Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7eee271396be12d91db16eae558df87246f5bda1.cer
File:                     7eee271396be12d91db16eae558df87246f5bda1.cer (raw, json)
Hash identifier:          vGFoeIUdIxIZ9yDBT5XEVdOSBcWEZMwESPUwuyV4/io=
Subject key identifier:   91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010FC4B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/7eee271396be12d91db16eae558df87246f5bda1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Thu 01 May 2025 15:00:00 +0000
Subordinate resources:    AS: 52250
                          IP: 166.114.0.0/16
                          IP: 200.9.165.0 -- 200.9.168.255
                          IP: 2001:1378::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17810608 (0x10fc4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : May  1 15:00:00 2025 GMT
        Subject: CN=7eee271396be12d91db16eae558df87246f5bda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:93:2f:29:be:8a:71:52:94:00:61:6c:3b:
                    28:36:27:0d:79:87:53:6f:f6:36:be:01:c1:dc:82:
                    7a:c4:85:f9:64:e2:fc:f4:2c:da:7c:00:de:e8:96:
                    16:e2:4b:90:0f:5f:a4:b1:98:e0:3e:45:da:7d:75:
                    d8:47:6c:43:66:57:63:01:06:e6:3b:43:ea:30:55:
                    f7:34:c2:3c:67:b9:c5:ec:7a:ae:a2:2a:f7:12:0a:
                    1f:c6:4d:9c:a2:8c:1b:d9:e3:c9:27:63:4f:e1:a0:
                    eb:e6:76:d8:01:ad:9a:b6:e1:d4:47:2c:4a:4e:65:
                    95:01:96:ab:71:bb:8c:ee:94:0e:1f:0b:a7:65:47:
                    13:b3:29:37:0b:26:d6:0f:76:6a:da:33:12:2b:85:
                    d7:d3:cb:c5:a6:4a:da:82:f9:07:a8:16:e6:a7:99:
                    47:0b:2f:0e:38:2a:97:8e:4f:6f:57:fd:7c:33:38:
                    e6:c1:c5:c2:dd:e0:6c:cf:4f:2d:be:cf:72:99:c8:
                    d4:cb:bb:b7:2d:c6:ac:71:db:64:4d:ff:17:d1:92:
                    6b:af:bf:8d:34:b3:b3:27:19:ce:74:fd:36:1b:ab:
                    d3:b1:2e:c6:fe:32:39:1e:fb:e7:e2:fb:51:9f:d4:
                    4d:8f:c9:90:54:b9:08:5c:df:f5:9c:ed:96:6b:66:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/7eee271396be12d91db16eae558df87246f5bda1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.0.0/16
                  200.9.165.0-200.9.168.255
                IPv6:
                  2001:1378::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52250

    Signature Algorithm: sha256WithRSAEncryption
         50:02:17:df:92:27:3a:dc:36:b9:0c:16:1b:90:2b:1d:23:24:
         8e:24:90:b0:17:c8:15:95:c5:77:6f:20:40:b1:47:76:1d:8c:
         64:86:02:e9:ee:6b:c2:6e:a4:8e:2d:a3:d7:52:e0:2e:12:4b:
         9a:d0:55:f9:13:41:5e:61:e0:e8:56:92:6f:1f:2b:99:3a:1b:
         31:49:0f:8d:1c:d2:0e:a0:f7:71:44:57:7e:ca:b6:08:81:e1:
         23:26:b4:63:72:5d:f1:25:fb:01:7c:80:51:49:b7:42:c3:21:
         0b:d3:7a:dc:70:65:91:97:cb:9a:d8:b0:8b:f2:99:3c:f6:32:
         de:55:9b:72:07:ef:32:0a:6d:83:f0:73:4e:49:91:a3:4b:12:
         9c:ad:38:0b:62:dc:52:dc:2c:a2:7d:70:63:e7:d0:86:0b:70:
         ef:73:a9:22:0f:5d:de:cf:cc:e6:39:b4:a1:3d:86:86:f3:ce:
         0c:70:67:7f:22:ac:ad:bf:b0:9e:c4:fe:60:e0:8f:2f:78:c3:
         e7:64:a4:1c:61:3d:bc:49:da:8c:ab:29:0e:98:1a:c9:db:35:
         a1:65:02:93:c6:2e:2f:c9:20:9c:a0:f6:30:4c:5b:3e:ea:f4:
         16:94:ab:42:01:62:33:5d:6d:9c:08:92:d3:f1:a4:93:15:2f:
         14:4f:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:26 2024 by rpki-client on console-ams.rpki-client.org