Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e04af1715d9d6c3bf0bfd13507bdf01edfe6ae38.cer
File:                     e04af1715d9d6c3bf0bfd13507bdf01edfe6ae38.cer (raw, json)
Hash identifier:          7AnaeJL8ArX7pcQVR22X9kIsd2OwnA7ITP6sk72uja4=
Subject key identifier:   E1:38:14:F1:96:E0:11:7C:3C:42:2F:D0:BF:5B:B6:A7:E8:76:11:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC5920
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1feb971-84e9-4e9c-8a26-a2749a31f836/e04af1715d9d6c3bf0bfd13507bdf01edfe6ae38.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1feb971-84e9-4e9c-8a26-a2749a31f836/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 14:43:37 +0000
Certificate not after:    Thu 10 Oct 2024 17:12:48 +0000
Subordinate resources:    IP: 45.168.192.0/22
                          IP: 2803:eda0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15489312 (0xec5920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 14:43:37 2023 GMT
            Not After : Oct 10 17:12:48 2024 GMT
        Subject: CN=e04af1715d9d6c3bf0bfd13507bdf01edfe6ae38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:b3:c7:80:c8:c1:a8:26:37:e4:90:3d:5e:
                    13:0b:bd:df:c9:38:99:e8:2e:b9:5c:ab:bb:bd:92:
                    ae:48:7e:44:4a:26:ae:76:f2:71:0a:a4:0d:00:1f:
                    10:fc:77:cc:f2:eb:39:f8:f7:4a:c5:55:20:dc:47:
                    b9:6f:56:0d:cb:eb:15:f7:85:c8:d8:0e:e3:95:ba:
                    43:c7:09:d0:a5:ce:4b:1c:31:5f:05:c5:73:da:5c:
                    3a:d9:24:ec:a2:a6:b6:a6:74:a6:07:67:fd:8b:0d:
                    a7:d8:61:d9:fe:3d:b1:f5:e9:09:f7:29:fa:31:59:
                    84:c0:5d:3b:72:34:fa:d9:98:4a:23:b9:e9:b1:7d:
                    ae:6c:4e:14:1a:2a:69:0a:0f:9d:7e:ef:f6:01:ff:
                    a2:32:16:3d:9b:e0:6c:c8:c4:bf:c7:41:3e:57:58:
                    9d:62:57:30:3f:77:83:1d:d9:20:92:06:81:b3:06:
                    7d:77:2c:10:76:5c:b3:c2:9c:bd:df:b3:bf:51:3e:
                    7b:b8:25:a7:fb:85:5f:c3:97:2d:86:8d:4d:3c:b6:
                    a5:5c:a5:02:2c:cf:1c:fb:ba:f0:ab:de:ab:6f:fb:
                    f5:14:01:61:f7:33:22:45:03:ef:d1:89:93:bb:01:
                    b3:63:28:f6:a0:a0:b7:c5:e5:60:c1:d2:5d:8c:59:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:14:F1:96:E0:11:7C:3C:42:2F:D0:BF:5B:B6:A7:E8:76:11:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1feb971-84e9-4e9c-8a26-a2749a31f836/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1feb971-84e9-4e9c-8a26-a2749a31f836/e04af1715d9d6c3bf0bfd13507bdf01edfe6ae38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.192.0/22
                IPv6:
                  2803:eda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:43:24:56:6d:9c:38:1c:97:f4:6d:78:ff:5e:86:55:66:92:
         1f:82:2c:60:0d:4b:82:45:b7:7e:13:cc:e8:0a:b7:35:57:c5:
         ac:a4:61:c7:ff:62:b7:24:95:bb:00:be:f1:ab:a4:5f:46:f7:
         d1:8e:da:93:4c:fe:8e:cc:f5:53:7b:76:47:dd:85:54:b8:54:
         b1:6f:c1:d8:0a:18:d0:82:9d:51:07:69:98:7e:55:68:14:41:
         b1:81:3c:74:3e:af:e1:33:20:21:1f:e2:14:03:4c:77:4f:ee:
         4f:b4:7e:27:20:5d:e1:0e:57:d2:d0:d9:ec:27:ab:93:0c:81:
         8e:eb:11:7a:22:b1:6e:2f:03:c2:8b:a8:0b:03:90:93:a9:f5:
         bc:05:68:e2:9d:40:b0:b6:7e:43:c7:52:ba:d3:37:f8:f0:c3:
         8a:fc:ed:5d:22:a7:da:21:de:6e:db:fb:89:46:dd:0e:63:6f:
         6a:4f:c1:95:f2:ad:cf:71:5e:eb:64:b5:9f:60:bd:b7:b5:71:
         ec:04:f6:b2:ec:fe:6e:e2:45:74:9b:1f:c7:f6:73:1c:6f:c2:
         db:5f:37:42:09:94:92:34:89:66:bf:be:42:33:bb:bd:e6:d3:
         d0:06:6b:f7:44:eb:d6:e8:7f:3e:7a:57:27:86:f9:84:f4:8f:
         1c:61:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:31 2024 by rpki-client on console-ams.rpki-client.org