Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd24c345578697f2d4824ba7a63f561d5b626def.cer
File:                     dd24c345578697f2d4824ba7a63f561d5b626def.cer (raw, json)
Hash identifier:          5EQ8c5xbtuWwCybUbGs5u+w37eiK7o7XCRwenKP/d7w=
Subject key identifier:   AE:5E:1E:2D:89:FC:D9:6B:25:FE:80:69:6C:B6:6C:01:2C:E8:66:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBE30E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/dd24c345578697f2d4824ba7a63f561d5b626def.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Jan 2021 09:54:19 +0000
Certificate not after:    Mon 04 Nov 2024 16:13:29 +0000
Subordinate resources:    AS: 271846
                          IP: 45.232.208.0/22
                          IP: 2803:410::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16507662 (0xfbe30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  8 09:54:19 2021 GMT
            Not After : Nov  4 16:13:29 2024 GMT
        Subject: CN=dd24c345578697f2d4824ba7a63f561d5b626def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:1d:08:d3:77:86:e6:f7:77:84:56:81:18:
                    ad:69:cd:87:7d:9e:01:d9:17:15:0d:05:37:b3:16:
                    73:c8:12:4f:58:66:60:3d:65:9f:82:84:01:ca:ac:
                    bb:04:a6:40:d0:cd:ee:76:3a:6d:26:d2:41:4c:91:
                    b1:ff:bc:c9:c5:81:03:b7:cf:c7:1e:02:85:38:b0:
                    f1:43:38:e8:04:6a:48:06:de:e2:6d:40:3a:1d:c9:
                    e2:82:af:0d:03:ba:43:09:44:ca:bf:0b:b7:82:3a:
                    b8:ed:fd:40:62:d4:89:7e:8d:0c:89:99:ce:e9:06:
                    31:2d:1d:fa:ae:64:1f:02:5f:f3:79:48:62:79:9c:
                    93:e2:ea:6b:8b:ea:83:87:6c:72:e5:e1:2f:0b:f8:
                    e3:8b:8a:81:5c:e4:2f:06:48:0b:0b:83:f6:85:89:
                    b1:b9:69:76:18:d6:bc:b3:56:ac:5c:0b:d6:33:48:
                    39:51:99:eb:3b:fc:c7:a6:62:d9:e4:79:21:f1:cc:
                    a3:44:ed:ba:0f:bd:53:07:ae:16:69:b7:67:dc:a3:
                    f3:fb:89:fc:fd:05:ce:1a:23:cc:12:93:28:7e:33:
                    3d:13:89:a1:53:b5:85:09:45:f4:5f:b5:f1:3a:0b:
                    c4:10:1e:8f:c7:df:12:fb:46:c3:6f:d3:07:89:f9:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5E:1E:2D:89:FC:D9:6B:25:FE:80:69:6C:B6:6C:01:2C:E8:66:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/dd24c345578697f2d4824ba7a63f561d5b626def.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.208.0/22
                IPv6:
                  2803:410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271846

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:6b:30:56:7a:47:4e:db:c0:e1:11:51:7e:fc:34:2d:02:
         6e:f4:37:f2:dc:a0:c9:94:0b:08:d2:91:74:33:04:59:6c:59:
         49:36:08:22:fd:19:73:d6:d8:ea:59:59:3d:f8:d2:3a:ae:62:
         6d:61:5e:5e:22:b5:c3:b1:c6:84:bf:e1:21:6e:ea:91:a1:e7:
         86:b2:75:6e:c7:4a:dd:20:12:87:bb:23:3f:f1:bd:b1:28:d0:
         c1:27:41:2e:c8:9a:4d:6c:24:b4:fb:d9:df:43:3f:af:c7:d9:
         f8:a4:16:57:83:08:d5:9b:9d:4b:3d:9f:e6:9c:0a:72:af:58:
         30:93:08:4a:59:68:66:e6:9c:ca:2c:5b:29:30:2a:a4:2b:87:
         fa:02:37:c2:29:b5:a4:d9:98:de:06:d3:57:44:e3:57:c7:14:
         c1:a2:43:4e:22:20:1c:9a:8b:bd:92:6d:3e:1b:05:73:43:df:
         4a:cb:0a:b7:c8:97:b3:22:9e:e5:a1:50:e3:c6:7f:21:b2:a6:
         e9:58:5f:0f:a0:aa:b7:cd:78:2a:ff:99:8f:18:43:19:f2:2f:
         ec:fe:a9:b2:71:ef:ba:9f:84:f8:02:59:10:a3:e7:17:e1:bf:
         f5:ec:ea:55:b3:93:cd:11:14:f8:62:7d:96:5d:be:bb:89:f6:
         54:21:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:42 2024 by rpki-client on console-fra.rpki-client.org