Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f54c772f98cda0bd98aa3c5e37e22c9c52cdd9af.cer
File:                     f54c772f98cda0bd98aa3c5e37e22c9c52cdd9af.cer (raw, json)
Hash identifier:          JpKQRqanNapZMFSI2GznrLciMkDSH7+pi8/ZPO4uagU=
Subject key identifier:   39:2D:72:41:F8:F8:DD:63:1F:A4:97:BB:7F:5E:8A:0D:E6:A9:0E:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D4B59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d15988eb-a77b-436c-b155-9838aad53973/f54c772f98cda0bd98aa3c5e37e22c9c52cdd9af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d15988eb-a77b-436c-b155-9838aad53973/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 15:12:05 +0000
Certificate not after:    Tue 08 Apr 2025 16:33:52 +0000
Subordinate resources:    AS: 64111
                          IP: 45.236.128.0/22
                          IP: 2803:64a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17648473 (0x10d4b59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 15:12:05 2023 GMT
            Not After : Apr  8 16:33:52 2025 GMT
        Subject: CN=f54c772f98cda0bd98aa3c5e37e22c9c52cdd9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:e8:08:bb:44:7e:39:e4:0c:39:d2:93:c5:
                    c6:d0:dc:c6:7d:db:e4:ae:7f:f1:9e:8e:a0:e0:78:
                    73:14:93:23:1f:e0:a2:ec:18:8a:07:2a:e5:fc:b8:
                    ef:05:d5:17:2f:f5:a3:d1:1f:af:2a:b6:ec:4f:e0:
                    3e:f0:4c:de:00:b8:d3:89:99:9c:e0:dd:99:68:b1:
                    e6:ad:99:01:12:4f:15:99:6b:2b:33:89:8f:ca:84:
                    ab:3c:21:9b:5a:e5:55:98:e2:80:46:18:00:64:17:
                    09:ec:e7:cf:48:60:e5:5b:29:0f:71:d6:7f:ce:05:
                    f2:ab:89:eb:3f:e5:5b:e6:86:a9:84:bc:11:90:03:
                    5d:c5:a9:d0:44:39:4c:18:82:3a:a2:b9:33:0b:eb:
                    5e:cb:8d:78:50:3a:e5:50:4c:17:dd:91:fd:9d:eb:
                    2b:00:47:fb:1e:f6:27:0a:6c:57:17:ea:93:20:98:
                    d7:e8:a7:93:44:00:c4:ae:a6:74:93:60:3f:fe:0f:
                    06:87:99:c4:62:6c:19:4f:12:fc:6f:30:50:81:cb:
                    28:12:81:25:d9:ea:25:f9:53:b5:7c:21:ea:c4:fc:
                    c4:5f:22:f2:20:cd:bb:36:12:10:a5:ef:36:46:fc:
                    ca:75:5a:bf:33:04:61:ce:10:cd:b6:8f:51:45:10:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2D:72:41:F8:F8:DD:63:1F:A4:97:BB:7F:5E:8A:0D:E6:A9:0E:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d15988eb-a77b-436c-b155-9838aad53973/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d15988eb-a77b-436c-b155-9838aad53973/f54c772f98cda0bd98aa3c5e37e22c9c52cdd9af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.128.0/22
                IPv6:
                  2803:64a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64111

    Signature Algorithm: sha256WithRSAEncryption
         b4:d3:c4:0f:b4:db:25:b2:56:59:3e:8a:ef:4c:7c:ef:76:29:
         09:a5:f1:21:be:1f:88:b8:ff:5d:8f:4f:9e:06:2f:9c:60:c6:
         19:e5:52:2b:54:7d:57:f6:04:75:a0:66:be:1e:d7:a3:a9:86:
         ee:03:f7:12:d4:19:17:91:95:45:ab:5a:51:3d:cf:3b:e0:91:
         5d:8f:a8:f0:fe:dd:3d:6a:3c:66:fd:d5:1b:dc:9c:e6:10:04:
         db:be:10:c1:d7:7f:45:e6:54:93:80:b4:80:19:70:5f:41:85:
         d9:eb:6a:89:09:24:39:e8:92:71:46:61:fc:91:90:91:3e:26:
         59:b2:41:18:22:1a:26:49:56:ae:8c:3a:cb:c9:4a:f6:37:1f:
         2e:47:85:f2:ac:33:17:ef:ce:20:db:14:15:c8:29:cc:bd:86:
         74:6e:d6:ba:5d:cc:b6:ec:b6:6f:8a:ff:99:c3:df:9b:41:a1:
         49:07:b3:d2:a1:3a:2c:65:f3:0b:6d:37:4c:2c:fe:7b:47:6a:
         50:c0:cb:0d:66:fb:d4:b2:21:8b:10:c5:dd:6f:7a:af:5e:1e:
         ca:55:31:4c:58:07:fb:14:ff:3d:c2:cf:c6:23:e9:95:2e:a2:
         79:45:13:68:0e:8a:ec:24:d2:06:21:5d:e1:07:58:6e:2b:f2:
         f2:ca:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:20 2024 by rpki-client on console-fra.rpki-client.org