Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4401fc25e43099f6b87907ff9f75ca409f7afb10.cer
File:                     4401fc25e43099f6b87907ff9f75ca409f7afb10.cer (raw, json)
Hash identifier:          13R286UmNRmIhOpwjLZKXksNgxWsDIoDYPWDnGjoke0=
Subject key identifier:   2B:33:BA:46:26:89:A0:FB:6D:68:1B:AD:E2:49:4B:53:7D:0E:5D:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102261B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:51 +0000
Certificate not after:    Wed 25 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 27731
                          IP: 200.1.124.0/24
                          IP: 200.1.127.0/24
                          IP: 200.115.180.0/24
                          IP: 2801:0:320::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16918043 (0x102261b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:51 2017 GMT
            Not After : Dec 25 05:00:00 2024 GMT
        Subject: CN=4401fc25e43099f6b87907ff9f75ca409f7afb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:1a:70:2d:8b:c0:84:06:ac:30:f7:8c:55:
                    37:74:6d:43:a6:28:1c:fc:a6:ed:86:65:2d:30:bb:
                    ba:58:f9:61:73:a1:25:af:04:42:88:70:f0:83:fd:
                    5d:4e:1f:58:b8:0e:55:2a:8e:0b:8a:9d:8a:c6:c5:
                    14:ac:08:36:11:5a:35:27:d1:51:c4:60:f3:61:17:
                    9f:be:bf:e0:92:31:46:c0:f6:2b:a5:3b:02:4f:17:
                    5d:97:03:af:a6:66:47:f2:1d:aa:a6:f2:12:5d:b6:
                    15:80:d0:11:3f:a0:9d:2a:90:3c:2a:91:ec:fa:12:
                    c5:5c:2f:72:13:58:f0:b0:84:52:d5:36:cc:38:de:
                    63:f5:1c:dd:41:ee:95:93:7f:7d:8b:54:4c:fd:9a:
                    20:8d:3a:18:9e:65:10:69:4f:31:35:b3:20:7c:a0:
                    23:2f:e8:01:22:75:57:9a:31:25:62:34:dd:00:5f:
                    17:c8:fd:bc:40:ee:86:2d:46:56:ee:f5:45:25:90:
                    27:99:0c:f4:69:ee:27:8d:d1:8f:9e:c3:1a:8a:ce:
                    e8:34:cf:3b:bc:33:2c:4b:cd:94:68:be:45:4b:18:
                    c1:3c:49:4f:a5:36:c0:e6:21:fc:fe:1d:14:76:8e:
                    9d:75:76:58:3e:8e:4b:4e:7e:37:e4:4a:d1:36:a3:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:BA:46:26:89:A0:FB:6D:68:1B:AD:E2:49:4B:53:7D:0E:5D:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.124.0/24
                  200.1.127.0/24
                  200.115.180.0/24
                IPv6:
                  2801:0:320::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27731

    Signature Algorithm: sha256WithRSAEncryption
         60:01:03:5f:96:5e:fd:97:69:09:8b:ce:d8:c4:de:fe:6f:8a:
         6c:31:d2:b2:8a:83:39:aa:f7:34:8f:c0:50:5c:6d:48:ad:23:
         f1:07:fc:a5:fe:3e:92:77:f0:cc:ea:d5:e3:c0:62:6d:7c:e2:
         98:5e:94:3b:f4:16:4b:fe:a7:af:26:34:6a:42:05:20:b3:d9:
         b1:1a:e7:3f:fd:c5:16:41:5c:53:b9:f9:09:15:56:b8:af:f5:
         c2:1f:cf:bd:1b:d4:eb:eb:d1:0d:79:83:99:2f:e7:c7:9f:5a:
         9a:fd:88:91:2d:eb:74:f4:24:56:dd:4b:69:7f:8b:98:ee:5b:
         be:40:91:65:9a:16:39:b5:6a:05:dc:60:17:06:68:54:83:a9:
         6e:38:8e:57:22:68:ff:41:d0:de:e3:cd:4d:84:51:3c:59:e1:
         c7:cb:a2:6f:5a:04:c2:b7:cd:35:a5:4d:68:5d:bd:69:b1:85:
         05:5e:8e:a8:4a:af:0d:a2:68:34:b2:55:9a:19:ee:a9:6a:07:
         01:4a:fb:e4:50:98:04:e2:b8:e5:e8:d5:04:73:c9:ad:9e:3a:
         86:40:e1:3e:89:68:01:c3:cd:c5:95:ae:e2:72:b1:24:a8:39:
         a7:4f:0b:80:26:54:b0:78:20:5a:d5:54:a1:35:0f:0a:4a:4c:
         80:5b:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:08 2024 by rpki-client on console-ams.rpki-client.org