Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer
File:                     a835ecfb849bdaf6e17afc5648e5c10499cc2864.cer (raw, json)
Hash identifier:          VtYJp16eyd4FD74rHgslQi0CIJD0fR+a4WigqoSeJg4=
Subject key identifier:   D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C08FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/a835ecfb849bdaf6e17afc5648e5c10499cc2864.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Nov 2019 19:15:18 +0000
Certificate not after:    Sat 29 Mar 2025 18:38:05 +0000
Subordinate resources:    AS: 267876
                          IP: 45.178.8.0/22
                          IP: 2803:b260::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17565947 (0x10c08fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 20 19:15:18 2019 GMT
            Not After : Mar 29 18:38:05 2025 GMT
        Subject: CN=a835ecfb849bdaf6e17afc5648e5c10499cc2864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:ea:bf:8a:d9:cf:6e:cd:55:bd:f7:e6:ef:
                    a6:cd:40:cd:8c:a2:2c:75:c5:9c:4b:e7:70:f3:23:
                    06:a2:2e:3d:79:1a:17:60:3f:20:89:2b:fe:80:1a:
                    a9:c3:1f:95:28:03:97:5f:dd:75:b0:d5:2f:20:f7:
                    a6:23:d1:83:8d:ed:34:63:ad:07:30:56:61:1a:55:
                    e2:d9:dc:1f:96:37:0d:b8:81:3e:bd:6a:e2:f2:f9:
                    8e:1b:0c:a4:f4:c0:64:8f:54:0b:59:c7:66:e1:f1:
                    c1:f7:ea:6f:44:3d:ea:67:e7:92:e8:ab:cb:fa:a5:
                    7a:ce:2e:20:62:b8:e4:61:65:ce:2a:aa:c6:ae:80:
                    71:e0:6c:49:52:42:b6:92:32:13:81:d4:cf:ee:43:
                    3a:b6:3a:7d:26:46:aa:70:62:4c:16:8f:1a:eb:4e:
                    22:db:83:e2:80:64:28:0f:da:7f:54:d1:82:fb:93:
                    64:59:33:6d:8b:26:5f:32:0a:18:64:92:f5:f9:4c:
                    5d:96:aa:54:c1:9d:de:43:5a:cf:2e:dd:84:3b:5e:
                    ef:7b:de:f2:1f:21:d0:75:5b:38:74:cc:cd:f3:a0:
                    69:de:a9:06:97:13:d7:96:b8:77:02:98:ca:e3:7d:
                    6f:95:ad:80:0b:e6:4b:c2:f0:c9:a2:96:27:29:85:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B6:03:67:61:30:CB:1C:5C:BC:81:6A:CB:65:8F:5E:B5:79:B8:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5893b567-9e59-47e2-88c2-36a4c03e08c3/a835ecfb849bdaf6e17afc5648e5c10499cc2864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.8.0/22
                IPv6:
                  2803:b260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267876

    Signature Algorithm: sha256WithRSAEncryption
         43:37:13:3d:89:59:64:c5:28:8e:29:b2:10:cb:e1:dd:8b:5f:
         a5:22:a7:49:05:9d:c9:13:8f:47:f3:92:69:3b:7e:8b:40:cc:
         db:b7:0d:e3:53:e8:8b:e8:24:cc:a0:9a:16:fb:82:0e:2d:20:
         b9:32:9f:26:dd:5a:87:5b:5f:ca:42:91:6b:2c:4b:13:01:80:
         7c:07:83:98:1e:fe:77:fc:a3:3e:76:2e:4d:35:5f:75:1b:a3:
         3b:95:47:e7:b1:04:7f:1d:43:75:d9:a9:72:22:10:ec:bf:9b:
         30:a6:71:4e:99:d3:70:0b:35:a1:81:3d:d4:09:51:cd:7a:75:
         e0:11:9d:72:67:cc:ad:3f:28:a1:7b:24:85:3b:d9:97:81:df:
         32:d6:99:00:7b:86:26:c4:b3:cd:da:ec:e7:52:97:dd:17:57:
         43:b7:dd:48:40:ff:87:60:54:b3:d5:42:2b:8d:6c:3a:a4:70:
         87:f3:81:79:e2:a8:32:42:ae:c0:7a:b9:14:fa:f4:b4:aa:96:
         d2:99:40:40:5f:84:cc:3a:81:bc:49:66:13:99:bf:a5:f2:4e:
         b0:88:bc:5a:64:f0:d8:8c:c3:6b:99:3e:5f:0b:ac:ec:a3:43:
         e4:c0:1f:e7:51:51:46:9d:77:3d:f6:a2:c5:d0:92:07:60:f5:
         84:72:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:49 2024 by rpki-client on console-ams.rpki-client.org