Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cafeaf066850a889fea45c8bd1fde7a4bb6cb775.cer
File:                     cafeaf066850a889fea45c8bd1fde7a4bb6cb775.cer (raw, json)
Hash identifier:          7nxyl0g0HwuRI2m1oV9035FkCbfW73ik/DPgQiWS/xg=
Subject key identifier:   85:95:42:25:26:1B:9F:4A:55:90:05:B8:C2:51:C2:24:0D:A1:7E:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E382D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba52554e-6fd8-4547-9f36-ccb744f6a79e/cafeaf066850a889fea45c8bd1fde7a4bb6cb775.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba52554e-6fd8-4547-9f36-ccb744f6a79e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 11:46:39 +0000
Certificate not after:    Mon 03 Feb 2025 14:42:28 +0000
Subordinate resources:    AS: 272975

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14910161 (0xe382d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 11:46:39 2023 GMT
            Not After : Feb  3 14:42:28 2025 GMT
        Subject: CN=cafeaf066850a889fea45c8bd1fde7a4bb6cb775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:a1:4e:16:21:60:a5:8d:f3:32:d6:85:3c:
                    02:55:ef:3d:f2:d6:35:ea:9c:49:71:90:c8:38:25:
                    fc:e3:29:31:82:8d:51:a9:8c:10:02:83:3b:77:f1:
                    cd:b9:2e:17:5c:ed:38:16:e5:26:6f:3f:50:e5:26:
                    a5:22:1c:f0:c0:68:97:54:22:82:66:9d:29:93:fa:
                    00:dc:b9:e4:7e:b0:ad:b0:30:43:01:1c:ea:e2:37:
                    31:a5:3d:2a:a2:76:c8:1c:4d:89:a3:2b:5e:c5:74:
                    9e:12:56:f9:25:b6:50:20:50:c5:9c:0c:bb:3a:b7:
                    9a:9e:48:fd:69:76:84:4a:fd:18:ff:cb:92:66:40:
                    3f:8e:7b:c0:5c:a2:88:9a:4b:97:bc:f4:07:8f:cb:
                    19:6e:58:0d:d8:39:3a:53:2b:5f:7b:d4:b0:3f:0b:
                    a0:2b:09:4f:4e:3e:2a:a3:52:2a:a5:27:6f:c2:7a:
                    f9:04:50:3a:87:14:93:fa:f3:5c:c7:1b:d5:93:16:
                    cb:b0:29:10:bf:40:51:0a:4f:e7:f6:a4:53:26:71:
                    ef:2b:cb:00:09:32:55:21:85:14:27:d4:56:ff:bd:
                    52:05:65:55:7d:8f:5c:b2:9e:bb:85:e8:e7:ff:84:
                    d2:ce:83:84:59:58:25:4a:3b:95:fd:86:cc:56:93:
                    be:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:42:25:26:1B:9F:4A:55:90:05:B8:C2:51:C2:24:0D:A1:7E:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba52554e-6fd8-4547-9f36-ccb744f6a79e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba52554e-6fd8-4547-9f36-ccb744f6a79e/cafeaf066850a889fea45c8bd1fde7a4bb6cb775.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272975

    Signature Algorithm: sha256WithRSAEncryption
         08:48:48:45:3a:bf:22:dc:a2:66:c4:cd:1f:a9:31:93:f9:04:
         93:cf:82:54:d7:7e:58:70:3f:71:49:22:5e:db:71:72:c7:40:
         4a:c2:34:38:66:7c:41:68:3a:4a:03:1c:f3:98:7c:aa:21:cd:
         56:e1:47:26:51:aa:69:39:e7:59:2e:b2:4e:20:ba:4c:e1:74:
         15:6a:4b:d0:6f:d0:69:ea:2e:f6:56:fd:33:ac:7c:ee:23:a1:
         de:68:6c:ed:fa:69:b5:d8:eb:18:69:6b:43:38:09:b2:5e:a4:
         73:c8:d4:b4:2a:2c:e3:ce:90:2e:ef:02:dc:3d:be:05:c1:65:
         a2:2f:28:db:c4:7e:97:68:08:1f:ad:05:6e:5a:fa:08:eb:0e:
         4a:09:a1:a0:55:1c:ca:82:15:5e:55:0f:af:7c:23:89:56:89:
         18:fc:66:a7:a1:7f:01:18:f0:a3:9d:46:d4:5a:07:1c:5c:5a:
         7c:6a:f8:3c:fa:e1:3b:90:63:9b:6d:37:da:07:1d:05:19:00:
         f6:9c:67:9e:1b:47:3b:ee:72:fe:d9:01:66:c4:39:68:d9:5f:
         3d:25:8d:5d:b5:95:f5:b6:1c:da:6e:ba:1f:fb:fa:77:22:12:
         cc:1a:63:36:b3:6b:31:8a:5f:c7:25:e4:bf:0f:7f:43:99:84:
         1d:d8:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:36 2024 by rpki-client on console-fra.rpki-client.org