Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28b1aab520617bedc94ecd957978770d7e4589a1.cer
File:                     28b1aab520617bedc94ecd957978770d7e4589a1.cer (raw, json)
Hash identifier:          I26alTuKd5po0D/rJPFzbaqB52AOKWmFG2NnJYUAZMY=
Subject key identifier:   A1:93:EC:0A:78:F4:6E:25:E7:42:4C:A2:65:9E:60:A3:77:39:D2:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5D036
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b778156-ecd0-45d3-ac0d-b47a12486ca8/28b1aab520617bedc94ecd957978770d7e4589a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b778156-ecd0-45d3-ac0d-b47a12486ca8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Fri 17 May 2024 06:00:00 +0000
Subordinate resources:    AS: 262199
                          IP: 138.99.180.0/22
                          IP: 181.225.128.0/21
                          IP: 201.150.84.0/22
                          IP: 2803:df00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15061046 (0xe5d036)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : May 17 06:00:00 2024 GMT
        Subject: CN=28b1aab520617bedc94ecd957978770d7e4589a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:d6:f9:7f:2b:50:80:33:98:c3:41:85:fb:
                    50:cf:82:88:23:70:b3:3a:b7:90:05:c0:11:3d:fa:
                    63:ce:92:40:17:10:9b:41:dd:f7:e4:74:04:83:31:
                    3a:17:07:f0:a1:a0:7c:18:48:14:de:07:3e:8a:c0:
                    99:05:bf:98:4a:f8:f2:14:f4:20:94:24:ec:4a:3c:
                    8d:ef:5e:89:aa:4d:ee:39:02:4a:cd:5a:16:82:f3:
                    85:e4:5c:26:31:ab:0c:25:04:be:90:fd:2c:a2:0a:
                    8b:6f:da:f3:68:3a:00:8e:ef:8a:aa:8b:e3:a8:b6:
                    c6:28:06:d0:67:5a:f2:23:11:9c:ac:ab:cb:03:55:
                    18:42:c8:c8:8d:55:a2:ab:70:50:a0:15:c6:64:53:
                    2c:4c:c4:ff:d9:58:fb:9c:66:74:55:2d:2a:87:35:
                    83:0b:7d:bc:51:a2:4c:39:5c:06:53:c8:9a:93:75:
                    62:0b:94:ec:01:61:dd:dd:72:a2:1a:b2:84:f5:64:
                    7d:31:33:f7:d8:8e:b5:18:5c:d9:d3:a1:75:5e:f2:
                    88:8d:f1:a4:49:73:d0:cd:39:b3:ec:c9:5c:b0:67:
                    6b:45:06:ba:6c:6d:98:43:18:45:5b:54:92:ff:f1:
                    ef:53:46:c5:1d:c5:07:75:2b:de:53:8d:c5:a1:8f:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:93:EC:0A:78:F4:6E:25:E7:42:4C:A2:65:9E:60:A3:77:39:D2:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b778156-ecd0-45d3-ac0d-b47a12486ca8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b778156-ecd0-45d3-ac0d-b47a12486ca8/28b1aab520617bedc94ecd957978770d7e4589a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.180.0/22
                  181.225.128.0/21
                  201.150.84.0/22
                IPv6:
                  2803:df00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262199

    Signature Algorithm: sha256WithRSAEncryption
         55:6a:91:95:fd:77:38:64:53:8b:ca:1b:31:b5:92:33:a0:00:
         07:4c:83:27:3c:6f:a5:01:4d:cd:4a:3a:6e:0c:40:47:e7:f0:
         fd:16:6c:4c:2c:7a:e8:6d:7f:97:95:eb:99:bb:7a:67:d7:a0:
         d2:fc:d3:5d:80:0e:a8:c9:12:26:d4:d9:02:b1:eb:b8:ac:94:
         e8:b1:4d:0c:77:56:2b:f3:69:0b:10:99:f2:24:61:59:c1:ee:
         b8:b8:69:c1:04:f9:6c:a7:ef:5e:3f:40:49:a6:d6:60:35:03:
         9c:79:2c:b5:0c:a4:7b:cd:7c:41:78:62:7f:64:01:6f:f3:99:
         96:d7:ff:13:46:13:70:20:81:44:7e:1b:3a:31:64:f9:81:8b:
         66:9d:04:2c:6d:34:42:fb:3a:68:aa:5f:b8:d8:b7:40:09:26:
         ec:b7:ac:2e:97:a9:3b:5a:8c:3a:80:6c:64:49:71:02:13:24:
         30:96:c3:bd:47:e2:41:ab:e7:c2:84:89:cd:7d:b2:8f:0a:d8:
         23:08:77:bf:ba:82:ae:ad:f8:a1:65:90:29:ee:31:b4:58:ed:
         2a:04:cf:b4:bb:a4:b0:b5:69:9f:f5:84:12:da:d7:9f:1a:e8:
         a3:39:83:05:23:1e:2c:8b:a9:6c:06:90:cb:e4:b0:63:63:b3:
         93:8f:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:16 2024 by rpki-client on console-fra.rpki-client.org