Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer
File:                     a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer (raw, json)
Hash identifier:          Cmh7JptxgugWHbJwZ0tKcwbNQ3NBvJal/+jFY0RPmYM=
Subject key identifier:   34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1AB7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Tue 18 Jun 2024 18:54:24 +0000
Subordinate resources:    AS: 263799
                          IP: 168.195.216.0/22
                          IP: 2803:ff40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14789502 (0xe1ab7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Jun 18 18:54:24 2024 GMT
        Subject: CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:a1:38:d8:6b:44:18:13:2c:32:f3:4d:3d:
                    3d:90:3e:91:d0:f6:0e:4f:c7:45:a0:e4:c3:42:96:
                    b5:20:ea:37:78:f3:3b:a5:c1:68:7e:7f:14:44:5c:
                    b9:8f:ad:27:cb:03:c8:14:f2:8f:d0:f0:21:23:e1:
                    0e:10:04:7a:83:46:0f:eb:db:04:bc:92:83:11:7b:
                    40:bf:38:c8:30:62:7a:cf:7a:0b:bd:60:08:78:5a:
                    22:30:c9:d6:ad:67:4f:9f:c1:bf:47:2b:24:ef:ed:
                    f4:15:ba:75:79:f7:ad:7c:aa:63:7a:ce:be:23:8f:
                    4b:90:9e:b1:4e:a2:1b:1e:94:ab:44:84:65:f8:a8:
                    81:49:1c:73:a8:42:c6:78:75:af:cd:c9:9d:b9:87:
                    89:36:2f:af:05:70:b6:04:e0:5a:a3:ac:bf:42:52:
                    52:a9:c4:6a:da:3a:78:e3:9e:e9:5e:26:35:d6:06:
                    d1:5e:d1:43:38:9f:22:0d:82:34:3a:f7:fe:da:ad:
                    d9:54:b6:be:79:9b:03:40:bf:0d:d0:b2:63:49:a8:
                    a7:a9:e4:cc:49:24:c0:4f:ba:6b:1f:7d:5b:5c:59:
                    6f:07:34:fd:b7:e2:7d:30:b2:4c:49:09:74:af:49:
                    81:96:6a:26:18:c6:50:29:72:f8:20:be:d9:cf:52:
                    e1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22
                IPv6:
                  2803:ff40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263799

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:58:f0:eb:b4:f9:e3:50:10:38:30:7a:7a:b2:f8:18:07:
         f4:be:1f:1d:49:3e:a5:d4:24:15:c5:51:80:b6:a2:86:9d:e1:
         b8:04:21:27:c4:44:34:12:5d:d9:97:05:f1:06:8b:0d:80:ff:
         32:d5:7e:07:bf:16:ed:d2:63:23:ea:90:1c:3a:fe:46:b0:01:
         e9:cf:7b:fb:99:3d:52:3e:9c:d7:13:c3:38:a1:2c:fc:42:fc:
         ee:35:2d:58:02:d7:ab:20:ba:cb:9f:2c:49:ac:ce:ec:a0:b3:
         43:9a:ac:d4:ba:36:ea:b9:01:08:2f:36:36:1f:6c:b7:79:8c:
         6e:d2:13:81:e1:70:43:a4:24:6d:aa:01:ee:11:32:db:cb:87:
         5a:32:d5:be:da:96:39:10:37:38:14:da:5d:6f:24:cc:ac:b6:
         f3:8d:41:9d:8b:a3:9e:32:79:73:58:a2:87:7c:19:f0:15:a7:
         2c:12:ba:62:c5:e8:88:58:94:58:b1:ee:e4:a3:72:c7:13:42:
         36:d6:e0:ef:db:be:85:d4:09:e0:3e:1f:9d:1b:71:d5:98:8f:
         9c:89:11:3f:6f:6f:d9:65:f7:44:c7:91:97:5d:d3:e2:2c:08:
         86:21:6e:24:c2:90:9e:60:36:59:bd:ba:3c:92:a8:de:d4:87:
         11:b1:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:17 2024 by rpki-client on console-ams.rpki-client.org