Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
File:                     d46ebd602e50b2947122f994202d0ade1474b0a2.cer (raw, json)
Hash identifier:          6eMaS9LMcgPcrgS4GMN7gNY8A2VTSo4QpBGTW7HJZkQ=
Subject key identifier:   20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CA53F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Jun 2020 19:43:08 +0000
Certificate not after:    Thu 03 Apr 2025 18:19:59 +0000
Subordinate resources:    AS: 270018
                          IP: 200.23.75.0/24
                          IP: 2801:1da::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17605951 (0x10ca53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  4 19:43:08 2020 GMT
            Not After : Apr  3 18:19:59 2025 GMT
        Subject: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:c8:06:ed:50:35:0b:ff:ae:14:b8:2e:f3:
                    ae:e9:24:51:8e:4b:aa:74:da:f3:c3:ac:b3:d0:dc:
                    f4:94:b8:20:61:a5:fe:5f:b1:04:17:34:07:d0:32:
                    68:73:90:9b:8a:b6:ba:4c:a5:a6:97:ef:4f:b0:0e:
                    8a:2e:a7:e4:33:fa:21:13:63:b0:c5:4e:cd:0b:a9:
                    a7:b4:cf:f8:ae:84:0b:50:17:a6:5e:8a:c1:82:03:
                    d0:1a:57:00:4c:0e:fc:51:ee:ba:2a:a7:5b:8c:4e:
                    fa:c2:14:ca:57:7c:51:f6:e9:ee:a7:33:73:53:02:
                    9d:ba:42:70:c8:f8:53:af:fa:e4:ab:c6:09:b8:94:
                    58:c0:4f:82:d0:08:7e:8d:0b:41:2a:16:4a:39:34:
                    32:eb:14:4a:84:77:6f:e5:0a:f8:27:95:39:b2:7e:
                    02:00:42:08:d5:20:a5:56:a0:42:6c:b8:e9:e8:d6:
                    07:32:63:d6:a4:40:04:7b:4f:18:de:ae:e6:d3:28:
                    ae:ef:03:1f:f1:b6:bf:ad:46:05:16:91:a5:0d:9f:
                    4e:fc:77:eb:a8:f2:b4:74:c7:7f:fa:6f:e7:a9:0b:
                    ee:6b:28:ee:9c:0c:56:fd:22:92:99:07:30:47:44:
                    bc:6c:57:68:ca:0d:65:ea:cf:3a:e4:c3:ad:45:f9:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.75.0/24
                IPv6:
                  2801:1da::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270018

    Signature Algorithm: sha256WithRSAEncryption
         c6:53:a8:00:5c:80:ed:66:44:83:d0:cf:91:da:1e:ac:bd:0d:
         49:c2:bf:e7:58:28:f5:df:6a:e7:ad:49:4c:ed:bc:7a:46:ef:
         35:fd:b8:01:2c:42:67:3e:c2:3b:97:3b:87:a1:22:ce:72:a4:
         3a:68:7b:44:ae:e6:38:a2:c5:68:88:c3:c2:57:03:60:58:c2:
         7a:6b:28:45:78:93:ce:d9:ed:36:c2:f7:80:08:d8:5a:61:3c:
         2d:7b:f7:9e:d0:34:22:e0:98:30:3d:61:42:15:a5:6c:22:11:
         cb:15:56:d5:c2:27:93:be:76:6f:1f:35:77:52:03:2f:c8:2b:
         5e:4c:e4:93:90:51:ad:80:dd:d3:fc:6d:4a:c1:04:9f:3f:d0:
         e9:2b:59:0b:e0:2c:1a:45:b6:d2:63:c1:dc:17:b4:19:52:83:
         ec:e9:83:95:a6:00:2a:46:f2:f6:4b:02:64:e7:97:e1:b4:a3:
         6c:b2:2b:2f:35:20:81:61:e6:87:b7:f1:cb:f8:20:fa:b3:2b:
         7e:a1:e6:ee:9d:44:c8:4a:17:b5:ba:5f:6a:c4:37:7b:ca:00:
         c4:95:f2:b7:e9:a7:19:ce:61:0c:a1:c0:c1:e4:5e:ab:9e:18:
         90:2b:c2:d8:d6:ce:ac:66:f9:da:41:3b:1e:d8:72:cb:5d:3a:
         e6:d5:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:12:02 2024 by rpki-client on console-ams.rpki-client.org