Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
File:                     79aa997c3add235597a12ab7bfcd7908569d5f30.cer (raw, json)
Hash identifier:          2ZuZGp3wsmVUVh4qMckqmJPmGk2P3Z1RpOdA/vF+1Fg=
Subject key identifier:   79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDC91A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:49 +0000
Certificate not after:    Sun 26 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 27901
                          AS: 273025
                          IP: 131.221.164.0/22
                          IP: 138.99.224.0/22
                          IP: 167.250.52.0/22
                          IP: 170.82.188.0/22
                          IP: 170.150.156.0/22
                          IP: 179.60.64.0/19
                          IP: 190.5.32.0/19
                          IP: 190.102.224.0/19
                          IP: 190.110.160.0/20
                          IP: 190.114.32.0/19
                          IP: 200.73.120.0/21
                          IP: 207.248.192.0/19
                          IP: 2803:c600::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15583514 (0xedc91a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:49 2017 GMT
            Not After : Jan 26 05:00:00 2025 GMT
        Subject: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:e2:de:f8:58:3d:4e:41:e7:7f:9c:80:a3:
                    16:e0:52:3a:16:0d:a0:52:34:c1:00:c2:a6:e8:de:
                    c6:6a:1c:52:61:c8:b9:11:ce:6e:fd:ee:3f:3e:92:
                    1e:5d:60:07:98:d1:a1:b8:cb:47:a0:b9:6c:91:73:
                    34:06:3f:15:3c:22:7c:bc:7e:32:06:0a:51:45:42:
                    1d:92:17:5c:b9:0c:7c:72:5b:43:cd:f2:07:2e:55:
                    98:4d:32:3b:82:c4:68:56:48:bc:9d:1f:e5:7b:5d:
                    37:a3:f0:bd:ce:1f:3d:82:1c:59:03:a2:66:3e:cf:
                    f8:84:72:70:6a:04:ab:0e:56:39:c9:e5:25:64:32:
                    78:fa:23:3e:04:ea:a7:53:31:ba:18:96:c3:a4:c7:
                    2e:ba:9c:32:d5:93:84:51:22:86:55:37:78:10:73:
                    02:85:0c:91:ac:09:5b:5e:79:4d:fb:f8:6e:3a:f1:
                    6e:b8:3e:df:8b:48:b5:52:4d:5a:c6:64:35:61:ac:
                    62:e6:c7:2e:c8:a3:05:14:7f:b3:32:f6:aa:67:44:
                    bf:a3:7c:e2:e0:d1:41:40:58:88:41:e0:ed:53:02:
                    eb:b4:cf:0e:6d:30:94:13:ae:e3:bd:ab:b2:23:35:
                    c3:c2:d6:a9:3b:b0:38:72:94:87:85:56:5d:69:15:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.164.0/22
                  138.99.224.0/22
                  167.250.52.0/22
                  170.82.188.0/22
                  170.150.156.0/22
                  179.60.64.0/19
                  190.5.32.0/19
                  190.102.224.0/19
                  190.110.160.0/20
                  190.114.32.0/19
                  200.73.120.0/21
                  207.248.192.0/19
                IPv6:
                  2803:c600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27901
                  273025

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:25:a3:bf:17:5b:c7:d1:60:c8:10:e5:8f:dc:b0:a6:4e:
         cc:c1:e4:df:1a:4d:2d:6b:59:6a:aa:e0:90:7d:ac:27:98:6d:
         f9:b7:0b:76:9f:02:91:71:f2:af:ae:bb:81:ae:d1:cf:69:02:
         13:35:d0:b4:96:7b:e7:ac:3b:01:53:5e:f0:d7:12:5b:33:ed:
         5a:9f:28:61:7e:67:b2:95:34:a1:e8:d8:cf:18:ef:6f:59:d9:
         41:43:1a:8e:27:02:50:86:cb:9c:d1:05:a6:e5:f3:e0:0a:a1:
         1b:c6:66:33:89:13:b0:d7:d5:60:19:31:fb:64:82:a3:ab:5a:
         5f:9d:05:7c:d4:b8:dd:89:1f:0e:42:fb:ce:76:19:82:cb:ff:
         de:a9:2e:9b:1a:b5:6d:8c:f7:5f:a5:9f:01:51:a4:74:e4:dc:
         44:fd:68:ad:d4:fa:22:a2:39:77:6f:55:1b:8b:92:00:16:49:
         02:d3:00:f2:96:07:b7:7d:68:21:27:89:99:fb:23:f7:c2:6b:
         5e:9b:3c:0f:8d:a1:3e:81:74:58:29:48:5a:43:93:75:90:da:
         5c:34:76:c7:33:3d:f1:04:d6:6b:f1:2c:66:bf:4e:41:b1:93:
         ab:02:48:6d:e6:cc:04:3e:c8:6a:e8:35:19:13:3c:17:7f:34:
         28:21:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:29 2024 by rpki-client on console-ams.rpki-client.org