Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer
File:                     b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer (raw, json)
Hash identifier:          Fz+Y7GQ2Qdt/3bdHJ0OQC8TfJ+EOR6kRrLfOSOxSpAI=
Subject key identifier:   E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC3A60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Apr 2021 19:10:31 +0000
Certificate not after:    Wed 03 Jul 2024 14:24:54 +0000
Subordinate resources:    AS: 271779
                          IP: 200.106.184.0/22
                          IP: 2803:6fe0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15481440 (0xec3a60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 19:10:31 2021 GMT
            Not After : Jul  3 14:24:54 2024 GMT
        Subject: CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:e2:50:49:08:78:c4:02:95:45:ce:c2:79:
                    23:cc:69:dc:c3:41:c6:ac:50:dc:45:0e:b7:9a:8c:
                    65:d0:a4:06:59:7b:17:3d:ef:e7:b0:84:90:11:4c:
                    d1:b1:2b:08:12:82:b0:08:79:94:69:35:f9:6f:8c:
                    a3:23:ba:8c:14:a1:2a:1f:f5:28:ca:ea:f7:07:97:
                    35:f7:36:5b:b2:7b:91:66:56:09:39:09:d6:6d:c1:
                    5e:7b:67:07:80:5b:95:ce:62:9e:92:87:9f:a6:74:
                    7a:8b:28:36:df:a8:3d:5a:0d:0c:9e:65:dd:34:79:
                    84:dc:85:54:43:c5:7a:70:29:54:bc:76:25:38:87:
                    9a:75:7b:01:5e:ea:da:c6:d3:b0:eb:b3:6a:8e:16:
                    a7:e5:d5:e9:71:77:56:5a:71:59:00:18:a1:83:e5:
                    d4:0e:dd:45:7f:05:60:93:64:d2:a1:ae:00:20:10:
                    94:4c:da:ed:00:e7:bd:bf:6b:d0:36:65:34:32:2c:
                    8a:57:83:2e:ab:ce:7a:6f:96:91:df:54:91:be:a4:
                    c6:d5:60:f7:6c:64:39:cf:59:72:97:a7:21:7d:08:
                    69:f3:a4:e1:7f:4a:57:d9:a9:c3:30:fa:cc:80:a9:
                    80:e0:e1:0f:ed:87:57:4c:26:6c:76:b4:a7:1b:1c:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.184.0/22
                IPv6:
                  2803:6fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271779

    Signature Algorithm: sha256WithRSAEncryption
         ab:b8:f8:fd:7c:07:21:c2:f8:c7:75:86:11:99:27:34:db:f6:
         35:05:21:50:a4:bf:6e:79:f6:32:30:4f:5c:d4:6b:78:69:84:
         ab:61:ba:33:1c:81:c9:b0:a9:57:05:83:be:4d:15:71:6a:b9:
         4a:f1:34:9b:0c:32:1d:11:86:d4:39:62:a5:21:f4:c9:5e:32:
         69:25:6f:17:72:5b:4a:d2:39:0e:ce:9c:f6:c6:0b:1e:4e:d7:
         de:53:a0:99:a8:eb:ad:7b:ed:bd:95:58:65:bd:ce:2b:5d:4e:
         38:48:86:99:a3:8c:1e:4c:ee:4c:ed:bd:79:51:47:98:cf:9f:
         69:6f:26:34:32:79:a6:d2:75:20:f0:66:0b:51:e8:b1:06:f7:
         be:ac:8b:34:68:86:84:85:0b:b9:55:32:01:d6:ac:98:09:ad:
         e2:d4:e4:ea:9d:50:40:79:01:7d:18:41:28:15:91:28:5b:69:
         3f:d0:6b:12:3d:00:dd:c9:ec:34:3a:87:5a:82:85:d8:46:0b:
         7e:ce:da:b0:86:77:3f:85:75:1b:be:f7:32:ca:71:50:05:35:
         ee:1b:35:bd:a9:4b:ca:ef:b6:f8:ca:12:75:94:2e:db:3e:fa:
         11:f0:43:db:e2:30:80:27:55:be:c7:35:65:95:53:51:01:7b:
         55:09:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:19 2024 by rpki-client on console-ams.rpki-client.org