Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
File:                     e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer (raw, json)
Hash identifier:          V+FbHk4nfdVOrOGkFT2cirvKnez0RvBcypIPRl1BkXc=
Subject key identifier:   3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AD160
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Nov 2020 23:21:28 +0000
Certificate not after:    Wed 19 Mar 2025 01:29:36 +0000
Subordinate resources:    IP: 138.99.144.0/22
                          IP: 2803:d840::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17486176 (0x10ad160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 19 23:21:28 2020 GMT
            Not After : Mar 19 01:29:36 2025 GMT
        Subject: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:da:c7:be:a4:a6:72:d1:bf:18:98:ee:6d:
                    5e:e5:4b:48:7f:d6:36:4d:9b:a9:8a:ff:f8:7a:a6:
                    00:84:27:79:af:1d:ef:8f:1d:38:58:d3:85:55:6d:
                    d6:a1:58:a0:5d:e7:b3:5d:0f:4d:3a:98:77:24:b7:
                    40:62:a0:17:23:ee:2a:41:c3:3f:e1:9a:39:6d:12:
                    87:e6:2c:65:90:ba:99:dc:5b:3e:0c:84:8c:f9:46:
                    69:23:fe:4d:af:02:58:cb:4a:b2:9f:78:49:b3:16:
                    86:30:3f:5e:5e:bc:ab:79:13:eb:5a:61:9b:61:ee:
                    a7:33:67:46:fd:9a:23:d2:d9:79:08:db:81:7f:ef:
                    d1:09:15:80:9b:f2:0d:90:87:15:7d:21:1d:cb:ae:
                    8b:5e:d6:07:42:f8:22:19:2d:bb:d9:2d:50:f7:fd:
                    22:01:f0:3f:8f:4c:36:57:42:63:5f:5c:dc:e8:04:
                    16:df:a0:f4:e0:3e:68:ea:11:b8:3d:e4:59:37:25:
                    36:26:de:eb:80:b4:77:70:fe:4f:08:c2:8a:60:8f:
                    7d:99:c1:ad:08:94:e4:cf:17:c2:4e:0e:79:15:88:
                    a7:48:4f:55:c3:c0:bb:4d:30:95:d4:e0:71:11:53:
                    5a:2d:1f:06:88:80:86:8d:23:d0:e9:47:6f:a7:61:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/22
                IPv6:
                  2803:d840::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:90:60:bb:05:33:97:f1:76:88:46:0c:2c:89:1a:4d:6f:
         f9:e0:7a:6f:32:33:b7:c5:82:fb:46:4e:60:49:2a:85:86:77:
         f0:3a:71:a6:f1:a9:de:b6:13:88:ed:26:13:c2:44:8d:2c:05:
         b1:94:bb:50:b8:9b:d8:e2:36:19:de:3d:e2:9b:98:a5:e8:c7:
         64:e5:f1:b1:7f:98:bf:79:d7:80:c7:ef:44:dd:04:b4:1c:ec:
         d3:93:82:ea:c9:6f:bb:96:29:f2:73:0c:c4:e2:22:0c:63:70:
         1c:d8:a7:f3:c6:4b:a6:4d:f5:5d:b8:cd:05:d6:e4:b4:b3:e3:
         b2:7a:7d:70:5f:23:bc:71:62:c2:73:8d:72:70:19:a2:57:c9:
         33:a2:37:d5:01:97:09:1f:2c:9f:9e:a5:19:da:b2:f2:55:34:
         73:df:f2:6b:84:08:31:d6:a5:f2:b5:82:10:95:3e:43:55:37:
         15:65:b9:c0:09:ab:5e:e0:2b:c7:30:cd:d1:f9:cd:78:6a:42:
         01:5d:6b:3d:d9:51:44:0d:84:90:c1:35:78:af:76:fe:d1:98:
         9c:7e:17:cc:cd:47:d9:17:4f:25:0b:cb:28:3e:6b:99:a3:10:
         6b:70:1b:14:3d:53:ac:f5:41:4d:8c:35:43:4c:87:51:9b:a7:
         c9:15:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:15 2024 by rpki-client on console-fra.rpki-client.org