Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
File:                     1059e1e3317704575f2c0b750ee73b166a39cd37.cer (raw, json)
Hash identifier:          Xugu9SET/ljXYGgQclKaAxLiYNPnyA0enjK0//Tw+cQ=
Subject key identifier:   80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3FECD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:09 +0000
Certificate not after:    Tue 07 May 2024 06:00:00 +0000
Subordinate resources:    AS: 14420
                          AS: 26613
                          AS: 27757
                          AS: 27948
                          AS: 27968
                          AS: 28006
                          AS: 28011
                          IP: 181.112.0.0/15
                          IP: 181.196.0.0/16
                          IP: 181.211.0.0/16
                          IP: 186.42.0.0/16
                          IP: 186.46.0.0/15
                          IP: 186.178.0.0/16
                          IP: 190.11.0.0/19
                          IP: 190.152.0.0/16
                          IP: 190.214.0.0/16
                          IP: 200.73.200.0/21
                          IP: 200.77.188.0/22
                          IP: 200.85.80.0/21
                          IP: 200.107.0.0/18
                          IP: 200.125.192.0/18
                          IP: 201.219.0.0/18
                          IP: 2800:370::/32
                          IP: 2800:4f0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14941901 (0xe3fecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:09 2017 GMT
            Not After : May  7 06:00:00 2024 GMT
        Subject: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:ad:1e:14:f7:c1:f2:25:db:91:bc:9b:93:
                    d9:6c:f1:28:da:46:da:eb:b5:57:00:2c:58:73:17:
                    83:50:5c:d6:3a:26:f9:b1:f3:90:59:cf:ff:60:67:
                    5e:31:6a:9e:61:e7:50:70:2a:03:da:69:26:84:66:
                    14:ef:29:d1:bf:75:b3:80:13:2e:e7:c4:8d:5b:63:
                    39:97:7b:cb:15:8e:22:6a:2b:30:87:20:00:a4:23:
                    c5:eb:22:cf:66:3e:9a:95:53:45:04:66:d4:ef:b2:
                    d0:94:36:01:c4:c4:ad:d9:6d:80:bb:3d:4d:49:ac:
                    49:14:82:63:39:e8:77:be:c5:2a:e7:cb:b5:33:7c:
                    cd:3b:87:3e:8b:a3:3f:67:98:53:6c:3a:a8:e4:3b:
                    46:6e:a5:f8:73:74:30:dd:1e:d6:c2:0e:12:1b:f8:
                    59:92:53:29:b2:b7:5b:bb:e5:c4:2f:d9:93:3b:89:
                    99:e3:2b:62:f1:26:f7:b5:ad:0a:43:c0:3c:6f:30:
                    e0:8f:14:e0:22:10:5d:74:b4:4b:c4:68:9f:99:a5:
                    4f:cc:4a:38:c3:ef:02:39:91:32:75:94:f3:5f:f0:
                    a4:0f:ab:6b:e0:18:32:b2:13:83:cd:4f:b2:6f:eb:
                    3a:f2:e1:d9:ea:2a:73:8e:82:ec:2a:a2:e4:5a:63:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.0.0/15
                  181.196.0.0/16
                  181.211.0.0/16
                  186.42.0.0/16
                  186.46.0.0/15
                  186.178.0.0/16
                  190.11.0.0/19
                  190.152.0.0/16
                  190.214.0.0/16
                  200.73.200.0/21
                  200.77.188.0/22
                  200.85.80.0/21
                  200.107.0.0/18
                  200.125.192.0/18
                  201.219.0.0/18
                IPv6:
                  2800:370::/32
                  2800:4f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14420
                  26613
                  27757
                  27948
                  27968
                  28006
                  28011

    Signature Algorithm: sha256WithRSAEncryption
         c1:a7:e5:63:4e:df:71:43:d4:cc:d4:8a:12:85:ad:b2:70:ff:
         b7:55:4f:f9:84:65:12:12:aa:3f:e1:fa:8d:a7:ae:4c:16:70:
         7d:b0:e4:53:b4:a5:2b:7c:35:4e:34:bc:b6:3c:e3:02:ff:76:
         77:8c:74:64:62:2c:c6:dd:d8:94:de:0f:99:84:64:aa:f1:d4:
         18:54:e1:49:b0:7f:94:85:48:e9:0e:2d:39:a3:7a:18:77:ac:
         6f:63:4a:27:03:15:4c:5f:6d:86:00:6a:5c:78:6a:2b:5c:cc:
         aa:bd:4d:47:e8:36:cd:44:4e:89:2f:4e:e3:9f:2c:47:2a:21:
         0e:b7:ff:e7:12:c7:c6:dc:ab:2f:b9:09:d4:24:cb:5d:d1:16:
         9a:cb:b7:9e:26:78:b1:16:6b:7e:d5:09:68:f1:d5:6b:ad:ef:
         d7:46:19:c4:b3:9b:e4:7f:f7:80:7e:24:ad:7b:e2:a3:cd:b6:
         d7:62:aa:52:77:b2:33:f3:73:2b:e3:70:03:10:ab:82:2b:3d:
         2a:fc:0b:80:dd:1e:36:a4:b4:c6:52:a9:74:56:be:27:44:af:
         4d:bf:14:c9:79:0b:02:83:44:ce:18:9f:f8:dc:60:b6:e5:ae:
         f2:8d:fc:50:c6:ec:75:2d:91:d1:d9:8a:19:cf:87:62:e6:61:
         03:a0:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:34:36 2024 by rpki-client on console-fra.rpki-client.org