Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer
File:                     ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer (raw, json)
Hash identifier:          sdN8iaiGSJx7GiZYBq23S9uy1IBp1n+7EuqGHYZwsjk=
Subject key identifier:   B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B56EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Nov 2021 18:19:40 +0000
Certificate not after:    Sun 23 Mar 2025 19:51:50 +0000
Subordinate resources:    AS: 265534
                          IP: 45.7.44.0/22
                          IP: 2806:2e6::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17520364 (0x10b56ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 16 18:19:40 2021 GMT
            Not After : Mar 23 19:51:50 2025 GMT
        Subject: CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:b2:1a:1d:fc:e9:e1:75:d8:90:80:8d:fb:
                    77:98:81:4b:80:59:f3:76:e6:54:99:49:ec:20:f5:
                    db:e4:90:52:1a:33:f0:99:13:70:aa:94:90:bd:90:
                    bc:d4:b0:34:58:a4:1c:59:51:11:50:68:3b:6b:a0:
                    79:65:6a:ea:23:d7:6a:ba:a5:80:19:18:ac:ec:c9:
                    1f:8c:f2:0e:ff:45:f1:22:64:ce:17:7e:7b:29:20:
                    66:b0:29:ef:14:d5:c8:44:64:7c:0d:c4:cf:10:8e:
                    31:70:dd:6f:72:dd:8d:38:1f:02:ca:f5:ff:dd:16:
                    b9:56:16:84:b4:96:f4:b3:15:00:82:2b:a8:76:e9:
                    46:75:94:e8:94:71:fa:d9:64:96:d7:37:65:e8:55:
                    7d:18:3f:8c:3f:0f:c4:c2:26:0e:16:d5:a4:a9:a8:
                    b8:0e:d3:36:d5:07:28:ee:bd:02:18:fa:83:65:dd:
                    db:e3:e9:17:c7:d2:29:33:62:4e:76:3d:28:09:c5:
                    50:2f:ce:5a:79:c4:9c:d9:e0:36:11:ba:81:f5:fb:
                    6b:cc:1f:6d:37:95:a6:77:25:ef:30:2e:8c:f4:17:
                    15:91:b9:d0:09:4d:d5:67:14:b3:74:a9:55:c3:d9:
                    7d:51:be:ad:aa:fa:76:fc:35:02:e7:4b:b0:fa:57:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22
                IPv6:
                  2806:2e6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265534

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:91:d9:2f:32:40:81:8d:63:66:45:d8:30:14:c2:1e:10:
         77:04:32:c2:34:11:68:fb:18:c0:85:9b:0b:1d:b3:99:bf:29:
         f4:9c:b6:b9:ae:4e:20:66:91:c4:f0:17:c6:61:de:8d:97:2d:
         02:5e:3d:02:46:d5:a1:e8:f7:f5:cb:ff:a3:52:84:33:e3:ca:
         b8:a2:25:ab:09:e4:92:4a:d9:0e:41:a5:b5:ba:13:38:ee:ce:
         54:3e:e9:59:33:cf:4d:55:50:71:24:4b:46:3c:1d:47:14:16:
         8f:e1:f2:bf:92:0c:d4:67:12:81:df:68:89:77:ea:3e:24:22:
         2f:5f:21:8b:45:59:c8:3d:c9:59:58:6c:5f:d4:3c:83:4c:5f:
         7a:34:b6:d1:c0:f4:4b:6e:6b:fd:b0:f5:17:eb:47:78:a1:99:
         98:ea:6e:2c:bc:19:9d:98:be:fc:bb:f0:e0:ce:2c:f7:b0:56:
         75:13:4e:d1:d8:86:e2:d4:05:5a:b2:40:f5:08:a8:fa:fe:fc:
         08:33:b4:ed:70:7f:4a:a0:b4:00:15:93:de:2c:01:8b:66:92:
         b0:29:4c:f2:fd:c1:4c:a7:57:a6:9d:eb:88:bc:7a:87:4c:a4:
         d4:63:9f:41:90:a8:07:bf:56:13:c1:0d:20:8c:64:44:9f:67:
         5b:b3:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:35 2024 by rpki-client on console-ams.rpki-client.org