Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59c4429352acd803514cb578e20f9d87861e0f1.cer
File:                     f59c4429352acd803514cb578e20f9d87861e0f1.cer (raw, json)
Hash identifier:          neRcVNW+NFctdMyzlwIp1m0krTHUBD79M/xwy+AR6bg=
Subject key identifier:   46:B3:FE:6F:6A:DA:7F:9D:F2:FD:51:35:3D:26:44:77:FF:45:C9:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010861CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/f59c4429352acd803514cb578e20f9d87861e0f1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 14:51:33 +0000
Certificate not after:    Wed 26 Feb 2025 09:42:00 +0000
Subordinate resources:    AS: 270159
                          IP: 2806:3e6::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17326538 (0x10861ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 14:51:33 2023 GMT
            Not After : Feb 26 09:42:00 2025 GMT
        Subject: CN=f59c4429352acd803514cb578e20f9d87861e0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:aa:16:57:58:92:93:a0:5b:38:a6:55:d3:
                    95:bc:66:3c:4d:01:0c:30:fa:87:41:db:68:71:ce:
                    d3:00:65:a9:b7:d5:e4:31:50:4b:65:9d:42:68:36:
                    0e:76:07:34:d0:d4:a6:8e:5c:b3:2b:08:9c:36:88:
                    e2:d2:e0:8d:51:b8:9e:df:94:61:77:f2:f9:41:25:
                    90:e4:6e:aa:22:0d:89:ce:fe:a2:cc:d0:3e:06:3c:
                    a9:2d:7d:4a:8f:63:9a:8a:5b:74:f1:65:2f:65:60:
                    bc:fd:e6:eb:2c:11:43:76:31:b4:3a:3f:56:61:31:
                    df:25:3e:d4:9d:9a:8d:db:01:37:da:91:33:0e:aa:
                    e2:1c:2b:59:f3:49:a0:51:b4:11:f5:e0:87:02:2a:
                    06:ff:68:e4:43:39:19:ef:4a:53:f4:2d:e1:cf:4f:
                    80:d9:61:72:fb:6a:72:0b:5a:2b:ce:73:cd:aa:7f:
                    f4:04:d2:19:13:13:e6:d4:3a:13:e1:2c:62:ec:e6:
                    d0:02:0c:cf:47:c3:72:24:39:49:eb:4b:fb:e4:57:
                    71:54:ec:6e:35:a9:ac:f7:84:b7:50:b7:e9:d4:c2:
                    31:fb:ed:94:79:ff:88:1f:6a:36:3a:fb:86:d4:c5:
                    ca:9d:df:e8:ee:30:dd:88:1a:6a:e3:b7:ff:90:9d:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B3:FE:6F:6A:DA:7F:9D:F2:FD:51:35:3D:26:44:77:FF:45:C9:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/f59c4429352acd803514cb578e20f9d87861e0f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270159

    Signature Algorithm: sha256WithRSAEncryption
         84:54:5b:a0:c0:20:c3:41:55:1b:e9:41:3e:e3:ee:b3:90:c6:
         1c:d7:08:ca:a2:57:14:c3:c4:99:9d:11:d3:28:53:49:b2:9f:
         a1:33:a3:e0:fc:88:f4:ce:8f:40:6c:34:73:1e:de:6b:4a:12:
         50:8e:90:ce:2a:58:33:15:d8:05:ba:c3:3c:45:de:7c:53:ba:
         e0:73:fb:c7:4f:ba:c8:d1:0b:3c:f9:b0:a3:0a:7a:c7:29:15:
         9a:28:56:62:7e:f0:5f:68:5c:bc:df:ab:bc:63:ec:ce:9b:32:
         a2:42:d6:7d:4d:f6:43:c2:b1:fc:7c:c5:c7:d4:0a:62:c5:88:
         1c:ec:51:ee:fa:cd:ca:f7:c2:63:2e:8d:36:cf:96:58:89:f1:
         a7:8b:78:7a:5a:a6:3e:00:f0:ba:ef:bc:2b:a3:98:fa:3b:8b:
         cb:05:48:1a:40:cc:12:4c:49:5f:77:5e:5a:9f:b6:de:d1:36:
         7b:ba:6c:17:d9:04:da:0c:a4:99:10:7a:3a:98:64:a5:17:50:
         dd:0a:ab:7a:80:d4:e4:4f:9f:17:53:6d:43:ae:5f:85:28:4a:
         a3:7f:41:24:16:f4:5c:8d:13:f9:23:f7:77:8e:e1:8e:ad:b3:
         d4:23:ab:c3:bb:24:94:2c:a0:22:31:d3:c7:81:8f:53:f9:33:
         b5:82:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:20 2024 by rpki-client on console-fra.rpki-client.org