Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer
File:                     c51088545d67fa073263cda959bf704f45a92d2e.cer (raw, json)
Hash identifier:          Az4b+ut7S2+RK1JCfHvDpvo9I9Ss5yAAdbV243Lri7Q=
Subject key identifier:   9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C92629
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Jan 2022 13:03:17 +0000
Certificate not after:    Mon 23 Oct 2023 16:30:19 +0000
Subordinate resources:    IP: 2801:111::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 May 2023 19:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13182505 (0xc92629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  7 13:03:17 2022 GMT
            Not After : Oct 23 16:30:19 2023 GMT
        Subject: CN=c51088545d67fa073263cda959bf704f45a92d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:cd:e1:20:f4:01:4a:cf:d4:fe:a2:51:ec:
                    ac:84:be:21:43:a1:70:97:68:d4:fb:95:cd:b5:18:
                    d4:97:bc:bb:fe:93:63:b8:98:b5:94:09:df:09:b6:
                    9a:0e:a7:b5:47:69:f5:b9:db:73:12:61:fe:15:39:
                    61:04:fe:b0:60:bb:59:e6:a9:1b:83:26:c9:eb:47:
                    95:9e:90:61:a9:0e:05:03:58:70:75:a4:73:32:75:
                    9e:e4:45:a0:4b:eb:27:f3:23:c1:55:f2:fe:c7:ed:
                    73:5f:83:1a:74:fa:13:ee:ba:88:52:30:5c:f9:77:
                    33:48:b0:9c:ab:77:e1:ff:8b:3b:30:a5:89:35:ca:
                    bf:14:1f:a4:f3:53:19:8d:e1:95:00:de:8a:85:4b:
                    4c:da:de:b3:ea:99:9b:b0:f8:2f:70:24:b6:0a:af:
                    3b:c9:41:23:40:b5:d8:f9:1a:85:84:32:fb:0f:a7:
                    cd:4c:01:84:92:f0:cc:0f:ec:69:42:9a:60:19:97:
                    a0:ad:b8:94:33:34:b2:ee:01:f5:75:a5:ee:6b:15:
                    e2:e8:5a:23:6e:45:a8:ae:97:ae:53:f6:bf:f0:c1:
                    07:00:90:9b:d8:c2:c5:20:63:44:42:31:e8:3f:d9:
                    4c:31:52:21:35:c1:3f:14:e7:4b:c5:af:8c:c0:0f:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:b1:ed:52:17:dd:d9:70:38:29:9a:18:10:0a:13:f0:da:
         9e:98:6a:a8:39:24:1f:5d:7d:f7:57:1f:d6:99:1b:0e:b7:57:
         9d:96:a9:a7:0c:cf:8d:2f:b2:04:00:51:82:f6:66:ee:28:ba:
         8e:db:ea:6c:1c:78:3a:aa:89:79:21:d3:e2:75:a9:4e:5b:38:
         f1:1f:72:0e:6b:8d:59:a0:99:3e:d2:51:c2:72:17:95:e1:05:
         43:86:d8:77:f2:d9:9b:8c:13:5f:2e:d5:27:a2:1a:d7:c0:d5:
         58:50:a9:72:d3:74:31:5a:b9:f1:4f:84:64:66:9b:e6:2d:5d:
         39:5e:76:3e:57:46:e8:a7:eb:60:46:a6:50:80:17:e6:5b:79:
         c8:c6:d4:e8:02:d1:02:65:8e:f7:ee:23:c8:8a:e4:db:b8:79:
         9d:37:dd:eb:36:1c:a8:65:18:0c:a5:fe:ed:78:11:77:9e:9e:
         fa:81:c6:ad:d7:42:70:99:e0:cd:0e:1c:d7:01:c4:42:1c:08:
         42:ac:9c:12:2a:6e:71:8d:47:1d:48:f2:b7:28:ea:39:b0:51:
         84:09:f1:72:fa:58:4f:c2:56:41:10:9d:89:4e:ad:c8:a7:6c:
         d3:e1:e8:f0:fe:58:34:1c:30:4b:fa:ca:2e:99:ee:be:46:b3:
         e8:cd:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----