Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7ed72cdaad5453df915fe969ade02238e68c840.cer
File:                     f7ed72cdaad5453df915fe969ade02238e68c840.cer (raw, json)
Hash identifier:          Pupiq0xwSSFwrgleMrtlqi/TWFj6p3ph5AQul05TngY=
Subject key identifier:   C3:30:D2:8D:5A:BA:A3:67:05:70:CC:31:BE:80:42:70:8A:F9:2E:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE3835
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fe0707ff-6bdb-4214-89e3-5134e467c896/f7ed72cdaad5453df915fe969ade02238e68c840.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fe0707ff-6bdb-4214-89e3-5134e467c896/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Feb 2023 11:53:57 +0000
Certificate not after:    Tue 16 Jul 2024 18:35:54 +0000
Subordinate resources:    AS: 269781
                          IP: 45.183.156.0/22
                          IP: 2803:c360::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14563381 (0xde3835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  7 11:53:57 2023 GMT
            Not After : Jul 16 18:35:54 2024 GMT
        Subject: CN=f7ed72cdaad5453df915fe969ade02238e68c840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:03:2c:6e:d8:d8:3e:46:ab:8e:8f:02:cf:
                    cf:e4:91:cb:a3:d2:5f:3a:93:0c:4b:9c:c5:a5:f9:
                    de:b6:11:45:63:08:91:f0:30:a8:d8:de:a7:a6:72:
                    32:29:93:a5:2a:96:79:9f:ed:0d:fb:63:df:a8:53:
                    21:f8:bb:45:c4:bc:92:83:01:41:ab:18:a5:b8:5d:
                    27:65:67:b4:38:b3:02:9e:2a:f3:b7:e1:23:a1:10:
                    4c:48:68:84:f7:f7:9a:e4:90:3c:cd:d5:86:ce:65:
                    35:75:34:aa:91:82:b8:3f:c2:5e:49:63:c5:96:46:
                    e0:c2:26:d7:67:84:02:82:65:96:84:17:66:94:1f:
                    80:a3:b5:22:26:91:70:54:5f:de:b5:78:6b:06:96:
                    5c:73:17:0a:a3:45:f2:fd:e4:69:b8:b9:4b:bc:12:
                    dd:d7:14:05:d6:13:ad:44:73:83:bf:69:da:e7:c9:
                    61:92:5d:35:b5:04:96:7b:16:68:1e:34:c2:b8:67:
                    8c:76:2e:5b:d7:d3:55:af:90:5c:36:e0:17:84:0a:
                    4f:d9:91:a4:ab:ac:13:90:8e:23:e0:82:38:9a:1d:
                    dc:01:36:52:2d:bc:9b:a0:f6:48:c4:36:3d:aa:7e:
                    58:5d:b2:33:af:b5:b6:28:7a:54:1f:56:06:8c:8d:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:D2:8D:5A:BA:A3:67:05:70:CC:31:BE:80:42:70:8A:F9:2E:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe0707ff-6bdb-4214-89e3-5134e467c896/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe0707ff-6bdb-4214-89e3-5134e467c896/f7ed72cdaad5453df915fe969ade02238e68c840.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.156.0/22
                IPv6:
                  2803:c360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269781

    Signature Algorithm: sha256WithRSAEncryption
         0a:7f:a5:0b:50:89:1a:88:8d:91:b9:70:98:d2:0a:4a:b3:f2:
         a2:60:fb:a6:b1:47:3c:57:b4:3d:c4:cb:56:d0:04:1f:c7:a8:
         07:62:52:61:fa:dc:d4:23:6e:0d:eb:c2:2d:bf:31:83:42:32:
         40:06:b8:4f:94:98:e5:73:d9:4d:cf:b0:eb:1c:3f:39:3f:77:
         02:71:01:f6:4c:cd:67:72:5b:21:80:6d:07:f3:19:7c:ee:cb:
         74:ad:7b:5a:a0:2e:5d:57:e7:92:36:58:92:f4:71:b1:c7:bc:
         8b:a8:b1:0f:26:f9:de:e3:5f:5d:b1:80:d4:ec:47:c7:e6:04:
         14:43:72:08:38:00:93:a9:cc:c4:1f:83:18:d4:ef:de:4a:e8:
         c9:f6:72:53:09:61:ac:c5:fe:a6:af:26:d9:3b:60:94:b9:4f:
         cc:7c:47:2d:61:23:d7:3e:ac:0b:3d:81:0b:6f:d1:92:63:74:
         ec:52:19:d4:55:b1:ce:2a:ab:23:ed:28:14:9c:a2:0c:69:26:
         d7:84:65:00:ba:57:90:6f:e5:89:92:b4:32:8b:33:02:af:a9:
         00:c0:e3:cf:5d:4b:87:90:36:43:13:68:be:28:54:bd:8f:6f:
         a3:a9:52:27:1d:55:18:f7:ba:0e:86:35:46:5a:5e:4e:8e:38:
         10:d0:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:50 2024 by rpki-client on console-fra.rpki-client.org