Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfbe300aabc348d765164558580cee51843f1a9d.cer
File:                     dfbe300aabc348d765164558580cee51843f1a9d.cer (raw, json)
Hash identifier:          Qz6FjpHOxvfMEu4yN93mYoCQ3SeJ94pNavn2GElInSs=
Subject key identifier:   91:2C:51:08:41:02:17:C2:7D:D2:46:E7:93:2E:72:2E:20:B8:09:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102F50A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/dfbe300aabc348d765164558580cee51843f1a9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 May 2022 22:17:31 +0000
Certificate not after:    Sun 05 Jan 2025 14:26:43 +0000
Subordinate resources:    IP: 2801:10:e800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16971018 (0x102f50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 24 22:17:31 2022 GMT
            Not After : Jan  5 14:26:43 2025 GMT
        Subject: CN=dfbe300aabc348d765164558580cee51843f1a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:95:b1:4f:7d:04:41:61:2f:f0:0c:ec:ff:
                    66:a5:ef:c9:c4:76:3b:d6:5f:14:89:29:8f:5c:71:
                    91:99:21:a2:6a:09:ed:57:16:b1:8a:a0:8d:7f:c6:
                    f7:df:92:65:07:44:55:ba:0f:8d:71:5a:44:c1:95:
                    f2:1f:e9:33:1c:9a:ca:9b:f0:b4:59:37:99:a8:4d:
                    b6:48:9e:b8:d9:8a:be:df:aa:e4:0e:b8:ef:3c:bb:
                    4a:e0:ef:5e:b4:86:e7:b5:85:68:c6:a0:c4:d8:92:
                    d3:ed:2b:f9:c0:ff:16:ed:2b:c6:70:57:b7:9d:9b:
                    e2:c1:7a:a1:2a:11:c7:ab:4d:cd:23:5d:b5:0f:82:
                    19:fa:65:39:38:96:06:b7:0e:8b:cf:bc:05:69:02:
                    49:96:59:08:d5:60:fe:aa:ce:19:10:e7:cf:c4:b2:
                    95:75:64:fe:52:be:a6:b5:f1:75:95:30:ab:ac:ee:
                    cd:fe:c3:4c:7f:8d:ac:02:92:df:f4:85:c7:40:73:
                    aa:5e:e2:21:f2:7d:e5:05:69:01:f2:63:b4:eb:7d:
                    05:79:c7:a2:87:97:b2:4d:80:e6:12:30:9b:dc:25:
                    fd:8c:a4:a7:0d:4c:8b:09:7c:45:09:af:45:32:c3:
                    2a:ff:21:55:f7:85:b7:dd:3c:2c:be:f9:0e:a8:bf:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:51:08:41:02:17:C2:7D:D2:46:E7:93:2E:72:2E:20:B8:09:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/dfbe300aabc348d765164558580cee51843f1a9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:96:97:d8:e3:e6:4f:02:1b:be:6e:fd:cc:22:d1:57:cc:
         d6:9c:27:48:b6:26:42:55:ac:8c:f8:0e:34:0d:29:7b:f4:46:
         16:3b:58:8e:b2:5f:1e:5a:0e:79:0c:b0:f3:ca:f1:9c:c5:b7:
         45:2a:8f:34:ea:0f:8a:6c:4e:8f:35:f8:23:00:f7:85:81:3f:
         8f:ff:35:2d:27:22:e8:8c:87:41:f0:59:e6:c1:ec:34:80:a4:
         4d:c6:2c:3a:b4:54:d9:aa:39:64:65:4c:c5:6c:16:be:05:fc:
         fc:44:7a:b1:b5:24:66:a6:a1:f7:6f:66:0b:2a:6d:fe:ff:f1:
         34:d3:84:5b:60:1f:bd:dd:d0:3e:4f:f4:fb:dc:f7:a7:4c:e1:
         4f:bc:b4:9b:ba:53:14:b7:2f:29:96:7d:5b:7b:b3:80:74:c4:
         6b:d6:3f:51:4d:76:c0:a9:e5:10:b5:01:43:64:49:86:bc:b3:
         ae:22:55:00:eb:6e:0a:55:12:06:77:91:78:41:3f:b0:49:fe:
         78:28:eb:21:6d:a1:3e:b3:af:3d:c6:73:05:0f:27:18:a5:5c:
         d3:94:6d:cb:40:b8:fc:02:03:70:2a:4c:db:45:6b:4e:b4:7c:
         b6:16:9e:20:79:f6:74:e6:e2:5e:a3:c5:a8:d0:3c:d1:29:49:
         0d:7a:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:31 2024 by rpki-client on console-ams.rpki-client.org