Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.cer
File:                     a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.cer (raw, json)
Hash identifier:          LIShXkj9C67fvZ5KAQVzW9T0ZYUJ4YDcww8JSwDRyLY=
Subject key identifier:   06:AA:E5:53:5F:36:8E:89:85:6C:60:3A:76:24:ED:60:1C:F9:69:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6660F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 08 Jul 2020 21:38:06 +0000
Certificate not after:    Tue 24 Sep 2024 05:00:00 +0000
Subordinate resources:    IP: 45.227.176.0/22
                          IP: 2803:2120::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16147983 (0xf6660f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  8 21:38:06 2020 GMT
            Not After : Sep 24 05:00:00 2024 GMT
        Subject: CN=a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:ab:d7:8e:f8:e5:36:c2:bc:18:e2:e1:aa:
                    c0:19:7d:43:4b:38:72:25:cd:15:3c:1e:cf:31:43:
                    31:5c:ac:76:d3:d2:b8:f6:11:2b:2b:76:a0:d0:34:
                    9e:01:0f:75:56:0f:d1:95:a4:14:11:02:4e:d7:7c:
                    b8:0a:f1:aa:fb:fd:81:32:0b:dd:0c:09:ff:3e:82:
                    53:ad:56:cb:1f:49:94:37:90:ab:c9:75:66:7e:c7:
                    db:94:fe:06:08:12:0c:e4:b0:d8:72:5a:74:9a:9d:
                    c9:a3:b4:17:19:78:1d:ed:9e:e4:a8:32:4a:7a:85:
                    32:17:61:3c:95:3f:0d:79:35:34:d2:54:cb:a3:de:
                    ea:d6:3c:75:02:dc:85:39:79:57:0c:6e:33:43:d0:
                    5a:bb:ac:fb:60:67:fe:d5:db:79:f6:4e:cc:46:3e:
                    e4:39:af:d5:ba:89:58:0d:22:b7:c2:e6:4a:16:4d:
                    ee:1f:c3:07:5e:27:af:3d:37:25:a1:63:a6:5e:2e:
                    c0:a6:9b:7b:35:8f:7c:d3:6d:a7:fe:88:41:03:bf:
                    b7:e1:c4:12:3c:08:9e:10:ad:82:5a:0a:f5:6a:50:
                    7e:83:b6:cc:0c:5c:66:be:8c:00:ed:6c:47:db:eb:
                    a6:48:ff:98:cb:5e:c1:4c:cc:a2:3d:10:74:85:e2:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:E5:53:5F:36:8E:89:85:6C:60:3A:76:24:ED:60:1C:F9:69:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.176.0/22
                IPv6:
                  2803:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:d9:15:9d:40:a8:55:08:f4:6b:c4:aa:48:77:bd:d9:b0:ef:
         af:09:e1:95:c6:06:af:3f:df:58:e1:af:f0:a9:49:0e:48:45:
         ec:fe:83:7f:3e:22:74:9b:4e:ac:f2:8e:db:ef:f9:89:44:2f:
         de:cb:f5:5d:3b:97:c7:7c:85:89:35:67:86:d6:d6:61:14:d6:
         36:35:3a:f3:36:f4:4a:03:ef:d8:7b:97:2e:0d:32:c1:54:7b:
         59:0c:91:8b:7b:fe:c6:0c:de:59:d1:20:01:0f:da:9d:6f:b2:
         a0:89:f2:3b:d2:01:e1:ed:35:89:68:93:d8:fe:89:40:c8:52:
         8f:f1:ad:5e:ef:4a:5c:cb:52:43:96:fb:9a:c7:bf:e1:e3:96:
         60:97:c3:71:43:4a:8d:56:5e:1c:55:e3:c5:09:66:2f:b6:b5:
         ed:21:18:2a:e8:84:98:c0:61:86:87:88:fb:b0:e7:c8:0f:40:
         53:76:fc:97:3d:2c:f5:d1:db:6d:5b:04:95:34:5e:96:8d:c6:
         02:4f:5f:84:86:82:0c:f4:29:36:9a:d8:34:5d:39:ec:a9:5c:
         e8:8c:16:db:da:bb:67:d3:21:4c:f0:12:82:37:c5:a8:b4:e6:
         fa:02:54:76:26:c4:e9:c2:e3:8d:ed:d0:90:6b:96:b6:ee:7b:
         6f:b4:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:16 2024 by rpki-client on console-ams.rpki-client.org