Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer
File:                     b825aea653e97a291ec1350029e2e92dfa3c3746.cer (raw, json)
Hash identifier:          khPDyURiS4qgcpbz4+8TvANFoFK9wy3x9S/jK+SVf+Y=
Subject key identifier:   76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AC41C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 15 Jun 2022 14:35:17 +0000
Certificate not after:    Tue 18 Mar 2025 15:30:32 +0000
Subordinate resources:    AS: 269997
                          IP: 181.192.100.0/22
                          IP: 2803:11e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17482780 (0x10ac41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 15 14:35:17 2022 GMT
            Not After : Mar 18 15:30:32 2025 GMT
        Subject: CN=b825aea653e97a291ec1350029e2e92dfa3c3746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:80:9f:b2:08:d4:f1:59:8b:46:ed:ce:ff:
                    ef:e4:69:57:8b:a4:b0:4b:e6:6e:58:fd:5b:8f:fc:
                    26:51:fd:9e:f6:59:bc:d2:05:4b:70:3b:f4:6a:75:
                    b6:3c:f3:db:6b:3d:f4:7a:c2:cc:ce:47:61:e2:aa:
                    db:05:03:e0:ac:03:67:a1:ba:38:66:cd:b2:73:db:
                    bb:c4:28:85:d7:3e:88:84:a2:cf:f7:4e:9d:2e:bb:
                    fb:18:27:79:77:7e:78:b2:e3:7e:7c:1d:4c:bc:93:
                    6a:30:92:ac:49:61:1b:53:e3:03:61:e2:ba:53:54:
                    fc:4d:88:04:a6:d8:fc:ea:5c:1e:df:36:27:23:49:
                    6c:11:42:01:c0:c2:df:a1:a5:d4:87:d4:ff:f0:8c:
                    d9:a8:21:a3:5f:fc:75:a1:a2:4f:a9:0d:71:04:6b:
                    07:9f:ed:93:88:2e:74:26:a0:5a:0b:c4:91:1d:86:
                    02:df:18:eb:c0:59:58:b0:92:97:d9:81:84:a6:54:
                    4d:f7:65:8c:30:36:92:78:53:4a:9e:f2:99:80:2e:
                    65:d4:4c:d1:66:92:50:86:e2:ac:ec:19:02:b2:d3:
                    27:8c:7a:05:28:69:44:55:35:09:77:23:93:60:17:
                    1c:ae:00:8a:fd:60:c5:f4:31:2c:19:ff:3c:b7:7c:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.100.0/22
                IPv6:
                  2803:11e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269997

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:51:d2:d7:48:22:59:09:57:43:9c:7f:dd:ec:88:43:a8:
         5f:a0:a7:68:07:91:b9:a5:4f:5b:d8:57:04:b3:43:3b:63:1b:
         ca:38:96:5c:01:b3:6f:5b:ad:79:9c:e7:e8:8c:e9:40:8f:f9:
         44:fd:77:a3:0e:f6:fa:fd:c0:e8:d0:43:26:b7:e9:38:74:06:
         f2:dd:b7:67:7e:7e:de:d7:57:0c:aa:d7:5b:aa:0d:ae:d1:b5:
         87:21:6f:22:fa:d3:92:8d:32:87:90:a6:48:e9:75:29:16:cc:
         27:d8:96:2a:63:be:f6:bf:bf:84:0b:58:07:40:15:7f:53:77:
         4a:61:eb:99:4e:0c:ea:e3:41:ae:dc:dd:af:d1:a9:f4:3e:1e:
         0f:0b:76:d3:22:be:34:be:60:78:5f:0f:11:9d:2a:3d:65:a8:
         2b:53:16:e7:95:0e:81:15:62:82:8f:c2:bb:14:c6:c2:c2:f8:
         13:db:43:15:5a:8c:c3:1f:5c:64:ba:4b:f5:73:b7:7c:de:13:
         06:e0:fc:7c:66:98:da:8b:47:91:49:6c:59:d4:1a:a9:b9:22:
         32:7e:eb:ec:05:f9:16:01:35:3d:ba:d0:b4:6e:a3:0e:1f:7f:
         dc:e5:24:6a:6b:d8:3a:99:61:e1:11:a0:5a:4e:8d:d8:e2:09:
         5c:af:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:13:50 2024 by rpki-client on console-ams.rpki-client.org