Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7eee271396be12d91db16eae558df87246f5bda1.cer
File:                     7eee271396be12d91db16eae558df87246f5bda1.cer (raw, json)
Hash identifier:          QdVpeC9lk1dGnHKKEUhHeDpQfB/PCH2QCl/1VWkwu80=
Subject key identifier:   91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3013D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/7eee271396be12d91db16eae558df87246f5bda1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Wed 01 May 2024 15:00:00 +0000
Subordinate resources:    AS: 52250
                          IP: 166.114.0.0/16
                          IP: 200.9.165.0 -- 200.9.168.255
                          IP: 2001:1378::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14876989 (0xe3013d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : May  1 15:00:00 2024 GMT
        Subject: CN=7eee271396be12d91db16eae558df87246f5bda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:93:2f:29:be:8a:71:52:94:00:61:6c:3b:
                    28:36:27:0d:79:87:53:6f:f6:36:be:01:c1:dc:82:
                    7a:c4:85:f9:64:e2:fc:f4:2c:da:7c:00:de:e8:96:
                    16:e2:4b:90:0f:5f:a4:b1:98:e0:3e:45:da:7d:75:
                    d8:47:6c:43:66:57:63:01:06:e6:3b:43:ea:30:55:
                    f7:34:c2:3c:67:b9:c5:ec:7a:ae:a2:2a:f7:12:0a:
                    1f:c6:4d:9c:a2:8c:1b:d9:e3:c9:27:63:4f:e1:a0:
                    eb:e6:76:d8:01:ad:9a:b6:e1:d4:47:2c:4a:4e:65:
                    95:01:96:ab:71:bb:8c:ee:94:0e:1f:0b:a7:65:47:
                    13:b3:29:37:0b:26:d6:0f:76:6a:da:33:12:2b:85:
                    d7:d3:cb:c5:a6:4a:da:82:f9:07:a8:16:e6:a7:99:
                    47:0b:2f:0e:38:2a:97:8e:4f:6f:57:fd:7c:33:38:
                    e6:c1:c5:c2:dd:e0:6c:cf:4f:2d:be:cf:72:99:c8:
                    d4:cb:bb:b7:2d:c6:ac:71:db:64:4d:ff:17:d1:92:
                    6b:af:bf:8d:34:b3:b3:27:19:ce:74:fd:36:1b:ab:
                    d3:b1:2e:c6:fe:32:39:1e:fb:e7:e2:fb:51:9f:d4:
                    4d:8f:c9:90:54:b9:08:5c:df:f5:9c:ed:96:6b:66:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/7eee271396be12d91db16eae558df87246f5bda1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.0.0/16
                  200.9.165.0-200.9.168.255
                IPv6:
                  2001:1378::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52250

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:4f:2b:d4:c0:98:46:d6:c8:44:65:0e:25:1f:78:10:84:
         ff:6c:93:75:8b:95:b5:cd:cc:05:6b:37:4a:58:6b:80:1d:11:
         ea:66:6d:0a:27:f1:51:16:ed:0d:7d:11:93:39:bf:7a:f9:da:
         d3:e4:d0:54:50:20:da:e2:34:d0:60:74:bd:99:5f:73:a3:16:
         ac:c5:2b:83:97:46:61:25:2d:1f:57:4f:b2:0d:f1:78:ef:cc:
         e3:7d:d0:f8:78:fa:e4:44:a3:fb:7b:32:d0:da:4d:79:71:f8:
         50:00:ee:8f:74:20:20:98:e9:4d:88:14:85:ee:bf:9f:34:bb:
         9a:d3:42:f2:32:52:24:66:3a:2e:a7:20:f1:6a:bc:67:6c:aa:
         f0:97:3e:81:f3:56:91:d6:81:60:d4:b2:71:26:2b:d6:31:ab:
         26:e4:8f:55:59:f0:ce:61:f8:bd:75:d1:7a:34:0a:6f:4a:dc:
         4d:1a:83:15:e3:8d:a1:a1:f2:cd:2e:da:45:80:5b:13:b7:eb:
         78:14:b9:81:ef:22:09:cb:77:15:c5:b7:e0:3a:51:50:6a:c7:
         eb:5b:f5:5e:a4:81:1b:f6:71:a8:77:4d:3e:c2:4e:0c:0e:ab:
         11:61:c2:e3:48:6a:d5:9f:61:18:16:8e:49:27:b0:72:39:f2:
         ee:32:05:17
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIEAOMBPTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0M1oXDTI0MDUwMTE1MDAw
MFowMzExMC8GA1UEAxMoN2VlZTI3MTM5NmJlMTJkOTFkYjE2ZWFlNTU4ZGY4NzI0
NmY1YmRhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOMtky8pvopx
UpQAYWw7KDYnDXmHU2/2Nr4BwdyCesSF+WTi/PQs2nwA3uiWFuJLkA9fpLGY4D5F
2n112EdsQ2ZXYwEG5jtD6jBV9zTCPGe5xex6rqIq9xIKH8ZNnKKMG9njySdjT+Gg
6+Z22AGtmrbh1EcsSk5llQGWq3G7jO6UDh8Lp2VHE7MpNwsm1g92atozEiuF19PL
xaZK2oL5B6gW5qeZRwsvDjgql45Pb1f9fDM45sHFwt3gbM9PLb7PcpnI1Mu7ty3G
rHHbZE3/F9GSa6+/jTSzsycZznT9Nhur07Euxv4yOR775+L7UZ/UTY/JkFS5CFzf
9Zztlmtm65kCAwEAAaOCAxYwggMSMB0GA1UdDgQWBBSRckiZ7U20iw8b4AhmpFMV
9mZLoDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMjY5YTZhNC04Nzdm
LTQzOWUtYWMzZS04NzY2YzE3OGY5NDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDI2OWE2YTQtODc3Zi00
MzllLWFjM2UtODc2NmMxNzhmOTQxLzdlZWUyNzEzOTZiZTEyZDkxZGIxNmVhZTU1
OGRmODcyNDZmNWJkYTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowGQQCAAEwEwMDAKZyMAwDBADICaUDBADICagwDQQC
AAIwBwMFACABE3gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMwaMA0GCSqGSIb3
DQEBCwUAA4IBAQBcx08r1MCYRtbIRGUOJR94EIT/bJN1i5W1zcwFazdKWGuAHRHq
Zm0KJ/FRFu0NfRGTOb96+drT5NBUUCDa4jTQYHS9mV9zoxasxSuDl0ZhJS0fV0+y
DfF478zjfdD4ePrkRKP7ezLQ2k15cfhQAO6PdCAgmOlNiBSF7r+fNLua00LyMlIk
ZjoupyDxarxnbKrwlz6B81aR1oFg1LJxJivWMasm5I9VWfDOYfi9ddF6NApvStxN
GoMV442hofLNLtpFgFsTt+t4FLmB7yIJy3cVxbfgOlFQasfrW/VepIEb9nGod00+
wk4MDqsRYcLjSGrVn2EYFo5JJ7ByOfLuMgUX
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:41 2024 by rpki-client on console-fra.rpki-client.org