Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
File:                     701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer (raw, json)
Hash identifier:          72FPIyk6+5VhU7NIwdo7+vlUt157ETsWR/JUKxNjpaA=
Subject key identifier:   B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB70E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 157.100.0.0/16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16478438 (0xfb70e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:bd:09:21:53:24:cf:9c:2f:6e:fb:08:75:
                    b6:56:c3:9b:98:6a:41:17:88:f0:9c:9d:86:d5:0a:
                    5b:77:69:ef:f2:70:56:79:95:ae:1e:f6:57:c7:fa:
                    66:b0:1e:e6:86:33:f0:64:3c:af:b8:02:b8:04:5c:
                    61:2c:c4:29:ca:d5:f3:93:4f:b6:b8:4d:3d:06:eb:
                    af:30:30:0c:44:a7:49:2f:eb:d8:8c:03:05:9e:2d:
                    d2:d8:0c:7c:5b:16:04:fb:1e:40:a0:c7:2a:5d:93:
                    7c:cd:b7:9c:56:aa:95:74:30:b7:cd:0e:da:e4:1a:
                    81:3e:fc:6e:2f:3d:94:8f:a5:6b:98:dd:5d:40:2a:
                    53:ed:48:2a:45:ed:f5:01:81:9e:f2:4e:de:ba:b7:
                    22:02:2c:4f:77:96:35:1d:02:40:70:16:d4:32:4e:
                    9e:f5:a6:a7:ff:88:53:1f:25:4b:a1:12:db:23:b5:
                    ba:03:bf:61:89:14:25:f4:02:e7:f9:27:da:7c:f2:
                    4f:77:3f:cb:ac:e9:9d:9d:1e:18:dc:dd:c0:78:d0:
                    07:6b:df:a4:06:b7:e9:ab:71:c6:d7:b8:13:e4:3d:
                    3c:6b:f7:8c:7c:19:2a:35:e0:0e:0d:63:03:4f:a2:
                    5a:da:c9:48:46:53:8b:2d:e2:20:1d:6b:2d:04:24:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:12:47:2d:bb:e7:29:93:d1:a2:17:fa:66:a8:a0:d8:1a:b8:
         67:a8:64:7b:14:5f:d0:7a:72:57:1d:71:df:22:12:7d:5f:06:
         20:f9:5e:f4:da:bd:a1:f5:37:f9:b8:6a:c6:9d:2d:99:10:e3:
         ab:17:ce:c2:bf:4a:f0:ab:d8:af:0b:89:b8:41:44:d9:62:a1:
         90:40:ff:47:29:54:97:4d:f0:2a:67:45:ad:1d:43:40:74:a6:
         56:f7:80:76:63:61:3b:ef:0c:a4:4c:e2:bf:1d:aa:f3:08:c4:
         b0:e0:e2:c3:08:ec:8a:5d:91:43:95:78:42:1e:22:ee:5b:1a:
         bf:a1:b0:0d:11:9d:e1:b8:45:25:76:f0:d3:3e:1a:59:bc:0e:
         18:db:c3:25:f9:eb:41:1a:21:6b:ed:3c:06:6f:60:03:ee:e6:
         0b:a8:df:5d:b5:59:ec:03:f5:e1:d9:59:1d:ec:fe:40:55:c9:
         27:8c:78:c0:f7:04:99:ed:88:8d:48:db:fa:71:c7:dc:e0:ec:
         95:5e:0e:b1:f6:25:d3:13:c6:69:d7:88:bf:f5:06:39:fa:59:
         87:b6:33:f5:89:03:06:45:7e:06:72:bc:1a:d4:77:1d:15:b5:
         49:03:95:af:dd:0b:95:38:66:16:57:c0:10:53:a5:09:93:07:
         19:0a:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:37 2024 by rpki-client on console-fra.rpki-client.org