Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
File:                     8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer (raw, json)
Hash identifier:          Gbp2l6BhpfgifM15yO3lsNkCm1aBNdAmyCl8I9mdLT0=
Subject key identifier:   AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB04D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Tue 29 Oct 2024 04:00:00 +0000
Subordinate resources:    AS: 28027
                          IP: 192.188.59.0/24
                          IP: 200.9.176.0/24
                          IP: 200.10.147.0 -- 200.10.151.255
                          IP: 200.126.0.0/19
                          IP: 2801:0:20::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16450772 (0xfb04d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Oct 29 04:00:00 2024 GMT
        Subject: CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:a1:30:ea:51:97:e7:05:57:b3:7d:24:95:
                    e6:ff:11:bf:63:bb:76:a4:78:5b:9f:97:78:b9:4f:
                    c9:7b:0d:72:10:5d:df:5d:3b:fd:ef:a5:d3:f6:21:
                    1c:f2:68:77:72:97:e4:d9:2d:35:2d:a6:7d:5f:dd:
                    72:ba:96:f1:0f:53:79:94:5e:18:f6:c3:ab:b4:32:
                    df:79:21:0c:38:3b:42:13:c7:36:ea:87:72:e9:47:
                    b4:6e:b3:d1:1a:e5:bd:87:df:75:a9:8e:77:cc:5d:
                    a2:db:cc:ca:d8:f1:f1:02:77:5a:fe:55:60:51:0d:
                    b1:ab:08:2d:67:eb:44:27:f9:2a:6d:c4:fc:e2:d1:
                    72:be:bf:5b:d8:0c:52:62:1e:45:53:2f:95:d8:55:
                    b2:23:72:66:31:d3:de:0e:ab:40:f1:a8:d5:09:65:
                    d8:d5:18:21:5c:d7:cb:2e:a6:8c:4c:ef:96:3c:a5:
                    d5:74:0b:4b:2f:94:e7:c0:35:70:89:ed:20:88:39:
                    b1:2f:27:aa:c2:00:81:7e:7c:5e:64:42:ea:f1:13:
                    1d:45:b7:0b:6e:d9:8e:3b:df:80:1b:ed:89:36:ad:
                    90:f9:26:cd:5b:08:97:87:46:39:92:b2:7b:e8:e4:
                    f2:75:18:3f:27:f8:84:7d:c7:48:26:36:7f:85:b3:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.59.0/24
                  200.9.176.0/24
                  200.10.147.0-200.10.151.255
                  200.126.0.0/19
                IPv6:
                  2801:0:20::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28027

    Signature Algorithm: sha256WithRSAEncryption
         18:45:00:a8:88:1d:78:35:fa:2b:8f:a9:d4:65:a7:e8:80:2d:
         af:f6:ee:68:75:65:dd:2c:fa:ca:b1:0f:43:92:a5:4b:72:f5:
         b5:96:8f:31:89:7c:9b:1b:27:27:1e:c2:0a:ce:d4:b2:29:ee:
         da:53:ca:2f:76:27:86:1e:92:ea:de:b9:d4:ce:ec:2e:b5:2b:
         6b:3a:42:90:b8:13:73:86:ae:b5:35:6a:38:45:e3:13:b0:52:
         33:e2:69:c5:d1:c9:f3:27:57:7b:cb:f3:48:5a:74:f9:e9:9f:
         87:b9:11:d1:28:55:d8:1a:98:5b:df:ce:e8:bb:5f:62:fa:9d:
         0d:de:0a:2e:fe:0f:ba:a0:e6:a3:54:8e:0d:f6:ac:42:ec:34:
         0c:99:ef:1c:22:0e:4f:fc:21:79:d4:96:b6:9d:87:22:ba:be:
         50:e4:eb:89:0c:f9:c3:39:a7:84:4b:cc:57:d5:8d:a9:5e:63:
         8a:78:5b:21:20:a2:5f:88:57:e2:75:65:2a:b1:c7:a7:5b:2c:
         79:b4:44:41:24:3d:ce:1a:77:c7:6a:e5:01:67:ca:45:20:44:
         2d:ad:17:28:36:7e:bc:05:d7:e5:e5:c9:36:51:f5:f6:12:2d:
         f3:d3:e0:ab:a3:62:09:6b:12:2b:64:7e:69:e9:b0:72:c3:d3:
         30:15:8f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:34 2024 by rpki-client on console-ams.rpki-client.org