Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
File:                     717bd4c365c04f4dd5d39ac6532c267af688e267.cer (raw, json)
Hash identifier:          8L3DOVv/zunfc663GQ1MOUbAVXhrkkK4gKLdRnMt6i8=
Subject key identifier:   37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01061D1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Thu 06 Feb 2025 19:18:45 +0000
Subordinate resources:    AS: 265819
                          IP: 45.6.8.0/22
                          IP: 2803:a9c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17177885 (0x1061d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : Feb  6 19:18:45 2025 GMT
        Subject: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:af:dc:41:e7:b6:90:0c:d6:98:7e:a1:fd:8b:
                    76:d9:12:19:e6:92:d5:b3:e6:78:79:8a:1b:a9:f7:
                    62:c3:51:5d:dd:2f:2c:51:50:3a:0a:3f:e9:28:56:
                    4b:7c:0e:f3:a7:69:98:22:5d:cf:78:03:c0:75:0a:
                    ce:7b:41:47:2c:4f:ee:5b:04:29:e9:0c:f3:7f:74:
                    e2:18:90:9a:8c:cf:22:0c:5d:e3:64:75:f2:28:d5:
                    f3:63:ff:93:cd:11:ef:3b:dd:39:15:c2:58:81:74:
                    b8:30:e7:54:20:66:04:23:a0:f1:2c:f5:0e:88:4c:
                    68:09:d6:16:00:37:f6:5f:fc:8b:90:9a:e1:35:09:
                    50:26:66:6b:54:16:3d:9d:b5:d3:4a:2c:11:1b:af:
                    04:9b:f2:d2:65:2a:31:aa:9d:63:63:7e:b3:6c:74:
                    6b:f9:8a:fb:a4:f3:b1:7c:f1:29:9d:f7:44:57:e4:
                    d9:54:7a:e1:c5:51:c2:32:cf:a6:0d:20:b3:11:a9:
                    33:3d:e8:39:04:67:dd:e4:fe:47:b7:d1:c4:e8:a4:
                    9a:0b:44:f0:db:e5:b7:4f:a0:70:08:fa:04:48:aa:
                    33:36:b0:75:b3:ae:ab:53:52:a7:61:b5:c9:c7:65:
                    cf:d4:72:51:f3:0d:06:40:cd:cc:9c:4c:62:fd:63:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/22
                IPv6:
                  2803:a9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265819

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:67:f6:2a:bd:67:49:a8:67:dc:5a:5c:e9:6a:32:26:ad:
         fd:7a:42:f4:4d:aa:2e:9b:fe:51:55:01:67:b8:d8:8a:45:d9:
         8d:da:69:32:49:b9:6a:93:38:b7:ec:43:26:be:d8:3c:12:08:
         a7:1c:8a:e5:b5:19:36:03:c0:78:0a:1f:46:53:d6:0e:68:b6:
         17:40:72:7f:99:cf:9f:c5:a0:f4:ef:35:49:79:3c:94:d9:c5:
         d6:2d:97:a3:fb:47:f9:e4:4d:2f:12:89:a2:1f:7c:53:4b:aa:
         dd:56:8e:7a:fa:92:be:79:48:43:9c:2b:8f:6e:4b:60:29:ae:
         d4:fe:b0:0a:46:8c:c5:27:82:72:e5:7d:2b:90:11:b8:0d:21:
         be:c6:03:3a:92:1f:40:68:9b:3f:05:90:f4:91:f5:1f:a6:21:
         32:91:42:07:df:59:dd:2e:0c:ed:50:c5:84:05:82:8a:3b:a3:
         1c:3d:0d:cc:31:1f:8c:e6:08:dd:dc:58:26:6c:d5:c2:e3:1c:
         8b:d2:1b:17:f2:73:09:ed:22:b2:f3:92:f5:9d:ea:bc:9a:6a:
         ef:09:d9:1b:91:50:b1:5e:68:d5:47:0d:aa:ae:2a:c0:e4:46:
         b5:b8:c8:90:1b:17:70:ba:60:f2:95:bb:4e:50:cb:0e:cf:d9:
         86:85:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:57 2024 by rpki-client on console-fra.rpki-client.org