Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb905d7180f5ee1294194daf90bbf357a51ccf67.cer
File:                     fb905d7180f5ee1294194daf90bbf357a51ccf67.cer (raw, json)
Hash identifier:          lDXpa6wGXiCl8ioUjF2IAr2y10i9LVVFIbwt/HEP+N4=
Subject key identifier:   35:E6:0D:94:E6:9B:88:B4:22:64:B7:00:C4:65:20:67:22:4D:60:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108662F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/07990adb-f000-415b-9ee1-5e6c05e64854/fb905d7180f5ee1294194daf90bbf357a51ccf67.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/07990adb-f000-415b-9ee1-5e6c05e64854/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jan 2022 19:28:17 +0000
Certificate not after:    Wed 26 Feb 2025 17:47:42 +0000
Subordinate resources:    AS: 267839
                          IP: 45.173.192.0/22
                          IP: 2803:5460::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17327663 (0x108662f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 28 19:28:17 2022 GMT
            Not After : Feb 26 17:47:42 2025 GMT
        Subject: CN=fb905d7180f5ee1294194daf90bbf357a51ccf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:bb:06:09:23:0e:f3:b7:a4:f6:2a:0c:53:
                    ba:92:20:9a:35:92:0a:f6:1d:7a:87:ff:ba:42:d5:
                    ca:f3:65:2f:b9:82:e6:c1:b3:64:db:ea:b7:dd:3f:
                    d7:a8:f6:39:57:43:9c:0f:f4:6d:8b:05:4e:7b:52:
                    85:3d:ed:03:36:82:f9:7b:32:20:73:b3:10:2d:5f:
                    bd:e8:c2:ed:8c:69:5d:be:9a:49:e9:98:4f:da:ad:
                    55:25:e6:5a:5a:bb:9a:76:4c:e1:06:d2:89:a6:ae:
                    28:b9:67:13:e4:68:41:d0:64:5e:49:d9:19:16:12:
                    98:5d:72:2f:a8:16:df:2e:c3:9a:91:46:6d:9b:79:
                    1d:51:8d:da:86:79:28:8e:71:dd:ae:c0:fc:9e:31:
                    f5:c3:be:38:07:02:92:58:bf:87:f1:59:d3:d5:8b:
                    5e:6f:dc:06:8e:d3:5b:28:26:75:df:9e:03:b3:0f:
                    a0:9a:7b:c2:9e:2d:05:27:4f:f7:bd:10:b1:c4:f3:
                    4f:2f:59:12:68:22:14:ff:c8:66:bf:eb:90:73:dd:
                    e2:48:6d:65:44:62:c5:0b:70:34:da:94:aa:d4:47:
                    71:28:ed:df:f8:d7:08:85:2a:30:2f:6c:f3:93:89:
                    1e:45:cf:55:d0:8c:39:90:72:b6:2e:c0:10:37:b7:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:0D:94:E6:9B:88:B4:22:64:B7:00:C4:65:20:67:22:4D:60:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07990adb-f000-415b-9ee1-5e6c05e64854/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07990adb-f000-415b-9ee1-5e6c05e64854/fb905d7180f5ee1294194daf90bbf357a51ccf67.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.192.0/22
                IPv6:
                  2803:5460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267839

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:1d:c3:c4:83:f0:f6:fb:a8:19:56:80:b6:63:94:c7:c5:
         ac:74:fb:32:d4:91:d2:bc:78:c0:38:0d:c1:be:e7:ac:97:b4:
         3e:6a:e8:87:a7:6b:e2:d8:ea:c6:a4:cd:a2:59:4b:84:23:2b:
         b7:ac:de:4d:2a:6a:08:5e:e3:a6:8f:7a:10:61:85:d1:0e:bf:
         93:6a:11:60:79:35:cd:de:4a:15:20:19:9d:2b:53:26:17:96:
         93:78:e1:56:be:8e:2f:a7:4f:6a:17:04:5a:7e:11:8c:fc:e1:
         44:5e:0d:02:df:5c:11:fa:f5:d3:41:f3:7e:5e:66:ee:94:36:
         1d:8d:35:6b:44:7a:a8:af:c4:47:b3:37:33:5f:94:be:36:24:
         09:99:d2:e5:7c:4b:e6:d5:77:9d:c9:3f:5b:67:0f:24:aa:a5:
         9c:e2:84:9f:11:eb:91:05:85:f6:56:06:b4:21:eb:c2:02:9a:
         17:42:39:48:ac:e0:66:7a:e8:8f:2f:e8:c5:81:d8:84:25:23:
         bd:66:6d:30:b0:40:e5:ce:80:4c:1e:02:93:79:a7:47:56:41:
         b9:6c:4f:7b:2b:d5:38:ad:ba:b7:a5:4b:85:d1:f3:b6:43:48:
         fa:97:92:5e:b6:98:e2:0d:95:95:2f:18:95:2a:b4:ce:1e:9f:
         d3:dc:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:22 2024 by rpki-client on console-fra.rpki-client.org