Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8b8ea4db9b3064d98014509a427acd3924e9fff.cer
File:                     b8b8ea4db9b3064d98014509a427acd3924e9fff.cer (raw, json)
Hash identifier:          tohaDep7PIbnBJZR2sTYdsPOoCi0Mcn1iPiwORiG0ts=
Subject key identifier:   78:0F:E9:7D:39:4A:EA:7B:F8:B4:49:2E:B6:76:1E:1B:31:B1:4B:38
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A7664
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/b8b8ea4db9b3064d98014509a427acd3924e9fff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 May 2022 14:00:41 +0000
Certificate not after:    Sun 16 Mar 2025 20:12:06 +0000
Subordinate resources:    AS: 272147
                          IP: 181.232.252.0/23
                          IP: 2803:3090::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17462884 (0x10a7664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 14:00:41 2022 GMT
            Not After : Mar 16 20:12:06 2025 GMT
        Subject: CN=b8b8ea4db9b3064d98014509a427acd3924e9fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:a8:ab:a1:2f:3a:a2:f3:9c:6d:8c:1e:d5:
                    27:dd:94:86:eb:ab:14:26:a6:e4:1d:ee:b5:cb:61:
                    90:ad:2c:8f:27:7f:72:d7:61:55:79:95:00:3e:f8:
                    4c:8f:72:d6:36:6d:b0:d5:9f:91:be:a5:d7:b1:2b:
                    ed:c1:fe:e3:8c:c1:b8:36:b5:ce:da:b7:38:16:1a:
                    56:b6:2c:75:1e:61:e6:e8:f8:3e:b6:85:73:8f:b3:
                    87:cf:a0:72:dc:2f:d5:3c:8a:be:e1:18:12:28:50:
                    80:d3:27:3e:65:ca:b0:97:8b:9a:b6:49:bc:ba:a2:
                    a1:64:77:67:31:79:15:96:44:97:15:e7:c1:36:11:
                    53:9e:2f:bf:3e:ae:00:f2:45:62:26:03:dc:81:c1:
                    83:48:6e:91:3f:68:f3:86:7e:e4:de:0b:bc:ec:a1:
                    b4:62:15:8d:8d:24:1b:d3:fd:ca:38:82:d9:8d:19:
                    7e:77:17:42:32:fb:25:60:e9:b6:c5:1a:43:ba:c1:
                    b0:25:89:71:83:b1:e7:f9:fe:26:db:17:51:82:99:
                    63:9d:1c:8e:da:47:fb:07:4c:6c:5d:cc:fb:d0:66:
                    c3:22:da:18:94:7f:55:a3:af:17:98:21:aa:8c:b4:
                    f8:eb:de:de:cc:b6:9b:99:63:9c:e7:ed:9b:29:8f:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:E9:7D:39:4A:EA:7B:F8:B4:49:2E:B6:76:1E:1B:31:B1:4B:38
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/b8b8ea4db9b3064d98014509a427acd3924e9fff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.252.0/23
                IPv6:
                  2803:3090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272147

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:c8:b2:66:8a:c3:eb:e4:42:8f:94:c7:06:5f:82:e3:92:
         f4:e4:46:14:3b:78:36:cc:d6:2c:c1:af:6d:80:bb:eb:bb:89:
         77:7b:31:6a:bf:8a:d0:ee:ea:e7:e1:d6:4a:89:7b:e2:70:f5:
         3e:88:f0:71:d7:90:f4:4b:4a:83:1d:0c:4f:e3:ff:d8:1c:a8:
         7a:a9:a8:89:81:bb:9e:92:71:f1:92:fa:8a:68:42:f7:bb:a1:
         46:ba:94:f1:99:f7:bc:94:48:a2:22:34:1a:00:d7:f2:d7:87:
         33:f6:80:4a:3b:d6:29:47:da:4d:e3:79:c7:aa:00:fc:28:22:
         2a:29:ca:97:66:99:54:91:02:bc:04:2b:75:a2:38:c0:45:42:
         93:69:e3:75:d1:d5:bf:83:e1:9f:fe:43:1a:44:00:4b:47:3e:
         34:d9:31:b8:58:2d:68:01:04:e7:87:96:21:e2:92:8b:06:28:
         c6:cf:86:dd:d9:43:8c:bc:48:9e:bf:ad:42:69:47:11:6a:60:
         20:83:f1:81:d5:6e:5d:23:7a:cd:49:84:1e:04:e3:04:f0:39:
         2a:9b:de:90:2d:e5:05:a7:29:bb:cd:a7:02:4a:78:30:2e:26:
         c9:9a:c3:66:d3:cd:ee:a0:00:9d:da:b6:bb:53:6d:e4:23:7d:
         5d:34:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:59 2024 by rpki-client on console-fra.rpki-client.org