Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e484663259840d5acba35213ea1900c2552e296.cer
File:                     8e484663259840d5acba35213ea1900c2552e296.cer (raw, json)
Hash identifier:          o5G1lEERNwq0uXt7QJzbp/F0d93bBq1UHx6yNrmgYTo=
Subject key identifier:   8E:50:F3:AC:88:82:C4:81:93:EC:FA:C0:DB:F3:8B:6B:D4:86:68:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C0D99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b80f9bac-98a8-409c-9384-de97271ac5c5/8e484663259840d5acba35213ea1900c2552e296.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b80f9bac-98a8-409c-9384-de97271ac5c5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 30 May 2020 02:15:16 +0000
Certificate not after:    Sat 29 Mar 2025 18:24:56 +0000
Subordinate resources:    AS: 270013
                          IP: 200.14.81.0/24
                          IP: 2803:29e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17567129 (0x10c0d99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 02:15:16 2020 GMT
            Not After : Mar 29 18:24:56 2025 GMT
        Subject: CN=8e484663259840d5acba35213ea1900c2552e296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:5d:e1:c5:7e:4a:0e:3d:39:83:51:57:e4:
                    d7:c8:da:35:98:e7:6b:ac:cb:27:0b:34:88:c1:43:
                    6d:19:08:e9:57:34:65:76:b9:5b:1b:75:75:14:6b:
                    10:48:de:e2:42:d9:fc:c0:23:9a:a1:fe:a5:c4:50:
                    5e:8e:17:9c:e3:cc:2f:bd:62:f6:2a:2e:c9:75:4c:
                    bc:05:10:ac:61:51:28:25:a6:56:1f:8e:3e:45:1f:
                    ee:19:6d:c9:65:b9:c5:77:e7:d3:7f:4a:b5:cd:01:
                    fe:39:8e:e1:73:c0:45:2c:16:17:73:d6:8e:22:c0:
                    df:2d:99:18:8d:5f:f4:d8:2e:b2:b5:9e:65:12:c8:
                    4d:df:38:83:4f:f4:21:4d:a9:f7:cf:40:85:63:4d:
                    0b:49:13:b9:ca:9e:69:26:1d:47:1c:49:5c:c5:19:
                    f2:f7:84:cb:5b:a0:e9:b4:a4:74:1e:a4:ee:73:01:
                    d1:14:9f:1f:4a:8b:3a:78:f1:21:ca:12:22:40:c3:
                    f1:88:62:5e:70:c2:73:d0:92:cf:2e:0d:34:06:ad:
                    35:ea:49:6c:3a:30:6b:71:91:45:b9:a1:00:f6:d2:
                    fd:41:fc:6f:30:36:c2:3b:c8:fb:f0:b1:c4:fd:ce:
                    86:68:04:5f:13:ad:ad:b9:89:c8:db:32:7c:85:5f:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:50:F3:AC:88:82:C4:81:93:EC:FA:C0:DB:F3:8B:6B:D4:86:68:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b80f9bac-98a8-409c-9384-de97271ac5c5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b80f9bac-98a8-409c-9384-de97271ac5c5/8e484663259840d5acba35213ea1900c2552e296.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.81.0/24
                IPv6:
                  2803:29e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270013

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:99:e5:93:b1:e8:c9:b1:78:f3:a6:fa:38:a4:20:a1:ff:
         a8:22:52:bc:b1:8c:0c:b4:0f:b8:aa:be:92:5c:cf:6c:ec:70:
         f9:00:a0:8f:3c:7a:31:30:a5:02:66:3f:47:ea:c1:15:6c:d4:
         aa:2a:64:65:10:ea:b4:9b:4b:24:2c:62:28:96:85:80:b8:8e:
         dc:43:72:2d:38:b5:ce:17:f0:ea:0b:78:96:89:61:dd:ff:bd:
         b6:2b:0d:c7:ac:c2:d8:b7:16:b3:ff:ae:69:0a:7f:14:39:a9:
         e9:d4:48:50:40:a4:99:ec:8b:90:f4:e0:fa:cc:0d:6d:37:09:
         04:57:cd:e5:c7:ae:7f:dd:99:36:10:3d:68:a0:58:ed:41:fb:
         1d:a0:1b:a6:61:b7:67:c9:59:50:80:72:5e:39:e1:b9:32:3e:
         3a:63:56:d8:50:49:9a:ea:22:f1:80:fe:63:49:49:a1:fa:e9:
         fd:3b:02:76:15:72:46:c3:ab:17:27:42:7c:e0:9d:2b:c4:69:
         df:af:46:ad:0c:c0:8e:82:e4:07:18:29:57:10:48:9f:be:17:
         ab:81:c6:db:07:d5:56:05:70:14:bb:b0:43:13:d2:4d:21:56:
         91:48:d2:fe:f6:ec:8c:04:ef:3a:fe:47:f8:92:b3:3d:ec:6f:
         84:bc:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:50:17 2024 by rpki-client on console-ams.rpki-client.org