Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
File:                     1c011c49ef045ef0e106ad87280aa70643378a03.cer (raw, json)
Hash identifier:          SaFt4qmZ7VonWwoBeQ7Df1WhDsF93E3nv9n1uV5yVrU=
Subject key identifier:   75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E41EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Oct 2020 19:59:06 +0000
Certificate not after:    Thu 17 Apr 2025 14:50:54 +0000
Subordinate resources:    AS: 270035
                          AS: 271924
                          IP: 130.250.228.0/22
                          IP: 190.108.76.0/22
                          IP: 190.151.142.0/23
                          IP: 2803:e5e0::/30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17711596 (0x10e41ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  2 19:59:06 2020 GMT
            Not After : Apr 17 14:50:54 2025 GMT
        Subject: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:70:3e:53:22:21:7b:f9:68:88:7a:88:c1:
                    1b:57:39:da:05:e7:08:aa:ae:b5:bc:0c:c8:a1:42:
                    86:4e:59:7a:2e:fc:db:bd:71:b1:d9:2e:a7:af:09:
                    61:80:62:ca:c0:cd:31:61:cc:af:62:3a:c9:0e:78:
                    21:29:47:7a:dc:74:75:2c:02:d9:8e:81:05:de:22:
                    0d:4b:5e:d6:01:e8:4c:0a:37:2f:f2:56:2f:1e:a0:
                    73:ae:0e:08:24:e2:86:39:4a:ad:44:8e:68:8b:33:
                    b6:bc:fc:fd:70:49:5f:c7:fb:10:02:7f:35:82:a4:
                    f5:cb:94:e9:9c:3d:f6:d4:99:35:33:00:56:ff:6f:
                    54:9d:99:41:1f:03:df:3b:d3:c1:3a:bb:4b:23:27:
                    09:b5:c4:14:14:79:39:de:ad:f5:fd:b8:71:b9:99:
                    c9:aa:3a:85:dd:23:78:26:10:6c:80:f3:7e:3e:90:
                    f9:e6:05:a5:01:c7:9e:cf:c0:10:ce:d4:db:88:74:
                    f1:c6:c4:8d:5d:23:12:fa:10:a6:1d:67:95:e9:84:
                    e1:ad:14:35:84:c4:97:d6:4d:8a:9a:75:ef:c4:56:
                    4a:31:e0:47:f2:ef:0d:54:86:d2:a5:33:d9:81:e8:
                    58:b9:9c:b7:bb:59:a9:80:ae:49:46:da:a2:a8:33:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.228.0/22
                  190.108.76.0/22
                  190.151.142.0/23
                IPv6:
                  2803:e5e0::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270035
                  271924

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:69:a5:35:b3:c9:aa:0d:69:1d:13:ab:d0:52:5f:f8:ae:
         43:91:97:3b:85:9d:17:e2:3f:83:1c:bd:bd:9e:b4:46:bc:0e:
         e3:9b:4b:a8:a8:97:e7:0e:82:0a:3c:f3:18:ea:b8:3b:33:9e:
         5f:d1:60:f9:70:0a:b1:9b:eb:c6:e4:8a:d3:14:c2:5e:73:82:
         49:4c:c7:bf:64:cc:7c:85:fe:69:06:64:24:90:cc:40:27:49:
         12:24:13:bf:1e:7d:15:a1:62:05:cb:ac:df:57:e9:f2:89:3b:
         8e:7d:e7:11:a2:de:a8:02:36:ce:eb:e0:f1:16:c4:48:f9:e6:
         b0:7a:90:29:19:94:2d:68:9e:f8:7d:b6:c7:72:f8:6d:b6:5a:
         28:af:7f:fa:be:ca:4e:d6:37:9a:a4:d8:f1:dd:05:9f:bb:b9:
         a9:7f:ab:04:96:dc:36:59:e4:ef:9c:00:ee:56:b1:de:45:f3:
         63:4b:88:f4:fe:b6:57:f5:71:30:41:e6:12:f2:b3:67:18:b7:
         55:fa:3f:61:a4:03:c5:ec:f6:9a:de:34:a5:ff:a7:88:ed:52:
         5c:54:e1:4d:8f:6b:41:28:7e:d8:b5:f1:f9:bd:1a:44:26:ff:
         43:71:34:53:00:34:ff:4c:ce:e1:ea:75:af:91:60:5d:4d:d3:
         7d:68:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:37 2024 by rpki-client on console-ams.rpki-client.org