Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7189a5523634c1ab983f4ec618ff1fa18fb9e5c.cer
File:                     a7189a5523634c1ab983f4ec618ff1fa18fb9e5c.cer (raw, json)
Hash identifier:          apdN415K0YhSfDsxlCau7nXIesY3AJwRfYi4gnYHupg=
Subject key identifier:   F2:39:E9:6B:BA:F7:56:BB:F6:22:9C:C8:88:BB:6E:DA:A8:25:DA:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A4570
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10748aa3-5b98-4a1a-9547-c1091d875365/a7189a5523634c1ab983f4ec618ff1fa18fb9e5c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10748aa3-5b98-4a1a-9547-c1091d875365/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 18:05:08 +0000
Certificate not after:    Sat 15 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 52504
                          IP: 190.180.152.0/21
                          IP: 2803:5e80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17450352 (0x10a4570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 18:05:08 2023 GMT
            Not After : Mar 15 06:00:00 2025 GMT
        Subject: CN=a7189a5523634c1ab983f4ec618ff1fa18fb9e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:50:a5:87:db:7d:4d:2c:17:4c:03:b6:9b:
                    f8:ab:6b:49:30:2a:81:2c:46:b5:12:7d:7e:d9:f0:
                    94:7c:38:7a:dd:5b:95:7d:98:a9:91:3e:dc:4c:8e:
                    b9:35:a0:08:d5:37:f3:36:fb:20:c2:14:f5:7a:de:
                    9a:82:8a:fa:63:03:60:74:d6:ae:81:5e:39:b7:cf:
                    ab:04:ce:5b:15:b0:95:f6:6c:b0:db:83:7e:52:0c:
                    9c:48:99:9a:9b:c3:61:7b:7f:4b:57:dc:04:47:ce:
                    86:3d:98:17:1d:b3:36:f4:73:d2:9c:27:c0:a0:ba:
                    53:77:ba:73:91:97:a7:b6:dc:b0:77:6e:22:f1:57:
                    2b:5b:2e:46:36:51:5d:95:c5:c1:7e:a5:8d:3d:12:
                    42:69:34:52:fe:7d:71:66:66:3e:7a:8b:43:7f:ae:
                    75:b2:a1:41:7e:99:4b:42:a8:cb:a7:59:3f:76:16:
                    18:97:f5:6d:76:20:21:7e:63:df:3a:eb:3b:e5:e5:
                    05:d0:2f:01:cc:d6:d3:c3:3b:cf:50:dd:3b:a0:58:
                    9e:47:26:a5:17:62:ce:be:b4:41:48:bc:6a:81:56:
                    ac:89:e5:25:6e:cc:7c:cc:23:92:b3:d7:42:e8:eb:
                    5b:9b:a2:8d:6a:cd:7a:17:5b:e6:b9:83:e6:58:8f:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:39:E9:6B:BA:F7:56:BB:F6:22:9C:C8:88:BB:6E:DA:A8:25:DA:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10748aa3-5b98-4a1a-9547-c1091d875365/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10748aa3-5b98-4a1a-9547-c1091d875365/a7189a5523634c1ab983f4ec618ff1fa18fb9e5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.152.0/21
                IPv6:
                  2803:5e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52504

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:c3:e2:4f:c4:af:6e:52:d8:c3:48:bb:82:f0:ab:d8:cd:
         7f:b7:b9:1c:e1:c0:a4:6a:91:b5:6e:9a:a5:5d:39:e5:7b:fa:
         42:b4:e9:a9:83:69:5c:d2:05:44:c4:d3:df:2f:70:8e:41:fe:
         5b:90:c2:10:ab:02:29:31:fa:ca:be:13:b6:5b:3f:81:5c:c1:
         95:f9:40:1e:a4:7b:f1:7f:f0:1e:84:46:f3:5a:ce:48:63:ac:
         9a:cc:26:d9:c1:e2:b9:05:42:ca:6e:f4:c8:87:e0:5d:21:8f:
         12:f5:82:77:c4:72:9c:6f:f4:c1:71:54:c3:e8:c2:32:19:85:
         9c:1f:bf:06:37:6e:01:83:88:8f:08:9a:f1:9a:72:5e:5a:89:
         0e:a8:6f:1d:f3:e0:49:e3:d5:60:a6:7d:b5:73:58:32:1f:53:
         c4:56:e2:24:33:da:56:5b:b2:16:64:f3:76:e1:fd:f0:31:68:
         5f:0f:c3:c8:bc:aa:16:82:91:b4:3d:0b:4a:af:ae:ec:03:78:
         8a:3d:88:dc:a0:57:36:11:d3:7b:a0:f2:a8:2c:ac:81:52:0e:
         44:e0:35:15:1c:e9:11:f6:b5:07:9e:44:48:1d:51:a3:91:35:
         ba:a7:ee:9b:4a:cb:18:07:0a:cf:4d:be:a9:92:50:8b:97:54:
         aa:69:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:16 2024 by rpki-client on console-ams.rpki-client.org