Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
File:                     6ff75e9cde86b5c490d171a8993267e23270787a.cer (raw, json)
Hash identifier:          8iRg9GsJvwt49C9q7Wc1iIPOwoahOZ6vi7vhH2unjGM=
Subject key identifier:   95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E121A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Apr 2021 16:09:09 +0000
Certificate not after:    Thu 09 Oct 2025 19:47:45 +0000
Subordinate resources:    IP: 138.84.32.0/19
                          IP: 148.222.128.0/21
                          IP: 149.19.160.0/20
                          IP: 179.60.168.0/21
                          IP: 200.189.16.0/20
                          IP: 2803:9810::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17699354 (0x10e121a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  6 16:09:09 2021 GMT
            Not After : Oct  9 19:47:45 2025 GMT
        Subject: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:49:b0:c5:36:05:0c:86:25:ce:63:c1:87:
                    06:70:a9:1b:7f:ea:8d:e7:d1:71:90:a2:df:10:d4:
                    32:9a:78:7a:7a:78:65:37:a3:0f:6b:fb:26:f1:2a:
                    9a:09:5a:08:19:ac:4c:7a:0f:f4:52:bb:63:38:f9:
                    ec:5c:52:0a:a5:22:86:95:65:6f:bc:14:eb:17:3b:
                    ed:80:2c:d8:f2:a3:76:df:9c:e4:85:cf:57:fa:ff:
                    e1:f8:6a:5c:27:66:21:99:99:a8:93:f2:ed:85:a2:
                    a0:12:a4:2e:3e:9f:32:ca:10:ac:dd:0f:5a:a1:28:
                    3f:c7:a9:ac:8e:6e:c8:fa:17:17:03:64:d4:9f:93:
                    84:01:ea:7d:40:8b:d6:93:6d:4f:2e:bd:39:f3:ef:
                    30:89:6f:90:f9:e4:0c:47:5e:6a:75:2e:4e:24:74:
                    cb:fa:08:9c:10:f8:b9:0c:0b:4c:d1:f3:e0:cc:59:
                    18:2e:1c:50:04:b9:c8:af:1a:69:31:ec:b2:7b:1c:
                    2a:f0:f8:54:6b:b7:c7:97:34:98:44:09:57:56:55:
                    fa:87:8a:3f:6b:ee:6a:a1:30:d7:d1:74:14:9d:e7:
                    1d:77:7b:42:d3:85:f8:84:15:04:93:40:04:38:44:
                    be:11:b0:2b:9e:d2:aa:24:a0:2f:d1:93:25:ae:5a:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.32.0/19
                  148.222.128.0/21
                  149.19.160.0/20
                  179.60.168.0/21
                  200.189.16.0/20
                IPv6:
                  2803:9810::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:66:3f:8f:3d:cb:7c:9d:6e:ce:f3:ec:1d:1d:34:73:fc:10:
         08:bf:d8:53:52:cf:34:d5:0a:d9:b8:ae:65:89:a4:4c:93:e5:
         41:4e:3e:1f:68:b7:8d:e6:66:fe:46:81:dd:c9:c6:ac:6d:06:
         86:ed:5b:d9:4c:b4:f0:08:fe:c7:bf:64:74:bd:bc:cc:43:c5:
         81:3e:10:bd:c4:0c:8e:7a:fe:a7:de:e9:06:99:76:18:54:b8:
         78:69:fd:df:04:53:9c:15:e8:2e:1c:1f:a3:d1:76:f3:48:e7:
         69:93:b8:cc:fb:e4:6e:60:bf:dc:33:49:7a:b7:2c:1d:46:6e:
         10:54:7e:0a:79:67:c3:bf:17:b1:17:32:1c:50:ad:67:07:9d:
         f0:62:f8:0b:6e:06:79:59:90:fd:5a:85:c2:ab:ae:91:21:4f:
         d6:14:24:ed:c9:df:76:bd:e1:32:96:d4:d0:f6:03:1f:56:6c:
         d1:eb:4e:ff:0a:47:e5:aa:6c:f2:1f:6c:b2:d1:5b:dc:15:68:
         4f:95:8f:d2:e6:95:31:1d:61:52:9d:cf:b2:83:a0:df:d2:66:
         39:89:76:e4:cb:6b:e7:5e:89:99:86:17:8a:aa:cf:ba:19:35:
         29:f2:7a:10:6f:14:77:81:9b:2c:76:10:9f:45:9e:98:b5:ef:
         96:f0:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:01 2024 by rpki-client on console-ams.rpki-client.org