454352 (0x10a5510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 16:29:02 2018 GMT
            Not After : Mar 15 22:02:18 2025 GMT
        Subject: CN=a45ed9891ebefc1daf2825f1096211931bbf962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:cf:53:b8:cc:91:67:cf:b4:70:c3:11:a7:
                    01:34:ad:19:10:17:54:44:de:bc:31:8b:de:82:8f:
                    1d:63:73:52:6d:e2:12:ba:69:64:75:29:77:2f:bc:
                    b6:ed:39:29:c3:b9:9c:14:ae:76:79:26:a7:b0:21:
                    67:e0:bd:1d:9d:e6:c4:91:cc:c6:cd:41:b5:c0:4c:
                    be:ed:f2:56:ef:55:3f:0a:6e:e4:bb:c6:f4:a7:81:
                    d2:ba:a5:35:ae:4e:46:9a:34:8e:94:66:c1:e1:21:
                    0d:7c:75:b0:f3:7a:14:d3:d3:cd:ea:e9:d4:3c:2c:
                    3c:84:4e:00:37:8f:18:02:7c:70:a2:0f:e7:b9:73:
                    cb:82:d7:44:b4:b4:c3:d9:33:7a:a5:3d:a0:24:99:
                    f4:d2:0e:b4:b5:a6:56:82:f2:e7:1f:a6:64:a9:ff:
                    d7:99:cd:b3:4d:2e:9e:3d:66:af:50:0e:b7:f7:db:
                    0b:3b:35:b1:ff:6f:4d:07:f5:e4:75:5a:54:c5:01:
                    2f:6e:ab:0f:52:92:69:cf:94:4b:ef:7e:21:af:ba:
                    8b:7d:ee:b1:89:09:3d:34:c7:89:95:66:47:d7:ac:
                    02:e0:af:4d:b1:3c:3d:06:15:8c:2d:5a:e2:5d:be:
                    a7:fa:65:8f:c6:5b:dd:6b:06:49:e8:f6:9b:1e:dd:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AB:51:0E:DC:D3:0E:EF:55:3E:96:50:9C:AB:1F:FD:3B:F7:B2:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/a45ed9891ebefc1daf2825f1096211931bbf962c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.124.0/22
                IPv6:
                  2803:c8a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266801

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:49:43:6b:50:73:c1:67:95:32:1d:06:4b:ca:53:64:a5:
         c3:b5:d4:74:17:e4:ab:6c:ee:09:80:e1:e5:4e:1e:ca:44:55:
         d0:64:a2:ca:09:c7:eb:67:02:0f:31:87:a4:5d:17:ad:a3:f9:
         43:8d:17:b5:56:b7:e0:c6:b6:72:d5:fb:c0:03:8d:f5:a4:93:
         b2:74:46:6f:b4:e3:8c:e6:12:b7:5b:a0:d7:0b:94:89:08:37:
         07:18:2e:47:00:db:bd:50:2f:ef:d0:3a:bb:5a:9e:12:f5:7f:
         01:04:b9:ae:4c:e8:03:03:64:92:87:77:24:65:af:03:f5:11:
         11:6c:9b:95:bb:97:d5:01:b7:6c:8a:d4:44:0a:0f:62:2c:cb:
         c1:84:14:ad:00:1f:2a:be:e7:b7:7d:24:f3:8d:04:bd:60:b2:
         2f:a3:91:37:76:e3:46:da:7d:34:e1:2b:97:00:a7:27:2d:e1:
         53:73:75:1a:77:e1:f5:a9:8b:65:52:4a:3e:ef:f7:ab:af:c0:
         9e:1e:4a:c4:37:99:bc:12:80:9a:81:54:da:0b:60:0a:e2:7d:
         5f:3a:ab:8f:82:03:0b:81:82:76:3c:34:b0:b5:f0:e3:95:c5:
         41:fb:20:1f:59:1f:4e:6a:66:33:f3:f9:8e:2f:29:fb:9a:4d:
         33:23:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:15 2024 by rpki-client on console-ams.rpki-client.org