Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.cer
File:                     7bd015f599a571a8e20d3eb5a7bae05bf71e908b.cer (raw, json)
Hash identifier:          8AU/UGMtTD6vPYHvl5RfAtIwXphwu6Xqo99KSQfBVbI=
Subject key identifier:   E4:6D:18:CE:56:58:1B:49:48:8A:46:29:FC:E2:DA:D1:3A:4D:45:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010976C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 21:09:34 +0000
Certificate not after:    Sat 08 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 27903
                          IP: 138.255.152.0/22
                          IP: 170.0.176.0/22
                          IP: 200.89.80.0/21
                          IP: 2803:fa40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17397444 (0x10976c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 21:09:34 2019 GMT
            Not After : Mar  8 06:00:00 2025 GMT
        Subject: CN=7bd015f599a571a8e20d3eb5a7bae05bf71e908b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:d2:8d:aa:19:aa:d3:da:6c:76:98:db:df:
                    42:21:bd:91:67:07:ee:00:1e:b3:6d:c1:c6:38:93:
                    1d:4e:88:fd:7c:d5:05:32:e6:f8:28:3b:a9:5d:7c:
                    25:1b:c0:f6:6f:3d:51:12:a2:82:38:d6:1a:43:37:
                    cf:30:21:80:41:42:59:97:28:af:ff:05:a4:3a:a3:
                    80:c5:d9:48:c7:39:76:5c:32:7c:f3:9b:73:c7:25:
                    87:91:0d:77:d3:42:29:fb:2a:ef:07:77:30:b6:b5:
                    96:e8:c2:52:4f:a6:c2:c5:5b:67:5a:8e:0f:35:b0:
                    ef:62:9b:e2:22:2e:62:e8:9e:ce:0c:c9:18:56:1f:
                    cf:46:da:ea:d1:75:f0:fe:2a:ef:71:34:bf:4a:6f:
                    86:8b:92:db:ce:e6:fe:a8:18:b8:3b:d2:3c:71:fc:
                    b5:88:ca:0e:b6:38:5b:96:bf:68:55:64:fb:a8:7c:
                    a9:6a:c8:8e:51:6e:1e:b6:ea:1a:38:01:ea:63:29:
                    d3:7b:91:bf:79:20:77:77:57:60:2e:50:5f:91:e9:
                    b3:be:25:fe:82:8f:cd:55:30:1c:cf:8a:cb:a5:a0:
                    48:64:b6:43:50:5d:01:e7:f8:72:f0:b9:38:d0:05:
                    a1:d0:01:69:ef:4a:29:3e:18:be:83:c3:63:d3:54:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6D:18:CE:56:58:1B:49:48:8A:46:29:FC:E2:DA:D1:3A:4D:45:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.152.0/22
                  170.0.176.0/22
                  200.89.80.0/21
                IPv6:
                  2803:fa40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27903

    Signature Algorithm: sha256WithRSAEncryption
         34:79:2f:05:05:f1:5f:5d:51:66:73:5d:3a:c8:0f:e5:8a:df:
         8e:fc:0c:14:2c:5e:bd:74:b0:95:5c:13:fd:30:38:4e:7f:98:
         a0:0c:8d:b0:8f:ad:c0:88:25:a1:94:65:5a:03:a7:a2:8e:ed:
         fd:fc:7a:a1:c8:c1:71:7d:47:8c:82:74:ab:64:0b:a0:86:39:
         90:ce:70:3b:90:9e:a0:69:b0:41:4d:9b:86:8a:70:9a:82:9f:
         10:32:21:47:a2:c5:7b:43:cb:f4:2a:e0:ec:cc:a8:89:88:ab:
         a6:3a:fa:b1:85:e8:5b:80:7a:6f:7b:e5:7a:e1:ce:16:0c:16:
         09:c1:3f:61:c7:73:19:50:ca:f3:17:9a:e1:5a:6f:24:50:90:
         a9:5e:4f:25:6d:89:55:ee:e6:86:de:d4:5a:8b:6c:39:94:d4:
         62:0b:58:e4:09:78:56:9d:54:5d:aa:fc:7b:9a:71:74:29:4c:
         f6:65:e7:32:ab:be:70:a1:a3:48:18:6e:6f:6e:34:d5:21:95:
         dd:67:75:18:0e:31:8e:5a:e9:ee:da:58:ce:f3:9b:88:3e:dd:
         d9:9d:e4:bd:79:7f:18:02:0a:15:e1:21:0c:23:61:95:a5:a8:
         68:3a:b7:b3:c9:17:70:3a:5d:70:47:83:3b:24:e6:ac:0b:86:
         ff:f8:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:41 2024 by rpki-client on console-fra.rpki-client.org