Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
File:                     1059e1e3317704575f2c0b750ee73b166a39cd37.cer (download)
Hash identifier:          1fQpBt4EEntKbSMNW8DzE+CgB0/qKm33PIIBtSDgtxQ=
Subject key identifier:   80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C424E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate valid until:  May 07 06:00:00 2023 GMT
Subordinate resources:
    1: AS: 14420
    2: AS: 26613
    3: AS: 27757
    4: AS: 27948
    5: AS: 27968
    6: AS: 28006
    7: AS: 28011
    8: IP: 181.112.0.0/15
    9: IP: 181.196.0.0/16
   10: IP: 181.211.0.0/16
   11: IP: 186.42.0.0/16
   12: IP: 186.46.0.0/15
   13: IP: 186.178.0.0/16
   14: IP: 190.11.0.0/19
   15: IP: 190.152.0.0/16
   16: IP: 190.214.0.0/16
   17: IP: 200.73.200.0/21
   18: IP: 200.77.188.0/22
   19: IP: 200.85.80.0/21
   20: IP: 200.107.0.0/18
   21: IP: 200.125.192.0/18
   22: IP: 201.219.0.0/18
   23: IP: 2800:370::/32
   24: IP: 2800:4f0::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12854496 (0xc424e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:09 2017 GMT
            Not After : May  7 06:00:00 2023 GMT
        Subject: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:ad:1e:14:f7:c1:f2:25:db:91:bc:9b:93:
                    d9:6c:f1:28:da:46:da:eb:b5:57:00:2c:58:73:17:
                    83:50:5c:d6:3a:26:f9:b1:f3:90:59:cf:ff:60:67:
                    5e:31:6a:9e:61:e7:50:70:2a:03:da:69:26:84:66:
                    14:ef:29:d1:bf:75:b3:80:13:2e:e7:c4:8d:5b:63:
                    39:97:7b:cb:15:8e:22:6a:2b:30:87:20:00:a4:23:
                    c5:eb:22:cf:66:3e:9a:95:53:45:04:66:d4:ef:b2:
                    d0:94:36:01:c4:c4:ad:d9:6d:80:bb:3d:4d:49:ac:
                    49:14:82:63:39:e8:77:be:c5:2a:e7:cb:b5:33:7c:
                    cd:3b:87:3e:8b:a3:3f:67:98:53:6c:3a:a8:e4:3b:
                    46:6e:a5:f8:73:74:30:dd:1e:d6:c2:0e:12:1b:f8:
                    59:92:53:29:b2:b7:5b:bb:e5:c4:2f:d9:93:3b:89:
                    99:e3:2b:62:f1:26:f7:b5:ad:0a:43:c0:3c:6f:30:
                    e0:8f:14:e0:22:10:5d:74:b4:4b:c4:68:9f:99:a5:
                    4f:cc:4a:38:c3:ef:02:39:91:32:75:94:f3:5f:f0:
                    a4:0f:ab:6b:e0:18:32:b2:13:83:cd:4f:b2:6f:eb:
                    3a:f2:e1:d9:ea:2a:73:8e:82:ec:2a:a2:e4:5a:63:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.0.0/15
                  181.196.0.0/16
                  181.211.0.0/16
                  186.42.0.0/16
                  186.46.0.0/15
                  186.178.0.0/16
                  190.11.0.0/19
                  190.152.0.0/16
                  190.214.0.0/16
                  200.73.200.0/21
                  200.77.188.0/22
                  200.85.80.0/21
                  200.107.0.0/18
                  200.125.192.0/18
                  201.219.0.0/18
                IPv6:
                  2800:370::/32
                  2800:4f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14420
                  26613
                  27757
                  27948
                  27968
                  28006
                  28011

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:4c:15:dc:74:ae:83:bd:7d:12:33:d4:28:d3:2a:7a:79:
         5e:15:9e:f5:9a:1f:41:9a:e2:ec:00:7a:b8:30:53:0c:ae:e1:
         fe:b1:a7:4a:b4:5c:d3:29:db:94:6c:aa:09:18:71:4a:7b:c2:
         d7:c6:99:8e:0a:c7:b8:c8:26:5f:d0:84:ef:d4:af:29:16:01:
         ca:d1:23:04:3b:9d:8c:dd:bf:95:ff:5e:a8:af:b2:76:18:24:
         52:b7:d4:76:ee:f8:81:4f:11:d7:22:97:43:ad:97:ff:85:e6:
         ca:79:4f:06:74:72:f6:b7:76:b9:3d:88:16:43:f0:69:23:a9:
         a3:a9:1b:62:df:2f:73:3e:2a:ae:c9:3a:db:76:c6:31:ae:5d:
         99:19:95:a5:b4:89:67:bf:53:2b:a7:25:9a:40:0e:99:2e:c2:
         a4:6a:7d:c6:38:7e:a6:5a:ce:b3:b1:03:a2:ca:c8:2d:7b:1d:
         f4:43:4d:e0:af:32:ab:80:95:29:b9:42:71:71:22:b1:88:ca:
         d3:e3:1f:d3:9d:0d:68:54:b2:a8:f6:50:f6:e0:c5:60:81:4e:
         97:66:d6:4d:80:bb:0f:d6:7d:98:0b:5c:b4:5a:45:e3:8c:64:
         a2:dd:75:0d:1d:9d:0e:5d:a1:08:a9:49:cd:b3:2f:91:05:04:
         ae:d3:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 07:12:12 2022 by rpki-client.