Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03d8e683660397c96889ff6269b0333c9d69d092.cer
File:                     03d8e683660397c96889ff6269b0333c9d69d092.cer (raw, json)
Hash identifier:          vb5im3JvPf+im07IUiximHSx0wEbNwNeKKZOgEYwqjo=
Subject key identifier:   E4:A9:9D:C5:43:CF:C2:5D:F1:8D:F1:71:52:AE:E4:0E:7F:2E:9B:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DF1AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ee929c9-18cb-4fa6-9fc2-99469e3f41d0/03d8e683660397c96889ff6269b0333c9d69d092.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ee929c9-18cb-4fa6-9fc2-99469e3f41d0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Sep 2019 20:07:19 +0000
Certificate not after:    Sun 13 Apr 2025 21:11:44 +0000
Subordinate resources:    AS: 267903
                          IP: 45.179.54.0/23
                          IP: 45.179.60.0/24
                          IP: 2803:d660::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17691051 (0x10df1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  2 20:07:19 2019 GMT
            Not After : Apr 13 21:11:44 2025 GMT
        Subject: CN=03d8e683660397c96889ff6269b0333c9d69d092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:4c:f6:76:63:40:96:85:f4:10:76:af:64:
                    a7:a2:99:1f:3d:89:f0:f1:9c:78:97:ea:10:ab:df:
                    7f:cd:54:97:6e:12:d3:c3:88:d3:64:d3:f7:b1:f5:
                    0d:cf:26:2c:2a:13:bc:9a:56:4a:0a:5e:37:fc:38:
                    85:f3:49:c0:fd:a8:10:85:e0:1b:89:0d:34:af:ab:
                    5e:33:f0:f6:19:cd:97:a5:28:2b:de:1b:68:da:f1:
                    64:8e:0b:41:9c:b2:89:54:8f:25:09:d6:9f:f5:99:
                    0b:2b:61:0f:85:45:54:7a:16:f6:16:30:3d:2e:06:
                    2c:52:70:86:0f:f2:fd:15:df:db:9d:16:19:4b:2e:
                    fe:12:f1:98:1a:3f:8b:7e:62:41:2d:64:38:e7:76:
                    98:9c:76:e2:20:b4:d4:3e:c2:39:b0:4d:65:12:1d:
                    11:09:b4:e4:89:b1:d5:56:74:16:0a:aa:cc:84:ad:
                    f9:78:9a:ab:1e:9f:18:9c:2e:14:cf:0b:a3:7f:a2:
                    06:33:33:14:b4:44:e4:3b:c8:47:51:39:57:2c:a4:
                    00:21:74:1c:54:8f:32:98:e4:8f:48:2e:c8:35:e5:
                    05:aa:61:ab:c0:8f:2d:a4:cf:4e:58:a0:d3:cb:af:
                    89:73:d4:2d:88:3a:4f:0b:7e:4c:4c:ec:96:29:8a:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A9:9D:C5:43:CF:C2:5D:F1:8D:F1:71:52:AE:E4:0E:7F:2E:9B:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ee929c9-18cb-4fa6-9fc2-99469e3f41d0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ee929c9-18cb-4fa6-9fc2-99469e3f41d0/03d8e683660397c96889ff6269b0333c9d69d092.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.54.0/23
                  45.179.60.0/24
                IPv6:
                  2803:d660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267903

    Signature Algorithm: sha256WithRSAEncryption
         95:35:11:7b:3f:2f:48:04:81:f6:df:45:7c:dc:0d:48:22:9f:
         97:83:f5:f8:7b:2c:30:27:c8:7f:27:e1:e7:8c:c8:40:87:08:
         3f:4d:ff:9a:04:6f:d3:e0:0b:76:0f:93:4c:77:1a:0c:8a:b1:
         2d:b6:ee:50:0d:fd:74:92:60:b0:dd:af:6e:ca:04:50:86:e8:
         1b:01:89:8e:fd:ca:a3:d3:e4:ce:e3:64:1b:47:53:0e:e6:5c:
         6d:2a:a6:d9:43:bf:1c:1e:38:6d:c7:93:05:91:43:9a:1f:89:
         fe:25:7f:48:eb:55:c4:21:e0:6e:17:51:fd:ca:05:25:87:35:
         21:38:33:99:44:0b:8a:67:19:16:b1:f5:0e:7d:64:a7:cf:56:
         c7:8c:ed:e3:5a:1b:69:0c:25:f2:3c:8c:f0:86:00:76:cd:ea:
         74:06:25:00:d9:6d:0c:b6:e5:5c:f0:d4:83:58:5d:93:de:0d:
         92:1e:80:09:12:17:52:94:35:29:8a:d8:35:c9:7f:03:dc:f1:
         b3:77:5c:14:31:a6:a8:73:86:e2:9e:e8:6c:b1:91:c8:73:50:
         20:5b:ee:61:62:3d:8c:57:4a:7e:0e:d3:ed:04:6f:92:2c:3f:
         f8:fd:c0:c8:95:d6:38:86:c9:2c:ed:98:16:94:78:c7:96:a8:
         35:c4:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:00 2024 by rpki-client on console-ams.rpki-client.org