Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1104008b4de994de20781bd030a908691de12d.cer
File:                     0d1104008b4de994de20781bd030a908691de12d.cer (raw, json)
Hash identifier:          nEViXkIk4kkyhRYiYVFNgJaw8s/q46YD/9mDpWc/98g=
Subject key identifier:   32:D6:AE:91:31:C1:2A:0E:6C:C8:03:B3:B3:B7:E8:9C:E0:C7:D8:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E2DCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/0d1104008b4de994de20781bd030a908691de12d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Jun 2019 15:42:03 +0000
Certificate not after:    Wed 16 Apr 2025 20:57:51 +0000
Subordinate resources:    AS: 264859
                          IP: 200.95.184.0/22
                          IP: 2803:c980::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17706445 (0x10e2dcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  5 15:42:03 2019 GMT
            Not After : Apr 16 20:57:51 2025 GMT
        Subject: CN=0d1104008b4de994de20781bd030a908691de12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:f4:dc:41:68:11:69:38:a1:1a:4a:36:12:
                    10:5b:ee:4d:50:8e:04:c9:f7:be:ec:7d:9f:2e:95:
                    0b:6c:82:61:e3:e4:85:70:08:23:78:bf:7d:40:98:
                    12:63:96:6f:4d:4c:51:7d:5c:f3:98:ec:96:14:cf:
                    01:18:df:f9:8a:6d:5d:af:0d:7c:f1:fd:07:e5:9f:
                    0e:78:e9:0c:4a:9b:1b:c0:02:53:c2:39:6e:22:1e:
                    d7:fe:b0:b9:99:14:84:5f:e1:c9:da:8f:6b:87:be:
                    78:81:96:0a:de:62:c9:2a:e9:05:3d:79:93:14:48:
                    49:57:5f:c0:62:5d:da:3f:94:8a:f0:de:2b:25:bd:
                    96:57:21:77:ba:f4:ad:fd:2f:8e:e7:90:06:1b:7d:
                    fd:0f:a3:6c:4b:29:cd:99:f9:00:5f:b5:86:64:5f:
                    a2:5f:0c:11:a6:4c:fc:ba:ec:9f:bf:89:e0:43:1f:
                    45:ec:13:a6:8c:e6:87:c0:97:54:26:ee:b3:8c:2f:
                    ff:09:80:3c:6d:68:8a:2a:f6:ca:2c:8b:9d:1a:23:
                    ce:54:ec:f3:aa:d5:39:60:13:a9:6f:82:06:e3:b9:
                    01:74:60:5f:21:5f:48:65:86:8a:3b:19:34:80:d8:
                    ea:12:c0:4c:ae:8d:5a:e3:81:3d:e2:89:00:8a:9a:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D6:AE:91:31:C1:2A:0E:6C:C8:03:B3:B3:B7:E8:9C:E0:C7:D8:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/0d1104008b4de994de20781bd030a908691de12d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.184.0/22
                IPv6:
                  2803:c980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264859

    Signature Algorithm: sha256WithRSAEncryption
         a0:b8:f2:ed:d2:7b:00:64:b5:7f:a6:8e:30:89:d7:65:63:63:
         77:53:c1:55:27:5c:ba:b5:26:49:36:53:0b:6d:50:89:21:14:
         01:75:9c:2b:a6:69:f5:af:bb:a3:35:4a:ff:c9:27:cc:37:af:
         be:6f:f5:cb:78:a3:89:27:d6:c6:df:0e:c3:2c:ec:4f:86:6a:
         8a:71:38:ec:5e:fe:ca:c4:20:70:30:8d:be:48:3a:5b:a6:af:
         6c:7a:c4:f7:9a:52:92:c1:da:4f:b8:40:52:1d:75:62:07:8f:
         2a:2f:e1:e9:17:5f:01:79:67:06:30:9f:7a:b9:cf:0e:87:3f:
         7f:26:bb:79:86:d6:3d:8d:1c:cf:cb:4e:fd:6c:6f:77:3d:db:
         bd:10:bc:87:cb:2a:d7:5e:b3:e3:c7:8e:88:c8:72:03:ff:a7:
         65:46:cf:d7:ad:86:05:a2:20:46:57:ce:2a:91:1a:ff:c4:dd:
         71:c0:1b:3a:30:1d:5b:81:fa:39:ac:44:84:66:ac:2b:56:55:
         ac:d2:14:dc:45:19:f7:6a:cd:82:3a:6b:65:b4:1a:0d:f1:cf:
         d7:8e:b0:3e:ad:b1:56:e1:a0:42:40:4e:10:6e:ff:03:8a:b0:
         7d:47:b7:e5:53:90:29:52:c9:df:95:fe:2a:49:e3:56:2e:d7:
         c0:1b:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:08 2024 by rpki-client on console-fra.rpki-client.org