Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer
File:                     00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer (raw, json)
Hash identifier:          UL19vjU8eLC2tQmuM2Z93NqtgOGYCkdp+mhHPzV6b3Y=
Subject key identifier:   CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106149C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Apr 2018 20:09:10 +0000
Certificate not after:    Thu 06 Feb 2025 18:31:23 +0000
Subordinate resources:    IP: 45.234.232.0/22
                          IP: 2803:8f20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17175708 (0x106149c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  6 20:09:10 2018 GMT
            Not After : Feb  6 18:31:23 2025 GMT
        Subject: CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:c9:ac:29:c9:81:67:9b:1c:e6:4c:a6:e4:
                    d0:4b:1b:59:21:79:d0:e8:26:93:90:31:2f:fc:50:
                    fc:0e:11:96:e8:e6:3b:fe:95:b3:9d:7d:18:ed:7e:
                    1e:40:6e:0f:ed:b5:7b:f6:c3:c0:2e:7b:bb:03:03:
                    d2:c6:a5:9c:5c:87:6f:c5:af:b9:0a:bb:db:1d:04:
                    27:4f:bf:1c:10:f3:93:01:70:cc:a3:10:80:ac:57:
                    3e:1b:5c:3d:7b:eb:f0:14:71:03:2c:66:89:3f:f8:
                    bd:ca:f7:d8:d2:e4:62:02:a0:41:99:7f:3b:a3:2d:
                    9a:d9:8a:30:12:d4:ff:86:ab:9d:d5:39:e2:76:aa:
                    8d:a2:ac:0f:56:14:32:55:9d:aa:27:75:b8:2d:ac:
                    cc:42:6d:8c:2a:31:56:96:6b:34:b0:c9:e1:2e:62:
                    f9:1d:11:52:0b:62:9c:07:83:ae:3d:25:43:7a:3e:
                    fe:22:b5:09:74:73:90:1f:83:ea:3e:83:83:2e:2d:
                    e9:6c:33:08:b6:c2:10:b4:69:65:75:4d:6d:96:e0:
                    eb:dd:b7:e7:20:d0:7e:5d:ba:01:92:69:2e:1d:94:
                    5b:5e:d6:f3:26:94:aa:43:8a:cf:17:ee:fd:42:f3:
                    b2:3c:02:85:b4:37:98:bd:e1:2e:73:d7:2d:76:d2:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.232.0/22
                IPv6:
                  2803:8f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:49:e9:e8:93:81:51:bd:70:76:dd:18:be:9d:44:be:5f:4e:
         85:66:bd:78:e1:f9:02:74:26:78:f5:cd:74:d8:0e:fd:8f:4d:
         01:fb:cf:24:2d:7d:66:fd:96:7e:fe:b0:de:83:b8:5f:44:5d:
         99:1f:9a:fc:7c:53:b0:6d:39:67:dc:cb:22:3a:ad:98:24:53:
         a4:a8:f0:7c:33:10:be:43:b8:c9:f5:90:69:c2:e9:df:bc:7b:
         63:95:0f:56:58:43:af:00:25:2f:e6:2d:58:06:85:a2:fa:ed:
         6e:be:38:29:29:08:ba:e5:a6:fa:1b:6f:4b:9a:11:91:42:8b:
         a7:b6:89:05:48:b6:46:85:b8:11:f4:31:bc:34:b9:1b:37:46:
         a6:a8:72:11:90:a1:3c:08:d8:cb:27:e6:f7:94:f0:33:3f:2b:
         eb:90:ec:df:ba:92:8b:14:53:28:fb:4a:2d:0e:61:4b:8f:e0:
         4e:2e:f9:9d:6c:ca:d1:99:9d:b2:a5:83:6d:21:d4:9f:c7:5a:
         04:e0:e9:17:a3:64:19:57:81:65:c7:42:fe:66:39:df:24:89:
         ab:db:e8:fe:b8:ba:5d:ce:1c:c7:8a:43:7d:e7:1f:d2:06:d8:
         e1:c2:93:fd:d5:1c:58:a2:0e:9f:63:6f:9e:0b:d0:f3:b1:a5:
         fe:54:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:05 2024 by rpki-client on console-fra.rpki-client.org