Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abc5395f6470797c32ddfe8eb37ee50a47c505fd.cer
File:                     abc5395f6470797c32ddfe8eb37ee50a47c505fd.cer (raw, json)
Hash identifier:          YAmoJZWjBmNEfnvfityH6jUZBBsGL/3sZd+rSDzINEE=
Subject key identifier:   13:A6:72:D8:AB:A6:7F:39:F5:C3:15:54:9E:93:1D:0E:9C:E8:DE:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CB16E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/abc5395f6470797c32ddfe8eb37ee50a47c505fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Sep 2022 00:19:50 +0000
Certificate not after:    Fri 04 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 61500
                          IP: 138.121.80.0/22
                          IP: 2803:c440::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17609070 (0x10cb16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 00:19:50 2022 GMT
            Not After : Apr  4 06:00:00 2025 GMT
        Subject: CN=abc5395f6470797c32ddfe8eb37ee50a47c505fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:75:be:7f:5a:a3:b3:6f:1d:89:ff:20:8d:
                    55:13:a9:86:c8:da:7b:a2:36:a0:b7:b2:22:49:07:
                    2b:47:a2:fb:f4:5b:0c:4f:5a:ee:30:d2:97:9c:44:
                    b9:03:b9:17:77:08:a5:c4:66:b9:7b:a4:32:86:d4:
                    fd:cf:ff:e8:ee:1f:18:86:d0:41:11:35:af:b9:6b:
                    fc:7b:af:f3:00:2c:f0:3e:08:de:5c:7d:18:2f:e5:
                    db:a6:29:bb:61:c9:d1:07:3c:01:29:1d:ce:b8:54:
                    05:b2:57:39:aa:e7:34:c5:63:c1:2e:d8:5d:f2:bc:
                    3d:e1:67:01:e9:f6:b5:e0:d7:55:ab:74:d2:43:e2:
                    dd:39:36:52:18:37:49:d4:da:77:67:d4:df:b5:d1:
                    26:04:12:53:6f:fa:3b:4e:a0:20:47:3c:4b:5b:a0:
                    30:8d:48:cf:77:82:92:65:94:34:13:cd:a1:15:e6:
                    a5:c0:f4:31:be:c8:d9:80:8e:84:3c:40:da:6c:b8:
                    4c:1f:3f:2c:d5:2d:02:5b:53:2d:97:7b:08:59:d0:
                    b2:66:cc:6e:af:dd:44:0f:31:33:af:a2:52:d5:25:
                    40:ac:e8:ca:5e:08:78:1b:02:90:a2:47:1e:17:9a:
                    9d:f6:d6:4e:5c:6f:97:f7:46:18:80:30:88:b3:ad:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:72:D8:AB:A6:7F:39:F5:C3:15:54:9E:93:1D:0E:9C:E8:DE:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/abc5395f6470797c32ddfe8eb37ee50a47c505fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.80.0/22
                IPv6:
                  2803:c440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61500

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:68:48:9c:23:56:26:28:c2:36:d5:25:55:63:7d:c1:a5:
         4f:03:87:12:e9:3f:b6:00:f1:c7:15:ab:94:6c:6e:bd:d6:63:
         c8:7a:96:59:5f:bf:be:fe:13:cd:b5:06:15:9d:de:3c:d6:2a:
         80:db:64:9b:f3:e6:8f:b0:de:6f:44:21:8d:75:3e:99:ac:db:
         9c:24:42:6d:11:5a:3f:bc:33:f5:85:7a:35:aa:9c:91:00:d1:
         27:1d:9b:9e:93:3b:df:0c:e1:ac:bd:e5:a6:3a:a4:3b:77:3a:
         4b:c3:e7:8e:69:01:33:af:c6:47:a5:21:48:cd:41:f7:f8:20:
         9f:d4:9d:7c:43:9d:35:32:35:a0:af:3c:4a:68:42:98:c2:08:
         83:6a:a1:42:c9:44:30:b9:79:aa:66:44:71:db:0e:7f:83:7f:
         47:3a:aa:61:23:ba:b6:19:65:5c:df:93:aa:03:6b:3a:29:f2:
         5c:00:cf:24:08:47:14:35:94:2b:3f:8c:24:b0:8c:03:86:26:
         28:7e:8d:2a:06:04:23:90:50:0c:51:d3:7c:fe:92:e4:7e:73:
         bc:88:e3:d2:bc:01:05:b8:5b:38:e5:6d:50:ed:ac:73:a1:ff:
         84:10:cf:92:ae:5b:1e:d1:41:fe:2f:13:c6:5e:42:ac:ad:c9:
         52:00:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:39 2024 by rpki-client on console-ams.rpki-client.org