Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8698e69d3103f71dc14b04ef4a94bf1fd4febd8.cer
File:                     d8698e69d3103f71dc14b04ef4a94bf1fd4febd8.cer (raw, json)
Hash identifier:          rePG7QFCdrFzg0KlaEtvh3konQa/xJEApjgcpYgrxv4=
Subject key identifier:   92:22:72:1A:FC:A2:DD:63:83:72:F4:CA:94:4D:07:B9:28:6D:BC:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E75608
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec721cc1-7781-47b3-a353-38668369a040/d8698e69d3103f71dc14b04ef4a94bf1fd4febd8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec721cc1-7781-47b3-a353-38668369a040/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 12:13:07 +0000
Certificate not after:    Sat 30 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 265637
                          IP: 170.246.180.0/22
                          IP: 2803:7ac0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15160840 (0xe75608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 12:13:07 2023 GMT
            Not After : Nov 30 04:00:00 2024 GMT
        Subject: CN=d8698e69d3103f71dc14b04ef4a94bf1fd4febd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:60:ab:1a:83:43:b1:71:4a:5f:28:6f:cf:
                    7a:87:7b:18:d4:46:21:c1:de:95:e3:37:76:5c:d1:
                    1a:bd:31:e7:c2:cd:f7:a8:cb:c9:67:31:d5:0e:b4:
                    c9:b9:68:0a:72:01:74:7e:44:07:4f:92:79:06:b3:
                    a2:fa:c7:a3:f4:a1:c5:9c:40:e3:b1:1a:2a:19:b6:
                    be:1e:7b:3a:e6:e2:ee:8a:fc:00:b6:c3:b3:13:23:
                    b8:98:53:0a:5f:73:8a:fa:d1:67:04:26:9d:09:88:
                    8f:58:2d:c5:ed:be:54:ec:58:c6:75:d9:e9:29:40:
                    30:99:5a:8a:21:21:09:02:ab:ad:e7:82:ed:51:09:
                    d7:29:d9:a1:bb:1b:82:78:29:dc:b7:bc:19:50:27:
                    56:91:97:65:a6:75:b4:49:c4:8c:d3:36:ac:f3:23:
                    1b:c7:0d:3c:65:5c:1d:6b:ff:13:2a:be:5c:3b:68:
                    23:90:ef:9e:82:9b:75:61:a4:cc:a7:78:45:48:83:
                    a0:0a:d8:29:d8:63:07:b2:eb:71:fe:4c:b2:a6:a4:
                    a0:02:aa:b1:60:bc:c7:98:40:d8:f7:86:19:9f:9a:
                    f2:fe:70:30:2a:45:2d:2e:e5:a4:18:6a:49:51:c1:
                    f0:66:8d:21:5d:52:8b:49:75:b8:eb:4b:67:f5:27:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:72:1A:FC:A2:DD:63:83:72:F4:CA:94:4D:07:B9:28:6D:BC:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec721cc1-7781-47b3-a353-38668369a040/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec721cc1-7781-47b3-a353-38668369a040/d8698e69d3103f71dc14b04ef4a94bf1fd4febd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.180.0/22
                IPv6:
                  2803:7ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265637

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:d3:1e:93:84:67:81:16:36:71:f2:38:e9:7d:ff:ba:f2:
         5f:14:25:e4:81:4b:cf:93:c9:f4:09:88:b2:73:13:75:1b:14:
         97:2c:35:60:5c:79:81:56:58:85:ef:48:4b:f5:1c:8a:53:4f:
         34:a3:0e:52:e6:b2:12:42:76:45:f8:bb:4a:e6:0b:35:77:1a:
         ff:85:69:80:6f:28:d5:18:59:b8:3d:5e:6b:f3:3e:f7:c1:58:
         d1:c1:43:78:21:2a:c2:1b:ca:41:eb:8b:a5:51:fb:30:e7:62:
         17:47:58:8f:f9:46:ca:3c:28:51:bb:52:ef:fa:83:7b:94:42:
         19:2c:f6:ec:68:cc:e9:f5:d5:9e:6f:c4:08:f3:90:34:dd:65:
         20:a3:ca:f8:ce:fb:04:ae:25:c1:4c:1c:09:18:e4:90:55:c7:
         97:d1:12:c1:1d:89:12:de:02:8c:40:77:f9:3c:80:bc:b9:c6:
         c4:3c:ca:bc:22:0b:44:eb:f2:27:18:3b:88:f1:30:44:e3:ea:
         b3:2d:73:ef:e6:43:55:91:24:04:15:bd:da:18:4b:73:b8:73:
         37:56:95:f5:00:27:2c:96:25:95:33:4e:f0:99:7d:23:73:3b:
         1c:3e:15:9d:8d:d5:f6:a4:52:72:27:85:3d:62:bb:22:e6:b1:
         5d:ae:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:09 2024 by rpki-client on console-fra.rpki-client.org