Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6584128bb14dfc4a2686515c97a32c702390e066.cer
File:                     6584128bb14dfc4a2686515c97a32c702390e066.cer (raw, json)
Hash identifier:          Hv4Wes103j4+STy3dKrlQUptEj6wvrbbN9J6o8YuNN4=
Subject key identifier:   A7:B9:D7:15:58:0F:01:51:44:15:00:E4:76:A7:C1:2A:43:90:8B:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E44E9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53ec9448-2723-482f-82b2-354aa76426e2/6584128bb14dfc4a2686515c97a32c702390e066.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53ec9448-2723-482f-82b2-354aa76426e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 21:52:06 +0000
Certificate not after:    Sat 30 Nov 2024 14:25:05 +0000
Subordinate resources:    IP: 181.114.232.0/21
                          IP: 2803:7500::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14962334 (0xe44e9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 21:52:06 2023 GMT
            Not After : Nov 30 14:25:05 2024 GMT
        Subject: CN=6584128bb14dfc4a2686515c97a32c702390e066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:ca:7a:18:da:df:0c:0b:4f:46:11:eb:9c:
                    c5:3d:0f:f4:7a:4f:9f:7b:78:60:ff:3c:7e:e2:9a:
                    ea:d3:59:7b:69:8e:7a:f5:b8:4f:2e:44:d9:cf:e8:
                    cf:38:16:e7:11:22:af:99:b3:a2:53:6e:5a:eb:c0:
                    07:78:71:29:1b:7d:92:65:de:d1:55:d3:a1:41:93:
                    e3:f4:33:b7:e6:ca:de:03:0e:0c:2b:24:78:85:d5:
                    3c:dc:f4:c0:d8:97:48:2d:73:fa:f8:8b:43:36:43:
                    24:56:31:dd:91:f6:8b:1c:e9:94:b9:f7:88:29:aa:
                    32:73:0d:09:5e:ba:98:bd:8e:74:7d:63:ed:0c:ec:
                    47:cb:5f:f8:ce:45:cc:bd:9e:3e:06:91:21:85:33:
                    d2:00:24:de:44:e9:72:1a:b2:f9:60:57:25:71:67:
                    27:41:79:77:ea:52:78:15:e3:c1:63:ec:eb:07:be:
                    cc:e1:54:de:78:01:39:a7:a0:05:a8:ef:a3:6d:6c:
                    43:da:f8:34:3c:41:1a:3f:0e:ff:70:fe:69:26:f5:
                    a0:28:b9:20:03:d3:43:a8:23:e9:8e:e4:60:19:cd:
                    a2:16:c2:82:43:8b:1a:c1:fc:81:86:60:0a:20:16:
                    55:4b:49:a7:a7:07:2a:29:5b:1e:de:d1:ea:6d:b7:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B9:D7:15:58:0F:01:51:44:15:00:E4:76:A7:C1:2A:43:90:8B:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53ec9448-2723-482f-82b2-354aa76426e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53ec9448-2723-482f-82b2-354aa76426e2/6584128bb14dfc4a2686515c97a32c702390e066.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.232.0/21
                IPv6:
                  2803:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:88:68:b3:0b:e4:46:b6:8d:18:dc:fc:17:55:a3:67:27:9f:
         e4:11:73:0b:32:91:01:25:e7:a4:80:d4:21:a5:25:7a:ec:27:
         eb:eb:2f:63:74:8f:d2:b9:93:c4:dd:3d:37:63:19:4a:f1:95:
         14:6a:c3:68:9e:50:50:1b:bf:72:16:15:45:bd:5b:89:84:59:
         84:bc:2d:c4:e4:08:a0:45:57:10:9b:7c:02:2b:96:db:66:b0:
         ea:31:7d:6c:bd:e8:f7:de:7f:d8:32:f9:a4:9a:10:c3:8d:de:
         89:b0:f4:a9:b2:00:7c:a5:28:76:fb:cf:75:e5:63:85:a3:b6:
         4b:33:dd:bc:1e:d5:92:ac:23:c6:35:38:c4:91:42:d2:90:eb:
         16:c5:ab:57:1b:11:02:6b:ac:7c:36:a7:b4:15:14:98:b0:6b:
         e4:d7:e1:f9:87:37:c8:70:43:4b:6d:db:6a:15:7a:26:ed:ba:
         38:4d:35:35:41:b0:97:63:3a:81:df:12:3e:9c:b1:fb:04:49:
         4d:34:a3:27:d7:23:86:5f:00:d1:03:98:3d:b0:b5:5d:e2:cc:
         d1:89:ee:76:eb:44:35:67:a2:3f:ed:c5:14:90:98:ee:2a:4d:
         7e:00:7e:d8:16:b2:2e:bf:a2:e9:be:29:07:36:5c:a4:5a:29:
         69:e2:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:39:33 2024 by rpki-client on console-fra.rpki-client.org