Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c732cc746b6451a18a3c78bab827a0ba73a650d0.cer
File:                     c732cc746b6451a18a3c78bab827a0ba73a650d0.cer (raw, json)
Hash identifier:          92kL2+7PzcdV2qxwjJdTLIN7ynvHcO3nzRUPWTa3FDk=
Subject key identifier:   F8:0D:93:1C:C7:D5:A0:66:CD:25:1C:F6:30:89:8C:3F:21:5F:26:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3F297
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8929009e-e009-46cd-80b9-ddd44796c468/c732cc746b6451a18a3c78bab827a0ba73a650d0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8929009e-e009-46cd-80b9-ddd44796c468/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 20:28:04 +0000
Certificate not after:    Mon 09 Sep 2024 19:21:11 +0000
Subordinate resources:    IP: 45.226.8.0/22
                          IP: 2803:e20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14938775 (0xe3f297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 20:28:04 2023 GMT
            Not After : Sep  9 19:21:11 2024 GMT
        Subject: CN=c732cc746b6451a18a3c78bab827a0ba73a650d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:4a:de:d0:9c:ab:c6:d6:ce:05:75:5c:fa:
                    94:4b:09:f3:31:e6:02:f5:31:a6:e5:f5:2f:69:3f:
                    f2:ad:63:8e:3f:eb:05:b7:1e:2f:45:aa:81:1f:d4:
                    85:80:e4:79:24:41:17:56:4d:9e:31:ac:0a:59:78:
                    aa:91:b5:b3:df:59:6a:fc:d2:5e:9c:93:07:63:34:
                    b6:76:4f:76:03:2e:29:7c:c9:bf:57:7d:99:8d:57:
                    08:52:c7:d7:55:ca:fb:56:d1:4d:d9:14:0c:f7:56:
                    20:d3:64:7a:9e:36:e1:3c:b0:b1:86:b5:b1:1d:4f:
                    5c:a1:96:bc:5a:d9:4e:86:e3:7b:89:c5:cc:9c:95:
                    aa:43:ec:cc:ff:61:e2:63:3c:63:67:f8:cd:46:ad:
                    a5:0d:00:1f:9b:2b:02:84:5a:c5:0c:69:bd:ad:5c:
                    ee:46:17:54:09:66:a0:67:fa:00:c8:4b:9b:4c:3a:
                    55:62:f1:54:e1:a9:75:b7:4e:e2:c5:53:2b:c9:83:
                    66:6c:b8:01:f4:ea:a0:8b:14:ac:da:0c:9b:cc:fe:
                    d0:8f:31:1c:83:9a:8a:4b:7b:9f:0f:9c:41:eb:2a:
                    c1:d7:c3:20:b6:22:87:38:a0:0f:f8:82:c5:d0:63:
                    7b:1b:68:c5:2e:0b:5f:c2:30:39:87:04:2c:cd:4d:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:93:1C:C7:D5:A0:66:CD:25:1C:F6:30:89:8C:3F:21:5F:26:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8929009e-e009-46cd-80b9-ddd44796c468/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8929009e-e009-46cd-80b9-ddd44796c468/c732cc746b6451a18a3c78bab827a0ba73a650d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.8.0/22
                IPv6:
                  2803:e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f4:bb:7d:3b:18:26:92:60:35:b9:aa:3c:47:c1:e7:ef:c5:
         1c:f7:19:db:f7:30:71:5f:3a:ec:0e:67:03:3f:9c:ba:5d:de:
         21:ed:09:d9:80:73:56:d8:0b:67:05:be:fb:b0:b9:a2:c8:d0:
         48:11:fa:39:f6:45:67:c1:92:06:7d:c2:45:3a:16:db:39:17:
         14:96:3c:bc:8d:33:48:ee:17:d5:03:ba:4a:a6:98:de:34:d1:
         e2:84:20:d5:ac:83:dd:74:a2:26:3d:1b:23:8e:aa:7c:a1:bf:
         1c:52:bf:a2:e6:b0:90:cc:58:c2:37:eb:2c:51:6e:a7:76:0c:
         d3:cf:01:14:d3:fe:43:e5:71:6c:c5:60:ab:b8:08:07:79:8e:
         69:72:80:a8:aa:ea:89:e0:56:e3:a9:7f:6c:6d:26:22:93:4e:
         39:4b:c8:a3:66:15:06:63:38:04:a0:fb:4e:f3:86:c6:98:c2:
         d6:d4:05:92:bb:cc:20:38:6e:75:02:72:8a:b2:43:68:57:19:
         0f:c8:fa:16:16:23:fa:76:e2:2a:62:e8:21:bb:13:35:5b:46:
         db:04:7b:c4:d9:5d:08:f7:d6:05:6f:12:3b:ff:af:a6:ff:80:
         5e:0a:fd:bf:51:13:2d:eb:c1:06:9d:d5:43:6d:65:61:65:d5:
         76:3b:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:30:08 2024 by rpki-client on console-ams.rpki-client.org