Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4074b7e3388f8bf410df9682225a591248c46279.cer
File:                     4074b7e3388f8bf410df9682225a591248c46279.cer (raw, json)
Hash identifier:          LwD+QlqrDatc1WaKqbap0LG/RPuVQuwnJhyz184I4CM=
Subject key identifier:   94:44:94:C5:2D:2D:B7:95:30:D4:1B:8E:2F:02:FA:83:BD:44:E1:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010EF7A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/4074b7e3388f8bf410df9682225a591248c46279.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Tue 22 Apr 2025 22:36:34 +0000
Subordinate resources:    IP: 138.121.200.0/22
                          IP: 200.7.96.0/20
                          IP: 2803:c40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17758115 (0x10ef7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : Apr 22 22:36:34 2025 GMT
        Subject: CN=4074b7e3388f8bf410df9682225a591248c46279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:4c:83:35:2a:e1:4d:98:6a:10:de:fe:cb:
                    0c:46:ab:c4:da:56:7a:ec:76:be:8b:f0:25:69:51:
                    ae:80:2d:76:02:78:ac:ca:09:87:63:eb:5d:c1:ce:
                    17:44:23:da:0b:21:2b:5e:08:dc:1d:01:d5:55:85:
                    61:7e:f5:71:e6:75:ec:2b:fc:90:ca:9f:f1:34:36:
                    04:de:f6:ef:fa:a4:c8:84:13:1f:c3:69:07:05:d8:
                    09:79:24:85:81:c2:ce:68:5f:6a:af:74:7d:4d:cb:
                    fb:ee:1b:19:d9:03:d9:d0:42:c6:be:dd:f7:71:82:
                    26:97:89:74:ae:d3:6c:24:be:62:2b:63:76:ea:c3:
                    ce:06:3c:cd:26:1f:7e:ca:59:06:9d:fb:85:61:5c:
                    dd:03:0f:a2:fa:ff:0d:ce:7e:84:0f:59:7b:48:67:
                    ca:9c:77:17:02:44:49:43:2e:f7:6a:78:5b:d8:1e:
                    ee:9b:55:b0:a0:86:cb:c2:66:9c:f6:67:a2:d1:c0:
                    cf:8a:7f:00:89:34:28:c5:98:54:b2:b7:b7:00:95:
                    b0:e7:0c:a8:cc:7f:08:c7:b7:31:c7:c1:13:38:60:
                    48:5d:fe:16:85:31:36:51:90:c1:f5:92:4c:1c:40:
                    e7:ba:45:e9:40:3b:ef:81:03:4e:a8:b5:70:73:78:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:94:C5:2D:2D:B7:95:30:D4:1B:8E:2F:02:FA:83:BD:44:E1:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab3e62dd-7a3b-4dc8-a76e-74eaf2ec6bc0/4074b7e3388f8bf410df9682225a591248c46279.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.200.0/22
                  200.7.96.0/20
                IPv6:
                  2803:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:a7:2d:34:b9:65:a9:67:f3:44:76:2b:1b:a3:3c:44:a0:
         dc:cb:6d:0c:1f:e9:74:cc:cc:9b:7f:af:c9:14:e7:9b:df:31:
         e5:0b:34:d8:12:e7:cf:70:74:74:f7:8a:c3:1a:57:2a:8e:b8:
         76:8e:b6:15:48:98:5a:ca:5c:fe:34:41:63:b6:d8:c0:ac:91:
         fb:6b:f6:8b:8e:a7:60:ff:aa:6c:20:d7:79:0a:4f:6a:9c:73:
         b1:3c:4e:27:10:9f:eb:6a:29:58:9a:27:98:85:4c:ae:25:8e:
         87:a0:86:5b:27:16:f9:42:b0:33:30:57:19:52:c0:ef:a7:08:
         40:66:6a:2d:55:bd:9d:79:ed:69:6c:ef:16:7c:91:ad:81:f5:
         3e:be:fe:dc:21:bb:5d:a7:9b:14:cd:63:05:9a:65:e3:54:eb:
         20:37:11:62:da:64:b2:95:be:41:41:b4:a9:e7:a3:06:42:76:
         86:a9:a2:48:b3:94:19:66:aa:6c:e0:0d:b2:1f:be:1a:07:2c:
         c7:ff:e1:eb:5c:ae:7a:bb:fb:0b:46:6a:2f:6e:ce:e4:72:ce:
         c3:39:3b:6e:10:f9:84:75:73:16:f5:56:7c:fa:0f:66:2f:31:
         e6:75:bb:3d:3a:a4:d0:50:ea:69:7f:55:33:7b:a7:da:a8:43:
         1e:46:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:48 2024 by rpki-client on console-ams.rpki-client.org