Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
File:                     4714a8fc89277634ae57cdaf4d814514cd61f656.cer (raw, json)
Hash identifier:          vgn4wLo+2qMQ8I2v3Glx8XNK9YJlIrgJztLa0RaKXb8=
Subject key identifier:   25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01095F9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 May 2019 15:23:30 +0000
Certificate not after:    Fri 07 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 26619
                          IP: 179.50.0.0/17
                          IP: 2803:cb00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17391515 (0x1095f9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 15:23:30 2019 GMT
            Not After : Mar  7 06:00:00 2025 GMT
        Subject: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:ab:09:36:fe:b9:2d:2a:57:d7:36:32:6e:
                    f7:d1:e6:0a:2d:75:24:9c:2a:d5:18:cd:b7:bd:d7:
                    3c:1d:78:53:7e:8d:a0:c4:3b:ab:ce:61:e8:04:c1:
                    96:a0:9f:a9:ea:3c:28:ce:27:18:f0:0b:64:42:a3:
                    da:07:65:23:18:84:82:0a:4f:f5:5d:e4:a4:da:e5:
                    3d:db:a8:1e:64:71:5b:33:9c:dd:9b:b4:08:ca:95:
                    c8:db:ba:b4:ec:c3:e6:8d:bc:7e:28:86:a6:79:3d:
                    b4:3c:99:67:9a:c5:71:a6:0e:1c:f5:d3:34:df:77:
                    1c:be:fb:3d:ad:c3:cb:2c:d0:f0:b2:b1:ad:6c:e8:
                    49:d9:99:86:0c:a6:61:ee:7f:7d:87:02:b8:8d:f0:
                    9c:d2:76:4e:8d:fa:ce:a3:39:39:2b:01:f5:f8:95:
                    c0:61:c2:7c:74:b4:fc:33:8e:1c:aa:31:ac:da:83:
                    10:1c:5e:59:dd:06:38:a6:c5:37:48:ef:0b:b6:aa:
                    37:6f:86:00:09:6e:6b:70:69:87:aa:e6:d1:b3:64:
                    0d:16:30:be:1d:71:eb:e8:52:0c:02:d9:5b:1a:ca:
                    7a:95:bd:a5:93:ce:d8:8d:4b:57:f9:bd:ec:0a:8a:
                    62:9d:45:28:62:4f:c7:b3:bf:76:87:5c:54:e8:57:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.0.0/17
                IPv6:
                  2803:cb00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26619

    Signature Algorithm: sha256WithRSAEncryption
         66:d8:6c:29:28:8e:5e:9e:17:9e:43:03:d9:35:78:4e:3c:f4:
         04:16:79:a8:32:2a:9f:c1:5b:fc:5a:21:df:fd:4f:02:41:60:
         25:4b:da:86:ad:61:cc:82:cd:26:c7:bc:ff:95:2d:4f:7b:f1:
         7b:ee:28:a1:c3:f6:80:fd:04:bd:4e:f8:ba:d5:08:fb:bf:ba:
         04:1e:5f:cc:7c:14:50:24:ed:c9:3d:88:11:38:7f:ca:00:66:
         9d:47:46:16:d3:83:5e:ef:09:8b:52:e9:94:f4:53:a8:18:21:
         21:e0:f8:0a:85:30:e6:40:ff:44:a7:f0:e2:ac:2d:01:5d:90:
         67:d8:ac:42:55:a6:17:99:4d:71:1a:bf:7b:e0:99:1f:ac:2a:
         b1:12:d0:bd:46:4f:27:bc:0d:d1:fb:4e:12:77:2e:3d:32:b5:
         01:89:2d:d0:8f:7f:72:5b:52:a1:08:e1:bc:13:b6:c4:fe:e2:
         39:b7:61:6b:72:56:e4:6a:a6:92:7a:d6:cd:82:fe:bd:96:84:
         ba:f8:16:b6:e8:29:18:e5:ed:24:62:14:70:91:58:77:24:29:
         0d:1f:be:6b:69:b2:1f:d7:a8:06:f9:e1:78:99:d6:98:f2:4a:
         05:9d:f4:3b:7b:4b:bb:1d:24:29:ba:17:bc:2d:52:20:28:ff:
         db:2e:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:50 2024 by rpki-client on console-ams.rpki-client.org