Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.cer
File:                     370e9f4dda74e99161b7878bd59c4f9e02ba4af1.cer (raw, json)
Hash identifier:          MIAlbqKGXF3D1/tkPhiVHcSj5TdA1mScDFn2+JPtp58=
Subject key identifier:   F8:E8:EE:A4:7D:AC:20:74:4E:73:07:96:CC:2E:49:37:95:AF:C6:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102248E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 10 Nov 2019 19:07:54 +0000
Certificate not after:    Tue 24 Dec 2024 21:12:18 +0000
Subordinate resources:    AS: 52352
                          IP: 179.51.224.0/20
                          IP: 190.15.80.0/20
                          IP: 2803:e480::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16917646 (0x102248e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 19:07:54 2019 GMT
            Not After : Dec 24 21:12:18 2024 GMT
        Subject: CN=370e9f4dda74e99161b7878bd59c4f9e02ba4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:e6:b5:7a:f4:5d:16:19:15:a0:4c:f1:72:
                    26:28:c0:18:36:5d:9a:51:d6:d4:d9:f7:c4:8a:20:
                    95:03:9f:35:9c:42:5f:72:77:ef:f9:90:93:1e:ea:
                    39:58:37:55:26:a6:77:0f:7c:82:24:31:62:48:5f:
                    21:db:33:28:f2:7a:38:f6:16:88:bd:d4:a2:24:39:
                    ea:38:4a:be:8b:0c:69:ac:6b:d5:7c:7a:95:d0:13:
                    e4:6a:23:65:f0:f8:1d:28:cf:28:a5:df:c7:fe:d6:
                    cb:10:2b:dc:3b:ae:e9:d7:ae:f2:44:00:25:1c:f2:
                    9d:17:8d:e5:52:45:bd:a5:28:4a:65:c5:00:0e:e3:
                    1e:c8:67:5e:14:7a:8f:0f:5a:ef:d0:72:d8:55:82:
                    fd:fd:3d:2c:99:f9:da:90:47:9d:16:a6:ed:8f:53:
                    f8:07:16:ac:1b:6d:8a:15:91:9b:58:cd:7e:d7:08:
                    6c:18:65:c4:c5:fa:5b:08:dc:4f:67:7c:5e:56:0e:
                    8f:aa:e1:1f:10:f9:b7:a1:81:1d:fd:a5:c0:c4:dd:
                    b5:7a:30:ad:6c:2b:8e:1c:fd:ca:5b:bc:bc:a7:62:
                    61:38:54:b0:c3:0a:33:e2:92:58:91:48:96:dd:46:
                    8e:be:7b:ca:1d:c2:17:f8:1f:f8:a4:9c:fe:fb:a1:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:EE:A4:7D:AC:20:74:4E:73:07:96:CC:2E:49:37:95:AF:C6:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.224.0/20
                  190.15.80.0/20
                IPv6:
                  2803:e480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52352

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:9d:7b:07:ae:54:50:8f:14:cb:0d:55:fc:32:b9:b8:86:
         21:0a:db:8a:76:f6:a4:f7:78:68:a8:f8:95:45:2a:76:10:71:
         01:45:db:44:03:04:8a:a4:14:51:93:2c:0f:f0:f9:ca:9d:3b:
         66:40:dd:17:c9:fe:96:cd:ad:d7:e2:77:94:94:b9:b0:e1:1c:
         0c:02:6b:e8:6f:c6:6c:0e:fe:68:e3:6b:21:81:e9:80:af:a6:
         7d:d6:3c:31:3c:36:b6:c5:25:36:51:8c:77:5c:cd:17:10:08:
         04:d7:a7:f2:30:c2:c3:c3:7a:8f:3e:ad:3e:1b:51:ee:e2:77:
         52:08:16:ff:61:e1:4a:da:c9:ca:d3:ab:a7:e4:a7:25:06:eb:
         02:44:0d:c1:96:44:ad:d1:92:62:78:a9:8a:d5:e2:e2:24:c3:
         41:47:d2:bc:74:78:af:e3:04:b5:89:ce:66:88:d8:e7:34:00:
         4b:77:66:10:13:5b:c7:b1:90:d1:c1:9d:49:28:63:56:6f:45:
         8a:c1:33:e5:5b:4b:6e:3a:22:6b:40:e6:a3:aa:68:cb:fc:52:
         68:90:cd:f6:ec:45:57:b4:15:8a:d9:df:91:8e:4b:ef:81:03:
         40:e6:91:c7:0b:5d:88:c4:1a:ee:e6:02:d5:cb:e1:41:06:46:
         49:d4:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:13:15 2024 by rpki-client on console-ams.rpki-client.org