Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f45367d50a2e9c323a7bba4f6b1e32438653800.cer
File:                     7f45367d50a2e9c323a7bba4f6b1e32438653800.cer (raw, json)
Hash identifier:          d6YuYpmIuS7BMqTTDsnl4B8s9dtVZqB1atBzs5fvB0Y=
Subject key identifier:   8C:9E:0A:AA:23:D3:52:D6:CA:1F:FE:62:3C:80:65:CD:99:81:92:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECA02A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8934e6e5-53aa-414e-8f0e-754c785691f0/7f45367d50a2e9c323a7bba4f6b1e32438653800.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8934e6e5-53aa-414e-8f0e-754c785691f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Jan 2021 15:17:17 +0000
Certificate not after:    Sun 07 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 271789
                          IP: 179.42.78.0/23
                          IP: 2803:3fe0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15507498 (0xeca02a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 21 15:17:17 2021 GMT
            Not After : Jul  7 06:00:00 2024 GMT
        Subject: CN=7f45367d50a2e9c323a7bba4f6b1e32438653800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:cb:f0:41:25:ee:f0:9b:ab:63:0f:a4:36:
                    3c:5d:ae:91:dc:e0:81:6f:f4:1d:9e:3e:7d:09:73:
                    0e:41:a6:03:97:fc:63:61:9e:01:1f:e8:a6:c0:7e:
                    19:35:48:00:ac:45:b9:ea:cc:da:5b:cf:b9:12:22:
                    2d:8b:a1:12:db:76:de:75:c5:e8:e0:6f:d5:66:e0:
                    97:9c:de:d2:0a:81:cc:dd:5e:bf:1d:73:28:b9:f6:
                    bb:63:56:ce:d3:d7:88:b8:8f:ab:a3:fd:00:74:97:
                    83:45:ef:77:52:3e:fa:d8:d3:ff:6d:bb:06:80:ca:
                    41:9c:d4:e1:0a:4c:e1:dc:ad:49:26:64:66:42:db:
                    2e:c8:bb:20:9a:7a:60:21:5f:34:d5:be:13:a3:47:
                    57:c2:42:10:65:f8:5e:a3:2f:86:cd:87:ec:cc:32:
                    08:37:e2:5f:2d:8f:a9:c8:59:23:56:44:a1:82:8b:
                    6a:27:81:53:08:9a:ff:9b:c4:63:e6:d0:a8:3a:e1:
                    24:0b:e6:d0:a8:9f:fa:69:f0:35:36:2b:90:df:0b:
                    00:fd:14:96:bf:e0:4b:30:0d:75:4a:c4:39:a0:ad:
                    a0:86:02:c8:91:1a:df:8e:fd:3e:da:a5:9e:4a:58:
                    c6:30:b4:ef:84:18:66:d7:92:5c:4e:1e:d7:c7:d6:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9E:0A:AA:23:D3:52:D6:CA:1F:FE:62:3C:80:65:CD:99:81:92:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8934e6e5-53aa-414e-8f0e-754c785691f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8934e6e5-53aa-414e-8f0e-754c785691f0/7f45367d50a2e9c323a7bba4f6b1e32438653800.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.78.0/23
                IPv6:
                  2803:3fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271789

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:70:5d:05:c3:c2:49:02:48:db:00:8c:3a:7f:00:ab:10:
         78:b7:6f:cc:48:b0:82:84:6a:68:c5:a6:8d:95:fa:e3:a0:ce:
         c2:92:d7:64:1e:f4:74:61:47:f7:8d:96:43:2d:dc:95:ff:3b:
         ec:8b:45:ea:e1:0b:85:7f:aa:ed:cc:e1:fd:86:ca:0e:16:22:
         aa:25:12:07:88:a2:f3:5b:bf:f8:61:00:38:93:06:a6:08:04:
         dd:e9:53:e5:09:ea:81:a9:12:e9:53:82:8b:da:27:ee:3c:df:
         ce:20:ff:64:82:c6:39:b0:8d:c1:69:bd:5e:72:c0:af:cf:bd:
         dc:01:5f:9f:73:15:31:e8:db:0b:ba:41:1c:eb:be:3d:c9:35:
         89:e0:cc:11:16:92:b9:22:44:8a:37:c3:e0:4f:a6:ec:ea:2e:
         ce:05:7c:24:b7:e0:97:9e:cd:1b:cb:c0:8b:e2:4e:72:10:b6:
         38:b8:6e:b5:2d:76:dd:99:ba:d8:2c:3a:89:46:ea:6a:dd:55:
         65:c5:bf:42:16:3b:f3:47:2f:f1:b2:c3:6f:99:46:a4:e7:d5:
         1c:d6:c4:92:71:8b:f9:78:55:8a:11:9c:23:ad:fc:d9:96:b2:
         3a:93:c6:ea:82:2b:25:da:8a:6e:91:74:a3:6c:6f:61:3f:86:
         ea:4b:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:57:01 2024 by rpki-client on console-fra.rpki-client.org