Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e0d8eafbf8ec194359777eb36f8559eef794db7.cer
File:                     7e0d8eafbf8ec194359777eb36f8559eef794db7.cer (raw, json)
Hash identifier:          N+rDvhuExSew4eUfCz5oWzmJSRHXN7F0mNuvc8kkhBk=
Subject key identifier:   6F:98:E4:34:24:84:84:53:81:01:74:55:E8:CB:0D:D2:73:19:A6:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010EAECD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/7e0d8eafbf8ec194359777eb36f8559eef794db7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 Jun 2019 03:31:04 +0000
Certificate not after:    Sun 20 Apr 2025 21:37:58 +0000
Subordinate resources:    AS: 267915
                          IP: 45.178.244.0/22
                          IP: 2803:7660::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17739469 (0x10eaecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 03:31:04 2019 GMT
            Not After : Apr 20 21:37:58 2025 GMT
        Subject: CN=7e0d8eafbf8ec194359777eb36f8559eef794db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:3c:6b:c0:91:20:6a:a0:19:25:2a:20:7d:
                    b5:1c:f2:8e:72:67:ca:69:96:9f:ac:91:97:63:00:
                    73:5a:e2:05:18:b2:13:8c:a6:f4:78:20:00:00:e6:
                    bc:76:06:c2:5a:68:4a:9d:7a:30:e0:72:d3:97:6c:
                    6a:4c:ff:88:90:21:31:21:ee:5c:0f:e4:9a:ca:77:
                    3c:a2:3a:c2:ae:bc:88:12:8b:fa:53:89:e4:62:84:
                    bd:40:bb:63:9c:df:48:84:51:9e:2a:d0:16:2a:18:
                    11:cc:88:0c:c7:fa:e4:00:30:98:da:0a:bf:24:fc:
                    15:8c:9a:ad:ee:38:8d:17:f4:72:8d:59:e2:f9:46:
                    50:fe:98:61:a6:69:de:82:8a:c0:b2:f7:66:14:71:
                    39:4d:3e:33:43:73:6f:74:c0:38:ff:34:6b:fe:fd:
                    1a:6c:a3:70:01:98:fd:fb:5f:2d:80:be:f5:78:f0:
                    d4:c3:64:3c:b3:be:bb:ce:20:96:4a:a1:c1:89:0e:
                    52:21:99:4d:34:e5:13:fa:a4:f6:98:44:1e:25:18:
                    4b:a2:73:32:a0:58:f3:18:28:3c:7e:db:4c:88:bb:
                    a3:10:5a:d2:67:dc:d7:bc:e2:2f:3f:36:b1:32:fd:
                    4b:fc:5e:b3:f6:fa:0c:41:e7:c2:d6:0e:d2:08:05:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:98:E4:34:24:84:84:53:81:01:74:55:E8:CB:0D:D2:73:19:A6:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf0fa277-fac7-4d45-8a9f-46e299a55e2b/7e0d8eafbf8ec194359777eb36f8559eef794db7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.244.0/22
                IPv6:
                  2803:7660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267915

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:0d:98:ee:40:2d:19:dc:6f:73:03:cd:29:21:8e:40:9b:
         59:9d:56:8f:0b:96:70:73:75:d1:d7:a2:4d:b9:ae:aa:a1:c7:
         9e:25:37:b7:4d:fc:dc:74:26:52:43:95:e9:18:47:e3:08:15:
         18:40:e5:c0:7a:12:bd:a4:57:0c:df:2e:c4:3d:cc:d3:8e:7b:
         ac:15:50:ab:f6:e4:fb:19:c3:22:15:e0:a6:cf:1e:98:ac:fd:
         8c:9e:98:f1:51:d3:77:7d:6e:89:de:1b:a8:28:6c:8e:93:72:
         e8:13:46:5e:bb:b3:0c:bf:95:da:b3:eb:8d:d9:19:aa:f9:af:
         fc:0f:4e:14:ef:d4:29:1a:15:36:b2:59:65:98:e5:ec:41:b9:
         7f:66:8a:81:8f:de:2e:7c:a0:f5:df:d2:74:67:e6:33:4c:84:
         c1:fa:65:a7:89:b4:d7:fc:f8:14:97:d3:bc:70:03:4f:98:bd:
         fd:dd:0a:fd:c0:e6:dd:17:90:96:dc:fd:a2:68:d0:1a:a8:a4:
         5c:cf:2f:b1:6a:e3:c4:0d:6d:e4:72:f8:6a:ed:62:2f:0f:4e:
         88:82:67:46:09:26:dd:05:70:c7:d4:ba:ff:98:10:4c:17:80:
         f2:7d:a9:56:fc:3c:19:98:c5:dc:f1:03:7b:b1:48:2c:78:8b:
         34:8c:ce:ba
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQ6uzTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDYyMTAzMzEwNFoXDTI1MDQyMDIxMzc1
OFowMzExMC8GA1UEAxMoN2UwZDhlYWZiZjhlYzE5NDM1OTc3N2ViMzZmODU1OWVl
Zjc5NGRiNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTwPGvAkSBq
oBklKiB9tRzyjnJnymmWn6yRl2MAc1riBRiyE4ym9HggAADmvHYGwlpoSp16MOBy
05dsakz/iJAhMSHuXA/kmsp3PKI6wq68iBKL+lOJ5GKEvUC7Y5zfSIRRnirQFioY
EcyIDMf65AAwmNoKvyT8FYyare44jRf0co1Z4vlGUP6YYaZp3oKKwLL3ZhRxOU0+
M0Nzb3TAOP80a/79GmyjcAGY/ftfLYC+9Xjw1MNkPLO+u84glkqhwYkOUiGZTTTl
E/qk9phEHiUYS6JzMqBY8xgoPH7bTIi7oxBa0mfc17ziLz82sTL9S/xes/b6DEHn
wtYO0ggFnucCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRvmOQ0JISEU4EBdFXoyw3S
cxmmejAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iZjBmYTI3Ny1mYWM3
LTRkNDUtOGE5Zi00NmUyOTlhNTVlMmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmYwZmEyNzctZmFjNy00
ZDQ1LThhOWYtNDZlMjk5YTU1ZTJiLzdlMGQ4ZWFmYmY4ZWMxOTQzNTk3NzdlYjM2
Zjg1NTllZWY3OTRkYjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2y9DANBAIAAjAHAwUAKAN2YDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFoswDQYJKoZIhvcNAQELBQADggEBAD8f
DZjuQC0Z3G9zA80pIY5Am1mdVo8LlnBzddHXok25rqqhx54lN7dN/Nx0JlJDlekY
R+MIFRhA5cB6Er2kVwzfLsQ9zNOOe6wVUKv25PsZwyIV4KbPHpis/YyemPFR03d9
boneG6gobI6TcugTRl67swy/ldqz643ZGar5r/wPThTv1CkaFTayWWWY5exBuX9m
ioGP3i58oPXf0nRn5jNMhMH6ZaeJtNf8+BSX07xwA0+Yvf3dCv3A5t0XkJbc/aJo
0BqopFzPL7Fq48QNbeRy+GrtYi8PToiCZ0YJJt0FcMfUuv+YEEwXgPJ9qVb8PBmY
xdzxA3uxSCx4izSMzro=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:05 2024 by rpki-client on console-ams.rpki-client.org