Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer
File:                     3d834735280c5b9052510730fac20a4e6213a18d.cer (raw, json)
Hash identifier:          IWuCmFkDyMlG+j/ngY6lOyu9sBq2fX3Q0wonklkDkzI=
Subject key identifier:   5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105A932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Sep 2020 17:46:01 +0000
Certificate not after:    Mon 03 Feb 2025 05:00:00 +0000
Subordinate resources:    IP: 45.5.164.0/22
                          IP: 2801:17:d000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17148210 (0x105a932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 23 17:46:01 2020 GMT
            Not After : Feb  3 05:00:00 2025 GMT
        Subject: CN=3d834735280c5b9052510730fac20a4e6213a18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:d8:89:5e:0d:57:c2:c2:d5:b8:f6:20:58:
                    af:b9:3b:6c:7b:a4:4f:9c:5e:5b:8c:6e:00:7f:4e:
                    70:91:78:5c:59:af:95:13:e5:56:ce:00:93:05:8f:
                    db:fe:9f:c4:6d:c5:95:78:75:e1:62:f2:81:b3:c6:
                    bf:86:64:b4:a4:49:e4:de:e0:d5:dd:2a:e1:f0:2d:
                    d8:0f:6d:52:32:fd:c6:9f:88:65:c9:e2:01:c7:94:
                    26:c5:10:0a:65:2d:49:15:18:0f:7d:4a:7f:c4:10:
                    06:88:70:da:13:80:63:0e:27:ca:6d:95:c5:f5:bb:
                    cd:35:be:7e:e5:b1:39:58:9e:c5:0f:99:e7:ee:a0:
                    80:ad:00:ac:bc:19:59:a2:1a:f7:39:35:64:29:62:
                    b5:51:72:70:fc:25:1f:00:ff:a0:ee:f0:9c:d3:d7:
                    e2:3c:39:33:26:34:95:e1:d8:69:9d:75:81:52:16:
                    b3:4b:0b:21:43:8d:02:b7:c9:64:6d:a7:c4:de:00:
                    8e:cd:3e:25:09:09:fc:37:dc:ec:9e:d8:d6:20:d9:
                    b8:d5:9e:84:40:89:51:02:25:14:ad:6f:6e:c4:70:
                    bc:65:f9:ad:c3:0d:69:4c:32:5b:55:be:94:c4:b2:
                    0c:58:51:d0:c0:d7:fc:ba:a4:63:34:db:55:ce:37:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.164.0/22
                IPv6:
                  2801:17:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:1d:dd:c5:c8:8d:ab:1f:05:f8:35:bc:d8:17:d9:d4:ba:
         07:18:fc:f7:84:4a:f8:75:a4:0b:6b:2b:73:00:4a:9e:f3:b7:
         c7:f4:ca:cf:96:6a:3f:ce:05:0a:4e:a5:56:0b:17:8a:db:e8:
         c9:54:d1:1e:42:39:5c:d8:49:11:a7:47:05:18:df:b1:9c:cb:
         d9:17:a5:c4:94:05:02:6f:b9:9a:0d:2f:8a:28:3d:83:8e:76:
         b9:dd:c5:4c:63:d9:56:3f:5b:f9:a3:2e:98:1f:c9:84:6f:da:
         5c:0a:2b:69:81:14:c7:08:1a:75:25:1e:01:76:00:65:f2:0f:
         36:14:32:e8:e1:07:ab:fc:02:a3:90:1e:60:91:25:24:52:36:
         74:2c:6a:d7:a4:19:3f:fd:75:94:d7:ff:e2:5a:da:08:59:95:
         c7:08:0d:37:f4:55:2a:9c:59:f7:5a:69:a6:76:28:13:0d:20:
         f6:db:8e:e5:e9:29:bf:16:64:ef:be:89:aa:10:87:41:f0:cd:
         95:f3:3b:7a:72:11:4a:7c:a8:0c:c8:ee:f3:78:79:79:1b:3a:
         13:0a:b7:84:1a:29:d6:b4:3b:31:0d:61:db:fd:16:a8:79:84:
         01:16:8f:49:1f:3a:2c:8d:c6:a8:7d:79:4b:f1:ca:f2:ea:a4:
         2b:aa:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:47 2024 by rpki-client on console-ams.rpki-client.org