Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c393854a5fa3ffc8b56bf37cb77ed164548e2359.cer
File:                     c393854a5fa3ffc8b56bf37cb77ed164548e2359.cer (raw, json)
Hash identifier:          mDRv3FIOJS9EJ1tik+cjte9KcrDxCG7c2A6VsOs81TU=
Subject key identifier:   62:8F:79:CB:F6:CF:8A:48:2F:33:3E:F3:7D:63:DD:72:D7:80:41:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5A73E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b96befc-2bdb-4b9e-9e4c-a21571fe69a6/c393854a5fa3ffc8b56bf37cb77ed164548e2359.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b96befc-2bdb-4b9e-9e4c-a21571fe69a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 19:05:47 +0000
Certificate not after:    Mon 30 Sep 2024 02:01:45 +0000
Subordinate resources:    AS: 265564
                          IP: 45.166.100.0/22
                          IP: 2806:314::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15050558 (0xe5a73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 19:05:47 2023 GMT
            Not After : Sep 30 02:01:45 2024 GMT
        Subject: CN=c393854a5fa3ffc8b56bf37cb77ed164548e2359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:8a:ea:6c:da:5d:75:da:ba:90:9a:c5:c2:
                    0b:b8:bf:41:58:86:5d:bc:7e:e5:27:8a:b7:ff:eb:
                    17:9c:4f:da:e7:0a:d0:e8:82:53:2c:af:46:56:99:
                    d5:2f:96:e2:2e:f8:82:3c:3b:cd:06:a7:af:41:6b:
                    e2:59:34:ed:53:1a:3b:c2:a8:b7:93:6e:8b:77:45:
                    06:0a:bf:0b:32:a0:7e:cc:48:72:c9:31:b7:2f:b6:
                    70:e5:01:ef:4f:7f:2b:a2:02:09:d9:0e:63:f0:3f:
                    ac:c5:46:9d:36:a0:84:7b:3b:30:e1:9e:b3:83:5b:
                    cc:e7:53:c5:99:44:ba:d6:a2:e5:83:40:a0:81:d9:
                    e0:98:a1:ce:40:37:ce:7b:30:f9:5f:0f:bb:bc:38:
                    44:cd:0d:82:f6:f4:ab:7c:01:4e:03:fd:29:0d:38:
                    7d:eb:7a:0d:40:d5:ae:95:05:d3:65:43:3f:9a:08:
                    87:f2:41:f6:c3:28:f3:84:22:f7:ce:3a:9d:88:c9:
                    a4:de:08:50:48:71:85:5a:7a:eb:33:25:4a:3e:80:
                    18:23:20:99:be:27:37:fe:67:e5:e7:f7:a6:ae:51:
                    01:f0:a2:90:b2:d7:73:38:ee:4e:2f:ca:77:1f:2b:
                    13:06:3c:88:5c:5f:13:2d:67:35:af:72:7c:17:7d:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:79:CB:F6:CF:8A:48:2F:33:3E:F3:7D:63:DD:72:D7:80:41:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b96befc-2bdb-4b9e-9e4c-a21571fe69a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b96befc-2bdb-4b9e-9e4c-a21571fe69a6/c393854a5fa3ffc8b56bf37cb77ed164548e2359.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.100.0/22
                IPv6:
                  2806:314::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265564

    Signature Algorithm: sha256WithRSAEncryption
         38:e0:54:98:94:64:e6:02:da:60:76:ff:19:cc:6a:5a:41:3d:
         e8:84:21:cf:30:bf:3b:e2:fa:fc:ef:4d:b8:db:32:87:d6:6d:
         2a:33:0f:80:01:72:9f:c8:38:fa:b4:0b:ff:6a:6a:cd:77:77:
         00:09:37:ea:6a:2e:bb:9e:90:3e:0e:0e:fc:7f:95:a3:bb:99:
         4b:80:a7:aa:b2:40:94:ff:e3:9a:15:f3:b9:78:7b:e2:84:9d:
         53:3c:ce:61:75:5b:0b:38:02:ed:35:d1:ef:3e:89:8f:06:ba:
         fb:31:16:90:3f:66:c7:a5:b7:5e:a0:a3:86:85:77:b1:38:d5:
         bf:74:59:2b:7e:f3:e3:b2:97:a2:47:4b:62:80:c1:a2:a5:71:
         c7:7a:ab:af:b5:f5:7d:cc:ca:2e:d0:bf:6b:c4:be:6a:c7:9d:
         48:4b:87:b5:25:8f:c2:fc:32:00:d7:ec:c4:4a:ef:7a:87:9c:
         bb:30:66:cd:ba:02:6b:f9:4d:c4:fa:8b:b2:d4:77:a9:14:1b:
         49:32:1f:62:c4:09:e5:e6:89:7a:85:7f:f8:91:1b:86:73:fe:
         91:73:67:52:6c:fc:a5:ed:60:6b:a8:0c:62:03:3c:ec:98:dd:
         e1:b6:ca:0c:c4:cf:e7:28:6c:68:ef:69:08:8d:d4:b0:2a:8f:
         00:38:bb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:50:33 2024 by rpki-client on console-ams.rpki-client.org