Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
File:                     dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer (raw, json)
Hash identifier:          HiInlwnj3eeauTzvNAHzKd+Z76Qs7uZQzMOpriYfOHQ=
Subject key identifier:   D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF9DC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Sep 2021 21:47:08 +0000
Certificate not after:    Sat 27 Jul 2024 19:31:00 +0000
Subordinate resources:    AS: 267689
                          IP: 45.163.20.0/22
                          IP: 2803:1a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15703490 (0xef9dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 21:47:08 2021 GMT
            Not After : Jul 27 19:31:00 2024 GMT
        Subject: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:a6:11:08:5a:03:4b:b4:e1:dc:cf:b5:2f:
                    70:a6:48:05:4d:f1:cf:c3:16:1d:1f:9a:77:5f:55:
                    b0:f0:28:43:2b:2e:25:8d:92:f7:8e:d6:ff:08:1a:
                    d4:5d:d8:f7:2f:8f:0d:c8:16:5a:5e:f1:4e:e9:95:
                    3f:92:fe:e2:a6:e3:e8:3c:92:5b:c1:2f:80:c9:e3:
                    9a:7c:a0:44:3a:09:2b:89:69:d2:0e:1b:bf:20:91:
                    23:00:6f:b7:bd:8c:3d:98:a7:61:4e:95:2e:43:f0:
                    2f:59:1a:b6:f6:df:97:f2:ec:55:bf:db:1d:7e:9d:
                    2e:22:e9:7c:f7:7b:58:d7:df:17:a1:44:eb:7d:64:
                    24:c6:bb:cd:36:d0:b3:b4:b3:23:f4:ad:71:ce:e7:
                    f7:ab:56:5f:a9:49:05:d7:62:3b:19:5b:4a:d4:c1:
                    6b:0a:2e:9e:1c:31:12:2a:42:b7:1f:a9:d5:59:61:
                    c0:db:64:52:74:b7:0d:7d:fe:d6:37:28:77:9d:6b:
                    b2:33:4d:5b:70:18:bf:57:f5:26:c6:5e:5b:ae:00:
                    fa:28:89:4b:cc:db:24:bc:23:7c:ff:b5:38:53:4f:
                    c8:6b:27:ba:06:12:cb:85:d4:8c:2f:3a:09:63:eb:
                    62:45:7a:6b:e6:ae:2e:fd:bf:84:41:f9:35:47:88:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.20.0/22
                IPv6:
                  2803:1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267689

    Signature Algorithm: sha256WithRSAEncryption
         2f:d6:72:98:94:16:a2:18:be:c7:e9:03:e8:65:9c:64:c8:a4:
         99:fe:a8:2b:c0:57:7f:6e:43:74:f4:dd:50:7c:69:d3:bd:67:
         29:f5:cb:62:15:a4:db:67:37:8b:cf:8a:8c:27:9f:ab:a1:8b:
         50:43:3f:1b:a4:7f:8f:a1:40:29:f3:0d:a4:00:9e:ff:1f:ec:
         48:d4:7c:db:c2:86:d6:21:b7:12:98:2f:0d:23:af:87:02:be:
         19:f8:37:d0:dc:d7:88:58:7c:d2:31:a2:ac:34:af:2f:f1:9b:
         a8:30:7f:5d:a9:d5:db:6d:f5:fd:59:94:bd:e7:85:8c:45:5e:
         65:96:90:d8:8c:c6:ab:ad:19:ef:81:a6:7a:db:8e:c3:f6:33:
         ec:e2:43:c7:ff:70:68:94:45:bb:f4:89:03:d9:74:6b:0a:f9:
         da:71:ee:f7:f4:2b:28:bb:48:33:06:ac:ee:ec:cb:01:1d:b1:
         e4:bc:82:33:55:cd:80:c3:60:c9:db:7b:8e:00:78:2e:a9:3d:
         8b:a0:1d:24:5e:1e:d6:cd:f1:c5:e2:7b:39:e5:c0:5c:52:be:
         d6:6b:49:61:d9:14:5a:9e:29:e8:51:1f:be:65:e4:01:97:3e:
         d4:92:9a:81:0f:f0:d3:2e:d8:fc:24:50:fc:4b:c7:2f:2b:e3:
         b5:9c:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:30 2024 by rpki-client on console-ams.rpki-client.org