Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/026e3c3568646609466eb56f4d80d46b89bb2dcc.cer
File:                     026e3c3568646609466eb56f4d80d46b89bb2dcc.cer (raw, json)
Hash identifier:          VGN/9ezOkVG/HY6H/T8M7MaO9uwhqbj9y0Ml3yQ01EY=
Subject key identifier:   49:CC:30:C6:95:38:DC:0C:E5:55:ED:EF:6E:A5:68:27:2E:86:FD:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103C090
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Mon 13 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 264782
                          IP: 207.248.81.0/24
                          IP: 2801:0:2e0::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17023120 (0x103c090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Jan 13 05:00:00 2025 GMT
        Subject: CN=026e3c3568646609466eb56f4d80d46b89bb2dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:c1:f0:f6:02:54:f8:40:ab:ff:30:fa:eb:
                    f9:4c:1f:c8:36:b8:dd:43:0f:31:b8:e7:25:85:71:
                    6c:45:86:63:e4:c8:d9:1b:48:49:0c:61:71:18:43:
                    d7:43:6b:ba:84:fe:89:50:13:e0:1c:b9:e0:88:3e:
                    0f:e8:18:92:3a:a7:65:8d:de:92:a1:93:59:5e:f2:
                    2b:78:8a:f7:59:d6:5e:a4:a2:4f:2a:8a:da:73:2a:
                    4b:fc:0b:fa:ba:61:60:9b:9e:cb:75:4b:a9:31:99:
                    37:70:bb:39:c2:24:2d:db:2c:06:03:e4:18:4d:ad:
                    6f:06:fd:16:b0:29:29:48:ab:a9:c7:20:bf:c4:d3:
                    46:22:ae:4f:eb:48:2c:24:e3:41:28:a4:f7:a9:8c:
                    b4:71:c1:bc:71:99:64:a9:72:a7:12:e9:99:44:1e:
                    d6:63:7b:2e:fe:dd:4d:af:19:04:1e:93:57:4a:b9:
                    fb:b8:c5:28:fb:89:18:71:8b:de:3d:00:a5:82:c0:
                    2b:74:75:0e:e8:7d:68:ca:29:84:1f:94:bf:86:fe:
                    65:76:d9:39:de:95:b9:e1:9b:4a:76:39:47:8a:a3:
                    a7:ee:11:74:bf:54:47:28:e2:eb:f5:15:c4:d4:4f:
                    bc:05:cd:84:ee:0c:dd:cf:cd:fc:49:36:74:4b:86:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:30:C6:95:38:DC:0C:E5:55:ED:EF:6E:A5:68:27:2E:86:FD:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1662f781-4ff3-4010-b914-57ad7c24bdda/026e3c3568646609466eb56f4d80d46b89bb2dcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.81.0/24
                IPv6:
                  2801:0:2e0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264782

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:b5:a3:54:47:4d:cb:e8:ed:07:a6:f3:64:56:02:64:69:
         7e:57:1f:a5:7b:00:6d:42:19:1e:1f:36:d6:99:44:19:df:cb:
         b0:c0:60:8d:7d:7e:3c:0b:b9:03:ec:19:ca:3e:a6:c5:b0:95:
         95:86:9c:d8:68:3f:ea:d4:0a:01:bd:88:3a:00:e7:b6:f7:de:
         33:42:00:60:fa:ee:05:bb:2c:1b:21:d1:d2:aa:40:26:0c:8a:
         78:2b:7a:e6:1d:a4:d9:60:79:0a:85:b1:04:18:71:e0:55:f2:
         cf:2d:ae:15:3a:ba:9b:1c:6a:d3:a1:8f:fe:8b:f3:d8:5c:b8:
         e1:77:72:89:45:bf:2f:aa:40:f7:8d:cb:3d:e3:1d:c8:24:b5:
         2c:37:e9:7f:d4:30:ca:f1:ae:bf:2a:8e:a2:8e:72:ec:30:f6:
         ad:6b:f7:fe:6d:9f:dc:06:a7:1c:22:53:d4:40:ea:10:6d:ac:
         09:cb:9a:ca:7c:0e:50:90:9a:c7:ac:db:b1:29:06:02:39:36:
         df:56:29:d9:ad:f7:ba:3b:2e:2b:3f:5e:9e:b4:48:51:53:0b:
         9c:07:53:08:ac:4c:ac:71:e1:4a:c2:9d:92:68:94:dc:fa:b9:
         00:3e:e8:04:0b:ea:1c:90:42:a6:f9:7c:87:03:de:58:c1:77:
         f5:24:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:39:03 2024 by rpki-client on console-fra.rpki-client.org