Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
File:                     429f210b98677033fc9a53a0399f1ebe43c09997.cer (raw, json)
Hash identifier:          drfdWo2p+Jp3UPLSVTMDdKNTDdHf0Bvmp2M92xCEG6g=
Subject key identifier:   46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAB8CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/429f210b98677033fc9a53a0399f1ebe43c09997.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Aug 2018 14:04:55 +0000
Certificate not after:    Sat 26 Oct 2024 14:00:00 +0000
Subordinate resources:    AS: 11556
                          IP: 186.72.0.0/14
                          IP: 190.32.0.0/14
                          IP: 201.224.0.0/14
                          IP: 2800:350::/29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16431311 (0xfab8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 17 14:04:55 2018 GMT
            Not After : Oct 26 14:00:00 2024 GMT
        Subject: CN=429f210b98677033fc9a53a0399f1ebe43c09997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:a7:e6:93:3b:dc:26:e4:0b:ad:87:0a:f0:
                    7b:18:b7:f7:ee:d3:7c:04:fb:27:98:af:8e:dc:ec:
                    7e:fe:15:4a:8a:67:68:17:4e:ac:82:fc:d1:c1:63:
                    da:54:83:33:12:30:87:e3:a3:e0:bd:c8:23:15:40:
                    64:7f:c3:f6:50:be:37:5e:4e:76:91:48:14:72:0d:
                    dd:a9:17:45:c7:77:00:2c:c4:6a:33:f8:31:c0:c1:
                    15:4e:53:38:98:b6:f4:1b:e0:48:da:13:21:df:40:
                    b3:0c:7f:ae:6c:89:bc:df:a4:9c:02:ca:8b:7b:b7:
                    6f:18:45:2f:2c:a3:99:87:df:52:dc:17:2e:2f:25:
                    5e:a0:07:14:f0:6b:42:55:8e:5e:49:62:ec:72:0d:
                    fc:0f:52:38:b4:6c:60:79:a5:a9:8e:ef:db:de:24:
                    43:0c:4f:00:ba:30:13:98:b1:9e:0d:bc:33:8d:a2:
                    22:fc:b4:9e:0a:64:d7:7f:e7:bb:23:88:92:b6:0a:
                    aa:7a:67:c1:2f:c0:34:3a:25:b2:1b:9a:b5:b6:c1:
                    10:dd:fe:3a:55:b2:58:6c:13:85:7d:23:69:33:0a:
                    cd:42:6b:1b:b3:fa:21:92:5d:55:ac:1d:f4:a2:8b:
                    67:ec:5b:38:1e:20:f9:de:ce:ba:01:67:ca:a3:91:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/429f210b98677033fc9a53a0399f1ebe43c09997.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.72.0.0/14
                  190.32.0.0/14
                  201.224.0.0/14
                IPv6:
                  2800:350::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11556

    Signature Algorithm: sha256WithRSAEncryption
         44:9d:21:e7:7f:d4:d6:04:62:c7:e0:5d:46:85:ee:a3:bd:53:
         90:6e:81:c7:a9:81:95:35:e1:75:94:78:c5:a9:57:65:f7:38:
         1d:6d:77:b3:97:93:5a:76:08:ba:f0:f3:a6:0e:54:cf:b5:29:
         c6:b6:4f:1d:d2:44:60:91:f2:92:aa:9d:2b:84:0f:65:7d:e2:
         0f:87:d8:44:7f:9b:dd:90:ec:35:7a:64:16:08:97:8d:0f:9c:
         5b:b7:7e:3c:b2:52:fc:ad:97:99:06:10:2a:b1:f5:b0:07:01:
         4d:f1:b8:a4:7c:81:e7:3b:35:bf:7c:be:41:9a:c4:42:75:90:
         95:1b:ee:59:df:77:97:8a:7d:4e:15:32:78:d5:71:8a:69:40:
         35:67:69:8b:6e:a7:25:12:6e:32:34:a3:54:56:1f:8a:8a:53:
         4b:9b:d8:aa:e9:1f:d9:05:a8:28:02:c0:a8:bb:62:68:ba:d4:
         fa:d2:6d:a2:4c:b9:db:61:98:6f:f8:0e:99:75:d2:d6:a4:4c:
         f3:01:e1:81:ca:40:a4:c9:15:38:71:f2:3a:e2:5d:6e:db:a1:
         86:6a:5d:84:94:90:3d:fc:24:bf:28:52:65:af:4e:dc:3f:c9:
         5d:48:7e:c6:a2:91:73:c7:f0:f9:18:e2:65:0f:c4:10:86:37:
         bf:12:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:28:15 2024 by rpki-client on console-ams.rpki-client.org