Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.cer
File:                     01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.cer (raw, json)
Hash identifier:          hgJr401sJ4Sfoin+bx5Npz6lQaLH6MaSkdy3krz6A8w=
Subject key identifier:   90:79:F9:B1:64:5C:04:00:B4:CE:78:CA:A8:8A:34:15:33:86:B1:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010219FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Sep 2018 18:49:22 +0000
Certificate not after:    Tue 24 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 265661
                          IP: 45.4.252.0/22
                          IP: 2803:f6c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16914943 (0x10219ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 18:49:22 2018 GMT
            Not After : Dec 24 05:00:00 2024 GMT
        Subject: CN=01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:c3:2d:64:23:89:74:e4:3f:98:f9:11:70:
                    5f:a5:96:33:3b:2f:f4:3d:75:56:0c:fc:ba:23:85:
                    c3:1b:34:72:e7:ff:a6:1a:6b:aa:fe:96:3b:2f:bf:
                    d1:d3:43:25:dc:d4:06:1b:a6:a9:2b:2a:2a:00:40:
                    85:23:d5:a6:b8:8a:ef:35:51:f1:e4:34:7e:ab:85:
                    7b:7b:ab:6f:09:b3:e3:48:3e:96:e8:e3:1d:96:07:
                    24:19:fa:b7:26:6a:dc:dd:e3:53:6b:49:12:51:02:
                    66:ba:49:76:35:38:77:29:6a:5a:c7:4b:f6:5b:79:
                    b2:14:0a:bc:ba:fc:f4:90:d9:c5:91:16:f4:da:90:
                    eb:68:d2:8f:da:75:f0:ac:7d:c1:a4:e3:64:9b:c5:
                    b2:f0:41:6b:7f:19:c7:ac:1a:2c:8d:9c:7f:8c:1a:
                    0b:72:ff:53:24:b1:9d:7b:7a:b8:03:b0:e6:fc:71:
                    0c:69:de:23:97:91:5a:1e:3b:af:42:fb:ef:54:66:
                    f1:db:50:6d:0a:7c:9c:e7:d9:f8:7a:68:09:b9:78:
                    2c:a7:1a:ae:f0:b9:05:de:6e:e2:d0:4f:3c:be:4d:
                    a5:69:48:71:d8:45:be:a1:e7:7d:70:b6:8c:1f:54:
                    9b:d1:ba:e5:10:eb:d5:af:e4:5f:f3:b3:2e:37:b9:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:79:F9:B1:64:5C:04:00:B4:CE:78:CA:A8:8A:34:15:33:86:B1:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b9b1dd7e-24cb-4c9d-938c-13cb4d1156a6/01be7e7c38df126b8fc7e82d65b4dfc5f1f64c36.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.252.0/22
                IPv6:
                  2803:f6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265661

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:ea:f0:2a:3a:6b:57:85:f8:2d:ce:4d:8c:f8:02:54:a9:
         01:b8:8f:28:05:18:89:54:94:b5:d4:5e:f3:2a:bd:da:a5:ab:
         57:19:68:8e:78:7d:e8:5a:c0:80:16:60:60:f9:35:96:a4:2d:
         72:dc:44:6c:63:0a:21:ea:5a:38:4c:a6:7b:08:96:38:0a:ea:
         34:d2:9c:79:32:aa:bf:d2:7d:62:6e:08:2a:80:05:86:28:0d:
         65:06:cb:80:48:ea:4a:08:59:19:28:e7:6a:24:b3:c7:32:fb:
         a1:c6:88:cd:01:d9:03:59:58:ed:4c:b8:81:16:38:18:51:98:
         b1:7e:6e:7a:15:f0:5e:cd:e8:5c:26:b8:06:5e:39:cf:48:c3:
         5e:d3:af:bc:18:7f:a1:e2:59:af:67:dc:85:8e:66:86:0e:d4:
         5a:41:91:60:4a:ea:47:57:96:ee:72:f3:5b:8e:29:b9:e7:01:
         18:00:be:ce:40:4d:5d:14:2f:fc:52:2c:f7:a9:f9:52:ae:f4:
         6b:22:e9:81:1f:94:e1:c1:d3:76:79:3d:1c:f1:58:ca:7b:13:
         0e:bd:b5:4a:39:48:a8:5d:d4:f4:81:ab:45:81:71:29:35:79:
         bf:fc:d1:6c:6d:78:4d:e6:94:e0:23:40:09:a7:38:59:9c:d2:
         3c:32:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:28:53 2024 by rpki-client on console-ams.rpki-client.org