Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5d84d64584f2122b17de2fba26eed1aac7bf44c.cer
File:                     a5d84d64584f2122b17de2fba26eed1aac7bf44c.cer (raw, json)
Hash identifier:          RZJf7OCbvlGrVJpvDwpGW83zXpPu+BQj27bbcC3FgCs=
Subject key identifier:   E5:48:B3:A0:2C:D0:43:06:A9:F8:0C:FB:29:3C:2A:90:9A:54:6A:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E839C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/a5d84d64584f2122b17de2fba26eed1aac7bf44c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 18:27:19 +0000
Certificate not after:    Fri 18 Apr 2025 21:10:09 +0000
Subordinate resources:    AS: 270164
                          IP: 2806:3ea::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17728412 (0x10e839c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 18:27:19 2023 GMT
            Not After : Apr 18 21:10:09 2025 GMT
        Subject: CN=a5d84d64584f2122b17de2fba26eed1aac7bf44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:9d:e6:64:a2:d0:c7:e8:ca:9e:e8:69:e4:
                    e9:29:7f:9d:e0:98:72:c4:50:02:62:52:d6:76:e7:
                    e7:76:5b:91:9f:cb:e4:aa:f3:a2:78:1d:96:f0:a2:
                    d0:48:ed:56:e7:2b:23:60:21:7f:31:71:a4:2c:73:
                    1d:68:41:26:7a:c5:00:17:27:17:e3:66:33:b4:89:
                    81:cf:75:49:a4:69:61:4b:6f:74:80:af:df:df:6d:
                    bf:87:e4:75:f9:9a:31:48:56:f6:46:8b:01:d2:f2:
                    eb:5e:ff:d9:72:c2:76:79:e1:2b:7b:99:85:f5:5c:
                    74:34:2f:c9:1d:ad:83:37:cc:f5:3b:5d:50:c2:97:
                    f9:97:c4:55:fb:cf:dc:6c:d0:73:99:24:1c:03:4a:
                    39:1d:e9:d7:4b:23:a3:58:ec:b7:1d:2a:71:3e:d4:
                    2b:59:f6:36:0d:6a:8f:81:82:ed:ca:5c:81:ee:5e:
                    19:02:0d:d2:38:14:d7:82:3b:66:11:e0:75:9f:bc:
                    51:6b:13:16:9a:6e:00:68:af:33:bd:a2:34:d8:cc:
                    e0:b9:b3:de:73:c1:59:6d:da:10:df:7c:63:fa:f1:
                    3e:b3:99:d7:5e:d7:34:10:d6:50:bf:6c:0f:b1:56:
                    a1:79:23:b7:94:b8:33:10:33:19:2d:d0:7b:c4:2e:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:B3:A0:2C:D0:43:06:A9:F8:0C:FB:29:3C:2A:90:9A:54:6A:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/a5d84d64584f2122b17de2fba26eed1aac7bf44c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ea::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270164

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:dd:2b:5a:52:c7:d6:0a:06:4b:f0:17:a2:73:dc:56:4e:
         43:a4:26:e4:d1:97:21:f2:dc:1c:94:75:68:15:d3:0b:4c:2b:
         97:63:dc:d4:17:6e:8e:64:6a:c9:1b:98:7a:b3:7d:55:e6:73:
         b3:9a:62:94:ec:29:e1:34:d7:4a:f7:7b:9f:76:9d:44:0a:04:
         de:9a:a0:99:37:35:a6:bf:1b:85:21:00:49:6e:f0:05:a7:ed:
         87:5b:5d:c5:e2:33:0f:9a:4e:f9:3c:4d:ed:df:f4:2b:a5:18:
         cf:ef:08:e3:16:99:53:28:9e:59:df:77:cc:ec:70:24:af:e6:
         c5:16:b5:0e:b4:4a:cf:4c:3c:78:30:e5:e9:ba:3c:a2:73:1c:
         97:b7:5d:90:de:eb:a7:9e:27:2d:b0:38:7b:7d:fb:1d:9b:1e:
         c3:e3:8c:45:f6:b5:75:42:e7:28:32:5d:18:7f:98:f7:9b:5c:
         31:86:3a:de:61:cc:10:0d:1c:82:79:eb:93:bb:ec:54:9e:46:
         7c:1a:03:b5:32:49:34:60:89:7b:bf:1d:09:4f:74:40:58:ce:
         c6:ad:a1:3d:3a:f2:1b:14:b3:31:d3:c7:f7:f4:1e:3f:f0:38:
         9d:04:ee:a3:c9:bb:36:79:d0:a7:43:f4:23:34:4d:5a:ee:18:
         fb:e4:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:53 2024 by rpki-client on console-fra.rpki-client.org