Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e27ff5a8bbd7cfe21eff4d67fe3130dbee833c58.cer
File:                     e27ff5a8bbd7cfe21eff4d67fe3130dbee833c58.cer (raw, json)
Hash identifier:          CEUdppewUucOkq7yIGguVm0zApoJyO8/bvgvh5mTCZ8=
Subject key identifier:   BD:64:A5:1E:F0:B1:2A:8A:68:59:50:CD:AA:A8:94:AC:65:20:E5:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E46F2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d316c94a-1e99-47b7-9028-932dcbcefd81/e27ff5a8bbd7cfe21eff4d67fe3130dbee833c58.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d316c94a-1e99-47b7-9028-932dcbcefd81/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Jul 2020 17:55:55 +0000
Certificate not after:    Fri 10 May 2024 20:14:12 +0000
Subordinate resources:    IP: 2801:1d:2800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14970666 (0xe46f2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 10 17:55:55 2020 GMT
            Not After : May 10 20:14:12 2024 GMT
        Subject: CN=e27ff5a8bbd7cfe21eff4d67fe3130dbee833c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:d6:df:f8:2a:7e:a8:84:f8:45:5a:15:1a:
                    d8:d3:88:7c:68:02:14:23:77:3b:c7:f0:af:e8:fd:
                    2b:74:fd:5e:c8:f0:c6:d5:91:61:e0:12:ed:b6:f5:
                    b6:f0:95:d9:4c:97:de:91:6f:87:8f:64:6f:27:5d:
                    15:31:06:fe:75:84:c5:45:2f:b0:d8:56:76:c6:a7:
                    d7:eb:19:5d:be:54:1d:16:e4:69:85:ad:fb:ee:d6:
                    e6:df:b4:b1:46:b2:e3:62:e2:ca:b3:ed:45:4b:64:
                    12:a0:2b:84:a8:af:40:0e:51:14:3c:16:c7:47:a4:
                    51:eb:fd:07:bc:66:a0:c5:a5:f1:32:40:29:49:d9:
                    d2:b4:22:23:d9:1e:33:4b:ed:b9:6b:43:da:c5:31:
                    8d:8a:67:12:5c:16:da:1a:0d:4e:3c:6b:6c:a0:a6:
                    1d:7d:be:99:2d:8c:c2:5c:45:0c:ef:17:8a:e5:a8:
                    11:06:e5:3d:81:62:11:ee:06:2d:b2:92:65:31:4a:
                    8f:c9:c8:a9:03:a1:6c:5b:67:f2:ae:ff:f4:aa:7b:
                    88:54:a8:e8:f1:57:e3:3b:1b:8c:1d:98:88:1f:6e:
                    2a:fd:61:f1:24:00:5b:98:e9:bb:1c:c2:99:f3:d0:
                    2f:52:05:8f:71:d1:69:ad:12:46:38:9d:6d:e4:db:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:A5:1E:F0:B1:2A:8A:68:59:50:CD:AA:A8:94:AC:65:20:E5:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d316c94a-1e99-47b7-9028-932dcbcefd81/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d316c94a-1e99-47b7-9028-932dcbcefd81/e27ff5a8bbd7cfe21eff4d67fe3130dbee833c58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:c8:5e:72:03:1b:39:a5:ab:c7:81:eb:53:b2:55:09:f2:
         11:bb:bb:ed:ad:1b:3f:ba:60:7d:b1:4b:98:f4:06:34:3f:59:
         2b:04:de:41:d3:11:40:47:79:2e:db:82:25:93:7a:a3:35:5d:
         c6:c7:e2:ff:26:95:c8:73:b2:b3:7c:2e:84:36:b4:27:b7:53:
         7b:c3:bc:9e:f2:84:8c:0e:fe:43:ff:64:66:fa:dd:99:48:c2:
         b6:8b:fa:56:ad:f0:88:14:cb:67:6e:ba:9a:c5:ab:96:73:f0:
         a2:d2:6f:ce:46:ea:95:fb:91:7b:96:bb:51:41:a6:f8:fd:96:
         a2:dc:83:ed:6c:47:dc:23:58:1e:20:ad:fa:f5:f1:fa:a8:7f:
         96:66:e4:9e:61:9a:60:7f:6d:ec:e6:dd:a2:40:2c:a8:73:27:
         34:36:22:b6:28:7c:7f:70:8a:91:b6:5b:72:2b:f9:b0:aa:1f:
         92:68:41:10:59:7d:ca:9a:6d:7e:71:e8:d0:5e:c6:2b:5e:3c:
         93:5c:8c:2c:e9:51:29:1b:ab:9e:1f:a8:da:ab:b3:3b:25:83:
         e9:8d:86:a3:c0:ad:a8:b4:42:73:4e:58:b5:54:18:51:6b:75:
         0d:a0:da:d6:d7:44:d8:32:5f:2c:34:8f:7c:fe:68:b8:a7:f2:
         35:98:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:32 2024 by rpki-client on console-ams.rpki-client.org