Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
File:                     ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer (raw, json)
Hash identifier:          YLZmBd80HuvJwLFtHHPXoxymBYgpeFBm5FLq6+gkCIU=
Subject key identifier:   14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Authority key identifier: FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47
Certificate issuer:       /CN=root trust anchor O=lacnic
Certificate serial:       0620D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Oct 2012 13:00:00 +0000
Certificate not after:    Sun 10 Oct 2027 13:00:00 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Oct 2027 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401623 (0x620d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=root trust anchor O=lacnic
        Validity
            Not Before: Oct 10 13:00:00 2012 GMT
            Not After : Oct 10 13:00:00 2027 GMT
        Subject: CN=production O=lacnic
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:86:83:98:96:57:db:d7:f0:72:4c:41:cd:
                    71:9d:2f:85:da:43:3f:4d:53:87:36:41:9e:88:45:
                    4b:42:92:bf:53:d8:9e:10:74:14:7d:8e:c7:c2:55:
                    9d:fe:8a:00:b6:2b:f0:92:08:21:bb:6a:18:3e:f9:
                    6d:99:54:a9:92:91:9c:34:01:29:22:f1:1c:da:b3:
                    57:34:86:11:2d:ae:af:37:5c:00:c1:e0:51:e4:5d:
                    2c:e2:fa:a3:69:01:98:0c:7c:f2:01:9a:66:f0:84:
                    88:0c:a5:c8:70:eb:d0:23:4d:4c:33:93:52:3e:f2:
                    03:8d:6a:2e:9d:0d:3e:67:4a:7b:11:fd:f4:f3:2b:
                    85:0f:4d:45:82:f4:09:d4:14:73:6e:7d:7a:7d:d7:
                    2e:8d:45:37:78:30:47:e6:84:8f:72:d4:fa:0f:af:
                    ae:dc:43:f4:7e:cc:2f:f5:ad:ce:c6:8c:90:d8:ac:
                    48:f6:9b:0d:ef:f9:d5:fe:ec:31:e5:be:f9:3f:40:
                    5f:b4:d3:27:30:1c:c1:89:b0:ce:85:53:57:da:1f:
                    59:21:bb:46:3a:14:44:33:cc:3c:6f:ea:4f:3e:9a:
                    b8:b3:f7:95:98:5d:2d:e5:f8:f4:e1:44:ac:76:f2:
                    60:a7:a4:ad:9d:54:48:8f:be:67:53:a5:5b:1f:1e:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
            X509v3 Authority Key Identifier:
                keyid:FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:39:6e:b7:b5:77:d1:0a:4c:7c:c2:f3:a6:1d:1c:91:5c:9d:
         c4:08:03:22:32:1c:6a:67:79:17:a9:e6:81:39:87:fa:d7:cb:
         d1:bc:ae:45:fc:ce:8a:df:cc:da:4e:c3:30:a9:9f:d9:e7:a1:
         e9:76:c7:04:d3:21:de:43:0b:d2:01:27:c1:82:8d:91:56:3e:
         5a:08:14:b7:99:30:7e:89:a3:ce:d1:8f:e5:22:94:4e:66:1f:
         2e:5a:9d:b7:ba:e3:51:aa:ee:28:39:77:93:c1:20:a6:14:e8:
         96:58:74:1d:1f:8e:9b:e2:7f:cc:bd:72:21:bd:9f:9d:ea:02:
         1d:ba:20:f9:ed:d5:81:5e:89:86:7b:66:de:8f:61:71:01:e2:
         ca:0e:58:f5:3d:40:f2:5f:d3:cc:53:51:ab:71:f7:06:27:03:
         7b:52:17:e9:de:d9:31:4e:87:02:87:d9:99:d7:85:3e:f8:6a:
         4f:39:a6:0b:3f:33:b0:69:e3:bd:46:26:11:92:86:06:d3:73:
         71:68:68:f7:9c:57:86:8c:3d:56:15:f9:10:5b:dc:ed:1a:12:
         ad:df:ed:dc:72:f6:87:74:a9:7c:ca:44:10:b7:c2:2d:ad:83:
         72:61:41:5f:0b:97:35:66:59:a1:c0:45:f2:59:70:a6:9e:3b:
         cd:8b:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:21:46 2023 by rpki-client on console-fra.rpki-client.org