Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.cer
File:                     7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.cer (raw, json)
Hash identifier:          ULhtVTyF0cac+vE912TKdqDLfuCqre/CRUzIkMTAtX8=
Subject key identifier:   83:16:29:5C:A6:DE:03:11:B2:7D:0E:49:35:2F:60:48:E3:63:91:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B0BB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jun 2019 23:08:30 +0000
Certificate not after:    Fri 21 Mar 2025 14:29:29 +0000
Subordinate resources:    AS: 267860
                          IP: 45.173.56.0/22
                          IP: 2801:17:800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17501112 (0x10b0bb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 11 23:08:30 2019 GMT
            Not After : Mar 21 14:29:29 2025 GMT
        Subject: CN=7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:3a:84:89:fc:78:84:10:fb:06:e7:80:b1:
                    d5:83:59:a1:d7:26:bc:81:b6:4b:bf:e5:c5:c7:55:
                    7a:93:ef:7a:e1:89:a1:ec:ae:65:18:fe:de:ae:43:
                    1a:5f:c9:9d:64:22:fd:99:98:ff:7e:43:cd:82:c1:
                    19:51:1d:e1:8c:16:28:48:54:54:95:9c:0c:b6:34:
                    94:c8:96:3b:41:3b:96:87:95:a6:a7:7a:45:d2:47:
                    b5:a5:a8:3c:ed:b0:41:9f:65:df:ae:7d:7e:e6:ed:
                    85:81:75:bc:f8:fc:0c:14:11:62:27:0d:0f:83:e5:
                    7d:4f:e9:68:2d:11:95:e3:83:d0:06:1d:f3:40:97:
                    21:3b:26:4d:41:8e:ad:fe:f9:73:3e:49:54:40:18:
                    85:bc:fd:86:f4:b1:02:ce:48:71:2a:cc:8b:c9:19:
                    30:e6:6c:5c:66:b0:1e:51:b0:c7:e2:c6:89:0e:4c:
                    52:bb:de:ee:90:76:82:a5:61:88:75:39:30:53:69:
                    92:b7:a9:88:5b:f3:49:f9:ae:91:5a:5e:f0:5c:fd:
                    86:13:ba:98:cd:c5:13:ca:f9:5d:04:c4:8f:aa:41:
                    81:3f:c3:d5:f6:68:ee:13:70:3f:d8:60:75:2d:56:
                    85:77:07:ae:07:07:34:97:d3:2d:3c:a4:ea:6a:9b:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:29:5C:A6:DE:03:11:B2:7D:0E:49:35:2F:60:48:E3:63:91:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/985285cd-3aec-4452-a0ca-38609bad691f/7b0bb194c0f2cb9f75ca0d69c5d6f8bfa267b7f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.56.0/22
                IPv6:
                  2801:17:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267860

    Signature Algorithm: sha256WithRSAEncryption
         ab:be:7d:d7:20:2c:9f:d3:71:52:35:e7:24:43:df:c6:7b:79:
         4d:9b:14:05:bb:79:0d:34:a9:6e:b3:6a:08:95:a3:03:02:f0:
         9d:35:47:a8:81:71:5c:37:ca:03:13:71:14:75:6b:99:00:68:
         fe:1a:2a:8b:74:32:f2:d0:90:b6:cf:c1:bb:c6:a9:c0:f2:7f:
         0a:ae:7e:0e:07:b7:42:0d:a3:e9:6e:6a:90:ef:89:81:ca:5e:
         2e:51:32:33:d7:f8:a3:76:d0:d3:fc:d8:2f:3e:07:cf:f7:a4:
         c9:e7:39:47:e1:a4:ce:9d:10:56:82:37:9c:ac:d4:a7:d0:23:
         d7:f5:02:35:1e:e9:70:a9:95:40:f1:66:65:d4:f1:fd:9c:45:
         de:17:9e:e2:c4:2c:cd:cd:c3:c7:17:e6:c8:e8:26:38:64:00:
         b3:a4:f6:18:5b:15:63:24:15:23:21:2c:a1:16:de:a4:35:1c:
         bb:14:4d:e8:86:d4:10:50:3a:7c:bf:dd:37:56:3a:39:15:c5:
         b5:16:bb:28:f5:95:dc:dd:95:e4:d1:28:df:c6:63:a2:97:a8:
         3b:d0:26:6d:e6:fb:14:c1:ce:8f:0f:e5:3f:b3:7a:b8:ef:18:
         6e:a5:16:66:20:e9:a1:dc:82:26:6b:36:e4:d9:6b:b7:df:9e:
         8a:91:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:04 2024 by rpki-client on console-fra.rpki-client.org