Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer
File:                     dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer (raw, json)
Hash identifier:          4HO/JUojckFKI2uceCYxEglvoLstoq693LhwTZDP724=
Subject key identifier:   6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DED196
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 20:59:25 +0000
Certificate not after:    Thu 22 Aug 2024 15:09:07 +0000
Subordinate resources:    AS: 267706
                          IP: 45.164.228.0/22
                          IP: 2803:9a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14602646 (0xded196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 13 20:59:25 2023 GMT
            Not After : Aug 22 15:09:07 2024 GMT
        Subject: CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:21:48:ef:12:2e:5d:4d:e0:d0:e0:94:46:
                    33:20:fa:fa:dd:21:5b:33:ad:38:ab:e1:32:a2:f9:
                    ad:9e:4d:f5:d1:26:69:46:c3:08:9a:92:16:86:b1:
                    6b:e8:de:36:e5:94:2a:aa:07:b8:b6:38:04:42:83:
                    19:b1:95:c0:a4:4d:d6:06:1f:32:87:ad:fb:60:14:
                    c4:a6:bc:45:22:f6:34:0a:21:e6:de:d7:99:02:cb:
                    59:32:96:f7:8d:a3:cf:3f:5e:16:b0:4f:17:62:2a:
                    5d:80:52:27:76:0a:bc:b2:12:ef:34:62:7c:d1:c4:
                    04:39:17:ae:0a:0f:19:61:e9:4e:a0:4a:e8:92:84:
                    e1:44:c2:05:f4:b8:2d:90:29:7e:99:71:33:ed:e3:
                    e0:c6:7a:f1:2e:44:aa:2f:77:47:86:23:ad:39:2d:
                    e9:f3:59:10:7b:98:8e:cc:b6:8e:4c:0d:fa:4c:e4:
                    5b:b9:f7:75:ce:6c:a3:f7:db:68:cc:76:02:df:f8:
                    58:b4:19:3e:05:1b:34:22:28:b3:23:cc:19:de:bd:
                    ee:a1:80:ba:1a:3a:9d:49:12:65:89:10:8a:dc:60:
                    81:c9:b9:46:75:0c:21:b9:53:29:dc:82:a3:1a:d5:
                    93:35:b3:60:1d:f1:54:35:c7:37:b7:15:e3:2f:36:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.228.0/22
                IPv6:
                  2803:9a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267706

    Signature Algorithm: sha256WithRSAEncryption
         78:86:85:5b:bb:20:31:44:b7:0d:37:c7:08:ac:ea:1f:b8:ef:
         55:cb:88:70:14:0a:ef:0c:5b:6d:92:36:54:f7:3e:f5:d5:34:
         66:a6:29:ed:3a:fe:a1:4e:92:d6:83:5e:3a:82:7e:b6:a2:eb:
         01:3f:1e:69:ed:0e:de:d1:4f:5e:0c:6c:01:69:3e:75:fa:4e:
         0b:ee:00:32:de:6f:11:1a:de:f6:92:2b:1a:70:f8:11:49:33:
         c6:b2:4c:5a:ae:8a:41:63:4b:a4:bf:84:51:1e:d9:b2:0f:2d:
         89:dc:6e:95:ca:9f:35:f7:a8:19:8d:42:be:4a:1a:0b:66:0c:
         65:5b:aa:f7:af:ac:35:d8:25:6d:de:2a:3c:ac:86:91:cd:fb:
         75:65:9e:e7:a7:68:93:c9:9d:e1:4b:69:cc:d6:15:bc:03:2c:
         f6:d6:7d:ab:27:39:43:87:40:96:b8:55:e4:24:b1:2c:a1:44:
         32:93:73:69:fd:42:53:a5:96:24:1d:01:7b:16:ab:d1:92:d2:
         d6:52:f5:8f:23:91:1f:4d:c5:19:09:77:39:2f:28:0e:c5:fc:
         66:40:05:ef:41:c4:f5:95:b5:cb:70:c8:d1:85:85:ed:71:70:
         7d:4c:bc:f8:5d:14:89:8a:b2:09:42:2d:d5:0a:a3:06:a0:bd:
         69:38:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:30 2024 by rpki-client on console-ams.rpki-client.org