Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
File:                     07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer (raw, json)
Hash identifier:          vH2PRKBfiRNiu6ax3obDAOdbP3kctETnwJ08XqNN89s=
Subject key identifier:   E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E93D7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:40 +0000
Certificate not after:    Mon 10 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 16732
                          IP: 200.59.32.0/19
                          IP: 200.59.192.0/20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 15:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15285627 (0xe93d7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:40 2017 GMT
            Not After : Jun 10 15:00:00 2024 GMT
        Subject: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:30:ed:ba:1c:fd:2f:ff:62:46:60:fa:46:
                    d1:42:0a:6f:99:07:31:cf:5c:44:a6:7a:b3:3c:31:
                    7e:49:bc:f8:e2:87:cc:39:ea:ac:41:13:50:dd:9e:
                    7e:c9:1c:17:f4:6a:c3:42:b2:4c:3b:57:3d:ea:9c:
                    f7:14:af:68:07:ce:64:bc:a7:11:25:6b:9d:50:84:
                    77:24:39:22:cc:c0:76:0f:20:af:dc:7c:68:10:5f:
                    f6:ec:68:1b:db:ca:14:7e:29:a9:e7:e6:0a:ba:46:
                    97:23:c8:93:23:fd:d5:21:9c:f6:1e:1c:b8:16:23:
                    46:fb:db:a0:83:8a:6d:52:74:ac:0e:f0:2b:e1:6d:
                    5c:8e:73:fd:43:29:c2:75:b8:00:fb:70:cd:b0:71:
                    8f:30:0b:26:d9:db:b6:ca:39:e3:0c:76:3f:72:61:
                    e8:ca:ac:3c:b1:fa:7c:4d:4a:c6:34:55:bb:58:fe:
                    ce:e0:c3:52:e0:1e:1c:e3:65:2d:a6:2f:2e:ab:f4:
                    b7:21:8b:42:01:d4:76:3e:83:50:4e:98:dd:6d:f8:
                    90:88:03:21:53:a3:1f:dd:c2:b5:e7:69:45:1c:2d:
                    07:14:18:00:d3:2e:70:c8:bc:c6:c6:fa:ae:76:79:
                    fd:51:53:bd:74:5c:09:d7:2f:93:f0:97:aa:cb:09:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.32.0/19
                  200.59.192.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16732

    Signature Algorithm: sha256WithRSAEncryption
         59:69:01:a1:96:b2:58:de:a9:79:eb:e1:c2:b5:9f:62:2d:19:
         12:53:49:44:26:69:19:7f:ac:7d:ee:04:94:7d:b7:77:91:f3:
         5a:45:73:42:f8:7b:b5:38:dd:10:54:d7:09:ad:a7:a1:3e:42:
         85:48:f8:d7:c0:5f:81:f0:bc:76:a3:1d:f0:74:e0:b2:d9:91:
         2e:e1:71:e8:80:63:90:c3:91:ff:eb:05:1b:69:ec:ee:5c:05:
         e5:6c:9e:98:72:35:f8:81:22:be:3c:7f:68:3f:0e:74:7a:29:
         aa:9f:14:16:a0:fc:0f:0d:f3:2d:a4:c9:1f:79:21:47:7f:73:
         f9:5b:38:19:74:b3:e5:64:c2:9c:f7:67:74:12:75:0a:59:8f:
         4f:93:c5:a0:48:18:eb:6f:3d:19:bc:27:44:57:95:d0:77:7f:
         be:2e:f6:81:f6:e2:03:1d:49:aa:64:32:50:4c:f6:f5:c5:c9:
         a8:8b:14:31:47:e1:40:07:2b:ef:1a:8a:cb:d3:88:9e:e6:7d:
         70:52:89:b4:b8:5b:b2:31:8a:f9:44:59:f0:a2:6d:1c:a7:02:
         9e:5a:5f:12:86:91:09:42:4d:e5:78:17:34:d9:fa:0d:f2:9e:
         b0:d8:ef:dc:cb:2f:cd:99:42:ab:2e:91:4f:62:3c:25:7e:ca:
         5b:4c:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 15:30:28 2024 by rpki-client on console-fra.rpki-client.org