Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
File:                     7f0c6ca567a621ac3630c71d89a326071ce724c8.cer (raw, json)
Hash identifier:          oj9nItapvO+RrGpPpaWyAiAY5Ey+/UszCwd53xN9XBE=
Subject key identifier:   F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCDDB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Apr 2018 14:02:13 +0000
Certificate not after:    Fri 15 Nov 2024 14:57:08 +0000
Subordinate resources:    AS: 266698
                          IP: 45.229.72.0/23
                          IP: 45.230.33.0/24
                          IP: 2803:4d20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16571832 (0xfcddb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 14:02:13 2018 GMT
            Not After : Nov 15 14:57:08 2024 GMT
        Subject: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:ba:1c:c4:ae:2a:69:7a:21:99:77:fd:b5:
                    38:f6:05:c7:9a:9b:27:84:5f:43:78:8e:a5:2b:5e:
                    c4:15:1b:55:41:57:6e:57:f3:70:3f:af:69:9c:8c:
                    63:08:3e:a1:9e:b3:0c:90:81:37:80:ce:f7:dc:c7:
                    77:c9:41:ca:96:2a:3a:99:bd:15:71:f2:fb:c8:2d:
                    8a:3c:a9:50:36:25:6c:f6:12:51:11:3c:ce:a7:8e:
                    98:71:ac:bd:70:b2:74:66:7d:0c:15:d2:19:33:3a:
                    32:ac:8b:5b:b9:a2:5c:ad:eb:7b:f7:1e:bb:48:2e:
                    21:0b:a2:7e:d4:c1:d5:9b:58:a8:fd:7d:46:a1:a4:
                    57:71:61:a1:bc:ec:9e:7b:28:c4:5b:a2:bf:c1:d5:
                    7f:0a:0c:ad:51:65:8d:2e:31:7f:dc:4a:99:88:c6:
                    25:d5:c0:2a:f3:03:b1:83:d8:56:ca:5d:70:22:7a:
                    5c:d4:4b:cd:10:2a:93:e8:10:aa:21:13:36:a7:8b:
                    9c:d3:6d:6d:70:9f:2e:df:92:07:e8:98:04:f7:cd:
                    86:d5:e2:50:8a:04:c6:c9:b5:f5:45:90:65:61:ca:
                    29:d4:0a:0b:f9:6f:22:34:63:64:ae:9b:16:7d:2a:
                    eb:2a:6e:1e:f5:35:81:fd:95:4f:2f:f2:1c:f2:cc:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.72.0/23
                  45.230.33.0/24
                IPv6:
                  2803:4d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266698

    Signature Algorithm: sha256WithRSAEncryption
         9f:01:ca:f3:24:93:f3:b5:50:eb:08:e2:f8:6b:31:47:f8:ec:
         2f:65:6d:a8:2e:72:19:2a:25:ee:1c:62:77:62:59:fc:27:d5:
         30:97:48:a8:26:db:21:6a:84:8a:40:48:e8:7c:fc:69:16:19:
         71:59:74:d8:24:2d:69:3e:0e:15:40:f3:10:91:66:26:2e:07:
         50:06:ea:fd:74:4e:ed:98:e3:9e:3c:b9:8b:22:c4:73:98:82:
         16:7d:19:83:67:c9:22:6e:1c:83:23:b5:a2:11:e8:85:d0:17:
         ec:55:43:06:5f:63:d8:c3:1b:28:ac:03:5b:42:24:31:d4:a6:
         1e:ac:86:bf:72:b3:d8:c1:2e:06:fb:e6:8c:51:e8:6d:d1:d2:
         e4:55:eb:8a:21:5e:c6:12:bd:7f:73:1a:4a:f5:ec:ec:37:22:
         cb:f4:18:6c:c4:42:a5:c5:74:c7:1d:6f:df:39:37:2e:7a:e8:
         67:e9:07:30:d7:e4:38:20:a1:4a:05:f0:22:21:0f:1a:81:fa:
         0f:ff:55:d0:99:78:8c:b8:47:e7:11:ee:e3:88:ba:2c:b0:1c:
         2f:29:c2:ab:db:47:4a:f9:df:a9:4b:7e:e1:34:e9:f1:61:d7:
         9c:f3:86:8b:c8:55:45:d7:b7:41:5b:02:08:a4:6e:a7:89:94:
         9e:fa:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:11 2024 by rpki-client on console-fra.rpki-client.org