Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
File:                     24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer (raw, json)
Hash identifier:          q2JcBejQ82qdbXrQMkQqT8oUzl3OI8GGfl5jQRZiYE0=
Subject key identifier:   05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01097FE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 May 2018 03:40:53 +0000
Certificate not after:    Sat 08 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 28053
                          IP: 190.52.224.0/19
                          IP: 200.89.88.0/21
                          IP: 2803:6190::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17399782 (0x1097fe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 03:40:53 2018 GMT
            Not After : Mar  8 15:00:00 2025 GMT
        Subject: CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:3b:c1:4f:a9:ff:d3:62:cd:ff:15:c3:83:
                    a7:4f:fa:dc:af:ed:4a:58:22:cc:36:7c:1a:e6:e6:
                    1a:32:33:82:32:bf:1b:c5:42:c4:b8:a2:df:3c:4b:
                    a8:52:d7:94:27:2b:d9:11:08:4b:83:9e:b3:e2:5e:
                    a5:63:be:51:0c:41:e8:26:9c:79:3a:74:31:57:2c:
                    00:72:3c:19:bd:d7:92:51:c6:c8:48:25:3f:dc:40:
                    3a:48:c0:29:15:2c:d2:6c:0d:9f:c5:c2:16:58:75:
                    c7:cf:69:2b:29:e0:24:ac:1b:04:52:f1:ba:f6:71:
                    c7:70:4a:85:50:fb:0b:98:c8:36:95:82:f9:a4:39:
                    88:5c:c7:9c:57:0e:4a:b2:4a:f2:34:f6:68:99:17:
                    f2:1b:16:10:ac:a7:c7:90:5e:1f:db:57:09:3b:0f:
                    46:49:1c:62:23:2a:62:c0:1a:c5:3f:d8:0e:65:38:
                    e6:c2:a3:cb:ae:8e:d3:04:8c:96:4e:3b:b8:6e:73:
                    22:cb:9c:36:f3:84:9c:16:a3:ab:2d:cb:32:5a:ec:
                    21:e1:13:c6:fc:69:30:c4:67:92:33:a3:63:b2:d2:
                    b1:63:9c:21:24:57:e9:cc:5b:c9:0a:1e:92:c3:23:
                    f0:b8:db:c6:c7:63:07:17:f8:d7:7b:18:35:c5:9e:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.224.0/19
                  200.89.88.0/21
                IPv6:
                  2803:6190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28053

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:c3:ff:ee:06:5b:88:11:a4:4c:99:d3:42:a0:69:e9:53:
         db:7f:90:1b:70:b0:40:49:f2:7a:52:64:19:ac:0f:03:be:5e:
         95:73:c2:dc:be:ca:20:fa:74:11:a1:e5:0e:d8:76:c5:56:c4:
         91:f0:af:f1:c9:5b:59:35:52:8c:a3:35:e0:47:45:2d:1b:33:
         ff:d5:24:4c:89:fb:6c:cf:90:e0:69:d8:93:79:0d:ae:a6:f4:
         2a:e6:8e:6c:78:81:44:39:66:ce:3a:98:a4:c1:56:3c:6f:4c:
         97:fe:e9:c9:8c:df:5d:72:ec:ca:c6:51:b5:48:cd:f8:6d:10:
         95:c3:58:3a:2f:1b:43:60:59:cf:48:26:1b:fd:27:40:e3:6b:
         8f:88:f9:a5:31:0c:15:fd:e4:e1:27:42:29:4b:db:fd:60:bf:
         e6:36:ff:16:76:2b:e7:01:4e:07:53:5f:23:87:07:d1:cf:f8:
         6d:26:64:20:0e:93:fa:a9:45:11:df:79:c0:7a:99:18:8a:1b:
         50:ba:6d:6b:f9:ee:ff:d7:23:ad:3f:81:da:78:19:fc:6a:98:
         cb:bd:a9:5b:bc:88:99:6f:fd:36:1c:7d:97:c8:45:d6:ad:64:
         dc:d4:ac:b7:07:01:69:35:f6:3e:8f:ed:11:ac:74:2b:02:ba:
         2c:f1:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:15 2024 by rpki-client on console-fra.rpki-client.org