Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e1e0969a850c5aa01b86fd390cf980dd8c296.cer
File:                     da7e1e0969a850c5aa01b86fd390cf980dd8c296.cer (raw, json)
Hash identifier:          iKYYvWVeg+W//0xPCJ6tEXb3U/+fOwOdajz3Hqf6KLU=
Subject key identifier:   F7:5F:6C:67:91:04:33:82:42:23:86:0B:C5:F5:61:22:4E:70:62:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3B89B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/da7e1e0969a850c5aa01b86fd390cf980dd8c296.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Feb 2021 15:19:36 +0000
Certificate not after:    Sun 05 May 2024 23:30:20 +0000
Subordinate resources:    AS: 265761
                          IP: 164.163.8.0/22
                          IP: 2803:7bc0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14923931 (0xe3b89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 10 15:19:36 2021 GMT
            Not After : May  5 23:30:20 2024 GMT
        Subject: CN=da7e1e0969a850c5aa01b86fd390cf980dd8c296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:92:4c:24:d3:39:08:35:1c:7a:7f:2d:6c:
                    73:13:de:1e:4c:81:61:0e:9d:68:3e:fe:c1:01:17:
                    89:ec:e3:b7:2a:95:bc:b6:58:11:68:cd:d5:d8:1d:
                    96:b9:3a:94:eb:c0:fb:e6:42:55:d2:0a:7b:91:ba:
                    42:2f:00:15:5b:ae:54:0b:be:ba:19:35:50:fb:09:
                    2c:7e:53:fb:ed:4d:0a:b0:30:ec:01:f5:9e:da:e7:
                    00:13:88:5d:85:b0:da:b8:7c:1e:42:f8:fd:86:d4:
                    ea:49:27:e2:93:08:5f:c4:03:05:73:3f:b3:69:29:
                    7e:3d:0f:cb:7f:af:1c:28:5e:9d:b6:3b:cd:20:cc:
                    73:20:04:27:f2:2e:15:96:c2:b9:bb:a0:c1:96:b1:
                    88:b5:4c:7a:80:4c:45:4e:e7:49:25:71:20:cc:60:
                    65:0f:17:fc:4f:1d:18:0b:b7:0d:35:b4:c1:27:fb:
                    88:c8:b1:02:43:be:14:2b:bc:b1:d1:55:c7:36:18:
                    8b:be:7a:de:8b:1c:d6:db:b6:3d:c9:a4:e3:6c:e6:
                    e5:87:20:ce:92:06:32:24:7d:ad:23:46:e0:c8:58:
                    80:75:4e:ca:f8:88:ec:9c:7f:32:3b:58:32:4d:2f:
                    81:d9:97:4c:b4:e2:8d:1c:6d:55:79:00:5e:c7:2a:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5F:6C:67:91:04:33:82:42:23:86:0B:C5:F5:61:22:4E:70:62:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/da7e1e0969a850c5aa01b86fd390cf980dd8c296.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.8.0/22
                IPv6:
                  2803:7bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265761

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:ac:2b:e7:e4:4d:d8:55:48:e7:01:92:9b:96:23:f8:63:
         d8:55:8d:7f:dc:8e:da:a6:ec:1d:39:eb:7c:76:10:86:2c:d2:
         91:a1:8a:8c:e1:28:e8:06:16:a3:9f:c3:40:42:47:4b:88:d5:
         f4:66:52:71:10:f5:96:1e:ea:d0:31:9e:8d:10:d2:99:13:2e:
         d7:9d:82:02:c1:f5:64:4c:3b:bb:88:42:71:a6:b0:1e:46:c7:
         2c:8a:31:db:54:f0:c8:02:9e:96:15:4a:28:dc:27:91:8d:45:
         3c:26:36:54:53:99:3a:1a:5b:e3:84:05:c1:e9:17:a5:c2:9a:
         3d:4b:a8:9e:b7:a6:2c:aa:fb:63:9e:2c:8f:72:12:6f:c2:f3:
         ce:27:2d:4a:21:a4:98:08:8d:0f:59:ad:c4:a9:61:bc:4e:a3:
         15:1f:b8:da:04:ad:ad:17:a3:3b:b7:f6:c4:8e:d6:68:16:34:
         ef:7a:37:ae:7b:9f:4a:a5:05:d8:8f:05:67:37:c8:26:1a:24:
         2d:7e:4b:fc:e2:19:c9:02:c9:9b:20:6b:19:ff:04:82:26:96:
         58:23:e1:be:6a:60:05:91:71:33:b9:fa:c7:75:c8:8a:b6:7e:
         0d:44:eb:2f:65:06:83:46:74:42:61:52:2d:1b:0d:ef:e2:18:
         15:7a:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:10 2024 by rpki-client on console-fra.rpki-client.org