Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
File:                     41f7ad2592489a8e238bbf1d55399b9278c418a6.cer (raw, json)
Hash identifier:          pVOaojua4yqA543x6HJn0PQxrtnQi40ORU1dLFRU4kg=
Subject key identifier:   08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE6713
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:00 +0000
Certificate not after:    Wed 27 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 16973
                          IP: 168.205.64.0/22
                          IP: 190.4.88.0/21
                          IP: 2803:3100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16672531 (0xfe6713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:00 2017 GMT
            Not After : Nov 27 04:00:00 2024 GMT
        Subject: CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:65:e7:4e:8b:84:c1:fd:15:99:70:67:52:
                    f9:24:8e:98:03:8a:fd:72:91:d4:5f:ed:bb:33:16:
                    5d:c9:1c:9b:02:65:0c:6d:07:30:ea:e8:1c:8f:34:
                    a9:10:f7:ed:0e:44:79:87:53:ce:41:c8:99:ca:11:
                    0f:ba:f7:f4:32:b3:c1:d8:57:62:7c:f9:81:2a:43:
                    9a:56:09:e6:60:ff:52:81:d1:ef:a3:22:a2:27:af:
                    b0:42:64:b3:ba:08:59:18:d1:aa:d2:20:86:42:e0:
                    b4:97:f4:e7:95:bf:07:e7:da:35:1f:36:27:de:71:
                    56:73:24:30:a7:06:fe:92:22:b2:8c:a8:6a:19:af:
                    2d:4d:1b:ad:a6:70:9b:53:ea:db:f6:f7:1f:ed:ea:
                    ae:3a:78:2d:5c:5e:95:b5:74:d9:0a:82:b6:83:48:
                    b1:31:80:c2:73:1c:b1:7a:a8:e8:1e:5b:87:c2:c6:
                    a6:17:a5:a3:14:4e:0a:45:72:15:b7:49:7c:b7:37:
                    23:df:65:b5:93:43:bd:8b:e4:82:2e:1f:96:65:f0:
                    4e:cc:e7:bf:9a:3d:9c:eb:6e:60:0b:c7:d4:92:17:
                    b3:92:2e:39:00:4c:9e:5d:97:3b:4f:d4:41:ef:66:
                    a6:91:ca:7a:2e:46:58:d7:e5:18:40:fe:89:00:ea:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.64.0/22
                  190.4.88.0/21
                IPv6:
                  2803:3100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16973

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:f6:fa:5b:a6:73:40:42:11:78:57:29:61:c6:bd:21:8e:
         0c:d9:81:df:9b:44:c6:f4:80:10:24:1e:8e:fa:d8:57:fd:47:
         2d:e9:27:1e:04:83:f6:8d:81:cd:6d:55:1c:0a:4e:b4:9e:1f:
         06:34:a4:85:ff:ed:89:bb:98:7e:ac:b7:7c:62:01:bb:a6:84:
         4a:31:8d:be:c0:61:1b:a4:14:6c:fc:bb:2b:ec:15:66:9e:5c:
         90:b2:78:fb:ee:7d:ed:5e:bb:d5:30:57:07:b1:c8:42:73:1a:
         4f:bf:de:be:48:55:3d:d5:27:ed:cd:bb:28:c3:8c:e6:3f:66:
         2d:fb:df:79:bf:2d:12:d4:11:06:96:c6:42:81:d8:83:1e:66:
         fe:25:9f:33:75:8f:4f:4c:b4:4a:c0:61:34:a6:79:2d:d6:83:
         c5:5f:c5:2d:06:3a:2c:90:6e:90:78:28:63:bb:c0:ec:7d:db:
         1b:e6:2a:1f:ba:7a:c8:04:79:05:26:c9:60:2f:e1:e5:0d:57:
         ee:dc:76:81:f4:ac:83:50:d6:2a:f8:5f:70:fd:63:7c:75:d0:
         8d:a2:ef:73:03:e0:5a:e2:c7:66:9f:b2:11:e0:79:de:0b:46:
         ef:6b:75:8f:4c:c6:e5:3b:0b:54:dd:f4:c6:06:51:8e:a3:70:
         12:00:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:18 2024 by rpki-client on console-ams.rpki-client.org