Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24c048f3546dd8a392fac67dfcdb588dcc5216ec.cer
File:                     24c048f3546dd8a392fac67dfcdb588dcc5216ec.cer (raw, json)
Hash identifier:          0lX0FmddcTUomASpyoRMw001hW+XBeWRlAfVKKWPDCE=
Subject key identifier:   36:DE:1D:E6:78:0A:AC:7D:E8:86:34:61:B0:8D:B4:90:28:F0:C5:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0CA54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/24c048f3546dd8a392fac67dfcdb588dcc5216ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Mon 05 Aug 2024 17:50:59 +0000
Subordinate resources:    AS: 264791
                          IP: 170.78.44.0/22
                          IP: 2803:78c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15780436 (0xf0ca54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : Aug  5 17:50:59 2024 GMT
        Subject: CN=24c048f3546dd8a392fac67dfcdb588dcc5216ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:46:60:77:73:e7:6e:93:0a:c3:ae:f0:59:
                    6b:b4:dd:17:70:b4:15:71:5f:45:19:33:fb:54:03:
                    1e:ff:bb:f4:bf:b4:6e:70:ab:63:08:c6:c9:32:9a:
                    76:e8:40:95:8a:ad:fb:dc:db:dd:cf:1b:58:26:f1:
                    55:b2:ec:f5:b8:c3:d6:5b:a8:6e:d3:4d:1d:10:05:
                    63:10:b6:00:17:3b:98:cb:ba:91:9c:45:a5:02:23:
                    6e:7e:c0:ef:a4:a0:81:be:85:f0:f4:37:31:c5:9e:
                    55:51:eb:ac:45:63:13:89:5e:75:9f:10:3b:b5:a4:
                    e1:76:ce:b4:72:05:9a:40:6d:ca:7e:ab:17:8b:87:
                    af:36:36:b1:dd:e5:aa:1d:14:ef:d2:e0:61:59:74:
                    59:3c:63:39:d5:67:52:26:59:17:2d:22:0d:1e:06:
                    9b:f8:10:00:9c:2b:e6:88:b1:b8:7e:92:05:24:36:
                    08:0a:88:e5:54:89:1f:6c:be:80:aa:2e:b6:19:70:
                    02:17:d8:1c:cc:f9:8a:83:70:5d:7a:37:b1:ac:ec:
                    76:bb:ac:35:55:67:8b:e0:26:72:e2:0a:9f:3b:d3:
                    28:ab:47:b7:a5:e9:40:ba:0d:94:52:16:44:28:45:
                    fc:ee:d2:20:84:fd:7d:6d:52:e9:1e:05:c1:86:5d:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DE:1D:E6:78:0A:AC:7D:E8:86:34:61:B0:8D:B4:90:28:F0:C5:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/24c048f3546dd8a392fac67dfcdb588dcc5216ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.44.0/22
                IPv6:
                  2803:78c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264791

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:ce:0d:df:3a:cf:49:bd:0e:f6:d3:5e:61:97:88:6b:1d:
         4f:5d:c6:5d:f3:62:81:3f:96:43:38:f8:3b:22:97:65:ff:74:
         7e:54:28:b3:c0:8a:4f:07:81:31:39:8d:97:53:07:28:7a:ad:
         2a:5a:63:86:00:31:bb:5f:2d:74:50:02:cf:76:d8:cd:4c:88:
         64:a6:83:9e:ed:e4:29:bd:38:00:ea:21:17:6d:3d:31:8b:c5:
         99:96:32:60:87:7c:5e:3e:90:61:c8:46:24:b7:7f:ee:53:ab:
         3e:77:f5:17:e9:b8:d0:fa:30:08:1c:e2:5b:b6:38:08:da:5d:
         6a:9c:5c:51:82:b5:22:fd:4b:c1:3e:94:42:62:30:36:fe:80:
         c2:80:eb:16:98:b3:12:1c:32:b4:eb:c1:d2:47:6d:d3:1e:04:
         03:00:64:f3:4d:b1:5b:f2:29:bc:52:89:bb:ad:15:cf:6f:03:
         0d:23:99:e4:6d:6a:8a:1b:80:45:44:b0:cf:de:1e:6d:99:4e:
         64:5d:ee:25:1a:0e:fa:15:8a:48:d9:c1:cd:1e:21:c2:9c:5b:
         93:32:04:df:bb:38:83:ab:c4:1a:20:99:65:c3:bd:0f:1b:c1:
         7e:d1:98:ae:ec:e4:39:4c:b9:c8:46:77:f5:7e:62:3d:58:51:
         1a:68:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:34:42 2024 by rpki-client on console-fra.rpki-client.org