Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer
File:                     e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer (raw, json)
Hash identifier:          70grzTTdprLPCteMPNdIPxsHin2yiMxHNASzw6wttdw=
Subject key identifier:   F3:DC:12:CD:8D:C8:69:8E:B0:89:77:42:7B:6C:08:56:F3:A5:27:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E5A17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 21:37:05 +0000
Certificate not after:    Thu 17 Apr 2025 20:09:12 +0000
Subordinate resources:    AS: 64140 -- 64142
                          AS: 64148 -- 64149
                          AS: 272806
                          IP: 45.68.24.0/21
                          IP: 45.68.36.0/22
                          IP: 2801:1a:5800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17717783 (0x10e5a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  2 21:37:05 2022 GMT
            Not After : Apr 17 20:09:12 2025 GMT
        Subject: CN=e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:15:76:52:42:f0:c9:39:01:36:5f:92:83:
                    03:3a:7e:d0:bf:29:05:2e:a0:44:47:ed:3c:ba:aa:
                    a3:99:c8:ae:0b:74:bc:0d:34:1b:c2:1e:01:b9:1e:
                    5a:26:d1:fb:0d:9f:7b:51:6d:f0:7e:62:d1:a9:33:
                    51:c3:54:d7:3a:e0:f2:17:4c:f0:a1:a2:1f:3d:c8:
                    c9:88:1b:05:cd:cf:41:44:0d:fc:c2:f2:65:46:0a:
                    4a:54:e0:8c:10:0b:d9:7f:d4:91:8b:83:f1:66:63:
                    18:9a:71:d8:1c:a0:f6:b0:c0:97:6a:3d:04:29:ee:
                    5d:be:df:43:7c:23:fc:c8:e6:b1:e4:23:74:0a:19:
                    a8:f2:21:3f:e4:c2:55:01:c6:2c:82:91:14:c7:32:
                    1d:86:5c:7b:11:bb:66:b8:78:f9:73:e9:63:85:6a:
                    c7:12:84:a7:4f:88:f9:c9:29:31:3e:23:d6:84:70:
                    d2:d3:c8:09:8e:e2:17:ee:51:00:3e:99:6e:71:a7:
                    84:9e:04:20:0f:d6:7a:87:c0:4c:83:bf:15:64:c2:
                    42:80:69:3b:29:c1:5f:e5:36:6a:cd:e7:b4:8d:91:
                    f6:aa:44:59:51:10:8b:7a:62:92:f8:60:a9:b9:c3:
                    b4:7c:31:2b:e6:dd:df:8d:4a:4b:bd:01:9c:ae:1c:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DC:12:CD:8D:C8:69:8E:B0:89:77:42:7B:6C:08:56:F3:A5:27:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.24.0/21
                  45.68.36.0/22
                IPv6:
                  2801:1a:5800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64140-64142
                  64148-64149
                  272806

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:15:46:c6:de:57:dd:85:d3:15:e2:99:aa:a1:2d:65:22:
         d4:2b:75:61:dd:b2:b7:b8:cd:0e:e5:dc:97:f7:4e:ee:d1:74:
         90:e4:fa:2e:ba:d0:6f:83:88:6e:91:d6:27:22:b8:87:ce:90:
         71:82:f7:98:48:d9:39:14:bb:e1:9a:95:4e:5e:5a:61:3f:3b:
         9d:c5:bc:17:29:af:20:b3:3c:29:8a:f9:68:de:40:ae:9a:3b:
         76:ba:ea:dc:1a:fa:d6:ad:34:09:e9:ad:d5:6f:78:af:64:da:
         c2:05:ef:84:51:c1:33:46:80:41:50:e5:9b:42:b0:1a:8b:df:
         44:aa:1f:30:d1:23:0d:b0:83:e8:13:b9:12:d4:1b:0d:ee:d1:
         8b:a6:f8:6a:44:25:a7:30:2d:45:18:12:80:50:07:f5:38:4c:
         30:b8:c1:03:a1:0b:c2:8c:71:a4:1b:66:3b:bb:d6:1b:c6:dd:
         3e:15:e7:a0:67:a5:e9:a8:1e:42:7b:57:31:81:f8:7a:8c:e5:
         4d:a1:5d:ab:48:83:7e:05:c1:14:10:86:f4:3b:e4:0e:aa:72:
         00:d0:83:24:8a:e4:c6:88:f8:bf:8e:d3:c3:f2:34:e3:3e:27:
         6e:5c:be:28:87:42:e3:b8:a0:36:9c:92:9b:1c:c5:e5:68:18:
         e0:08:d2:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 28 22:20:00 2024 by rpki-client on console-fra.rpki-client.org