Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8deaa4af9451ec7883cc5c8460ef0a5d9d8c97d.cer
File:                     c8deaa4af9451ec7883cc5c8460ef0a5d9d8c97d.cer (raw, json)
Hash identifier:          pSvzaJS9+Ba7XGYBJLhbKTGLt+G80+MJgLgfSITzQpU=
Subject key identifier:   ED:0A:EA:D2:C6:D7:21:50:12:CA:DC:D4:B1:0B:7E:F8:16:84:1B:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E51BAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/080dcb13-7309-4d6f-bea0-498227918b83/c8deaa4af9451ec7883cc5c8460ef0a5d9d8c97d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/080dcb13-7309-4d6f-bea0-498227918b83/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 14:34:46 +0000
Certificate not after:    Thu 01 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 27771
                          IP: 190.170.128.0/18
                          IP: 192.65.152.0/24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15014827 (0xe51bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 14:34:46 2023 GMT
            Not After : Aug  1 06:00:00 2024 GMT
        Subject: CN=c8deaa4af9451ec7883cc5c8460ef0a5d9d8c97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:a4:43:b7:e8:9d:b9:16:6f:67:f0:8f:2f:
                    d9:19:39:1f:8e:bd:5c:38:cc:3f:da:b7:f0:a4:b2:
                    e4:2b:6b:c5:ef:f5:7c:6e:ec:4a:98:26:6a:fe:6b:
                    44:1d:5d:a9:82:73:52:e3:8d:59:09:d8:a6:9f:06:
                    25:ae:73:00:8c:1c:79:79:76:36:93:cf:1d:bb:a1:
                    32:b1:c0:36:fc:67:eb:dc:99:6a:8d:14:ed:9f:58:
                    85:2b:c7:66:7c:bd:bc:56:b6:37:e2:6c:e3:a5:39:
                    9f:11:ed:e6:66:52:2e:e9:13:a6:81:e0:28:4c:c3:
                    d0:3b:90:5f:03:cc:15:78:43:fc:3b:20:c4:67:53:
                    cd:b8:41:a7:c2:39:37:2b:a4:fa:76:6c:67:6d:37:
                    4e:1e:bf:78:7e:28:fc:1b:fc:97:4c:5b:ac:c6:d2:
                    d8:e0:5d:6a:43:ce:3e:7b:89:30:97:71:b5:c1:fe:
                    6c:95:b7:70:4e:a0:ec:eb:c8:e7:ac:25:9e:41:71:
                    9b:b6:b2:1d:a6:dc:95:27:e9:5e:0d:fe:3e:9c:c3:
                    2d:f2:3d:25:f9:6c:73:6b:38:bd:a7:8d:92:95:41:
                    dd:37:1c:cd:37:c0:3b:3c:d6:d5:f6:15:5d:55:aa:
                    9e:c6:4c:0f:61:39:8e:cf:dc:6a:dc:5d:97:71:3b:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:EA:D2:C6:D7:21:50:12:CA:DC:D4:B1:0B:7E:F8:16:84:1B:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/080dcb13-7309-4d6f-bea0-498227918b83/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/080dcb13-7309-4d6f-bea0-498227918b83/c8deaa4af9451ec7883cc5c8460ef0a5d9d8c97d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.128.0/18
                  192.65.152.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27771

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:d4:83:a0:c6:80:88:02:7b:e8:9a:bf:58:7c:b4:2e:36:
         ee:1a:1f:ef:5b:2e:21:12:64:cf:82:64:bb:d0:07:4d:45:17:
         4f:23:8e:b9:ff:1a:4f:23:52:4a:c1:b5:5a:3c:6e:95:b2:ec:
         b9:0d:21:fb:d3:0f:87:b2:8f:4a:a1:5a:c7:6d:a5:30:6a:e4:
         76:d3:63:8e:7e:78:8f:8b:21:28:40:5d:42:84:41:13:69:16:
         88:b6:a2:11:84:fc:ab:7f:ee:a7:ae:1f:52:40:a3:89:35:49:
         85:8f:72:4b:83:dd:7a:61:c9:51:9a:2e:f2:ba:ae:53:73:68:
         44:50:df:b6:c2:83:de:e3:ad:12:1d:e4:02:7a:84:b8:61:1f:
         7d:75:d7:35:17:26:f2:a7:6a:97:1c:1c:ab:e2:2c:76:75:7b:
         55:33:4e:a8:de:39:6e:f3:50:8e:c5:87:21:d0:31:3f:e8:17:
         2b:f9:5b:a0:5f:2c:35:ef:44:b1:9c:b0:3e:69:60:99:36:eb:
         43:b0:17:d6:db:17:11:a6:51:44:16:1f:4c:8c:8d:4a:12:79:
         37:92:07:54:5d:b7:00:21:2b:19:fc:b6:b5:15:eb:9c:cd:af:
         4e:f7:5e:d6:53:2b:9f:e0:5c:9e:ab:09:d5:f5:cc:6d:4b:64:
         41:1c:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:25 2024 by rpki-client on console-ams.rpki-client.org