Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0b81b9bbaf1f7a18422f9988863a991944dce41.cer
File:                     b0b81b9bbaf1f7a18422f9988863a991944dce41.cer (raw, json)
Hash identifier:          Bc1E8mvmItEInwdOPa7cPpwf5j4brEDqluhNID4yTbY=
Subject key identifier:   62:39:B5:EA:5F:06:5C:FD:E1:13:DC:C5:79:91:3B:79:76:40:B5:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E594D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53c3449f-0a2c-4b88-bf86-54efc27a33bd/b0b81b9bbaf1f7a18422f9988863a991944dce41.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53c3449f-0a2c-4b88-bf86-54efc27a33bd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 14:14:42 +0000
Certificate not after:    Sat 16 Nov 2024 17:42:09 +0000
Subordinate resources:    AS: 267762
                          IP: 45.169.168.0/22
                          IP: 2803:13a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15045844 (0xe594d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 14:14:42 2023 GMT
            Not After : Nov 16 17:42:09 2024 GMT
        Subject: CN=b0b81b9bbaf1f7a18422f9988863a991944dce41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:44:81:8a:bd:9b:0a:e5:fe:eb:d4:a8:5d:
                    d3:cf:57:1a:70:db:1b:c7:ab:64:21:e7:d0:32:ab:
                    6b:6d:a0:63:3f:76:ef:99:3c:59:79:02:fa:9f:fc:
                    d5:82:81:44:92:19:f5:9d:88:d0:c3:70:47:d0:2b:
                    68:62:55:a5:7e:5c:bc:42:7b:2c:32:3c:4b:5d:19:
                    5b:87:ff:da:a9:4a:7f:a1:ab:ed:76:f6:8a:25:c9:
                    47:9d:ec:99:48:9f:51:22:38:62:04:42:6a:34:ee:
                    c1:8d:d5:35:48:b9:15:08:a3:3e:76:ce:10:88:74:
                    31:d4:90:bc:76:b6:0c:05:f9:b0:7e:11:a0:38:4c:
                    ca:d5:e8:59:d5:fb:77:70:a2:e7:f3:3e:dc:03:5c:
                    f4:10:6f:a2:5d:46:59:43:1a:e8:95:96:39:a6:70:
                    14:82:3d:3f:c3:a4:03:14:2e:d2:f0:b0:43:1b:29:
                    70:4c:8e:39:1d:a0:d4:10:f5:fa:3f:e1:81:33:11:
                    de:34:86:2c:1d:82:62:a3:05:16:62:a3:a8:ea:18:
                    20:ed:3a:1c:54:04:b3:f3:9e:cf:8f:2c:cf:34:1a:
                    cd:5c:22:52:7d:ca:2e:53:4d:11:3b:83:60:78:87:
                    18:d0:71:95:c6:bd:80:b4:27:19:e0:cb:d7:04:a5:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:39:B5:EA:5F:06:5C:FD:E1:13:DC:C5:79:91:3B:79:76:40:B5:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53c3449f-0a2c-4b88-bf86-54efc27a33bd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53c3449f-0a2c-4b88-bf86-54efc27a33bd/b0b81b9bbaf1f7a18422f9988863a991944dce41.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.168.0/22
                IPv6:
                  2803:13a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267762

    Signature Algorithm: sha256WithRSAEncryption
         51:83:21:ed:0e:7c:97:45:f5:d1:48:4e:56:84:59:aa:f0:b2:
         66:01:89:68:2e:d8:34:e4:7d:d7:c7:98:33:30:ec:e7:e5:39:
         28:95:d5:fd:3a:ed:55:33:26:e3:0e:5d:0e:29:4a:ed:be:a4:
         55:e4:00:95:8a:e0:2a:28:20:a1:f5:0c:f7:a8:9d:99:d7:39:
         7d:3a:cb:a1:60:21:7e:a3:9c:46:e1:f6:96:7c:f3:76:42:39:
         6b:d1:15:1e:b9:9c:6c:a6:5e:36:a0:29:2c:c9:4e:2b:c8:fc:
         b0:f5:ee:0d:06:b4:d0:9c:4f:63:d7:06:cc:9f:b6:bd:25:d6:
         e4:98:50:81:01:9e:09:f7:46:45:93:07:73:00:67:bb:8f:25:
         6b:0d:84:8d:e5:bc:7d:72:fb:ca:ef:0c:bc:20:15:db:d6:66:
         ae:b6:d0:f3:63:15:e2:69:0a:b8:a0:6e:5e:1e:8d:90:1a:6f:
         07:c4:85:a1:ec:fc:cd:7a:d8:11:36:bd:d4:2c:69:5a:62:f2:
         c8:a9:d0:d7:80:74:7a:67:c8:63:81:22:ab:83:4f:c1:91:a5:
         40:aa:92:b6:71:0d:80:48:ed:db:e6:b5:53:79:79:6e:69:46:
         8a:a9:67:d8:23:a7:78:e6:e9:5e:0d:93:f2:74:42:b0:9f:9c:
         99:13:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:02:11 2024 by rpki-client on console-fra.rpki-client.org