Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.cer
File:                     905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.cer (raw, json)
Hash identifier:          oUmqCFv0HtUtzbGn/inQWENKxAKRyKSWzzY7EppqQbg=
Subject key identifier:   00:D4:73:DE:A8:B4:66:E1:E6:2D:D6:9E:14:FF:16:1B:6B:00:09:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102BE45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Apr 2021 17:01:02 +0000
Certificate not after:    Thu 02 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 27928
                          IP: 190.123.224.0/20
                          IP: 201.221.224.0/19
                          IP: 2803:ae40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16956997 (0x102be45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 22 17:01:02 2021 GMT
            Not After : Jan  2 14:00:00 2025 GMT
        Subject: CN=905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:cd:62:99:08:54:d6:6f:78:05:16:54:bf:
                    bd:3b:73:0b:d9:4b:b8:8f:9e:01:7c:ce:1e:da:66:
                    7a:a7:c2:fa:89:3d:48:9e:44:64:ab:08:8d:cc:e2:
                    66:a7:88:32:9d:fd:72:17:c2:03:58:77:13:21:0e:
                    b1:3d:6a:0e:7a:da:93:0c:43:42:4c:85:e2:9b:02:
                    2d:54:6f:2c:15:fb:5a:2b:cf:cf:e7:fd:af:2b:77:
                    af:22:e5:04:51:d4:30:f3:11:31:72:1d:13:3a:a7:
                    5b:4d:e3:6a:c4:94:2f:ce:15:f2:27:03:4f:de:4a:
                    38:c3:96:79:e7:65:52:6b:a5:6b:f9:8c:b1:4f:a1:
                    15:b1:ec:0b:ca:b3:db:93:cd:76:c5:ea:58:3a:39:
                    a4:fd:e8:45:3d:c6:dc:c6:78:14:c5:3e:86:68:dc:
                    16:26:96:b8:d8:5a:45:35:ce:5d:27:03:9c:d3:35:
                    78:c9:b8:6a:b0:8d:14:1d:13:b5:cf:48:ad:25:47:
                    99:ee:d2:b1:31:32:5f:d8:97:70:62:c2:00:7a:98:
                    fa:ff:31:8c:96:11:fb:9f:5c:b2:87:36:7f:92:8e:
                    51:7e:44:5a:c1:6b:64:13:bc:e6:c4:e3:c0:59:19:
                    15:23:ba:81:80:0b:6e:2a:33:d2:d6:fc:0d:22:e4:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:73:DE:A8:B4:66:E1:E6:2D:D6:9E:14:FF:16:1B:6B:00:09:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.224.0/20
                  201.221.224.0/19
                IPv6:
                  2803:ae40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27928

    Signature Algorithm: sha256WithRSAEncryption
         88:21:0a:de:11:41:0b:ad:b4:cc:d4:6a:40:1a:92:f4:84:8c:
         af:94:a5:2f:82:7b:5f:d7:28:77:c3:7a:2a:22:71:c8:39:4a:
         dd:7d:04:99:74:4b:6f:64:16:df:78:06:8a:2e:a0:6e:1d:13:
         64:b6:7c:35:6d:52:c5:a4:2c:d9:24:2d:2c:6c:2c:b4:6f:85:
         28:60:84:a8:e5:cd:88:a0:15:ad:8e:ed:a5:31:39:ec:ff:4f:
         45:a8:8a:bb:80:1c:c2:ca:0d:45:3b:98:47:4e:96:6c:eb:80:
         bf:ff:ee:6d:46:71:a0:d3:c2:57:aa:ef:e0:89:b9:2f:6d:28:
         f2:ee:1d:a7:90:8e:d4:f1:83:08:fb:c2:41:5c:05:ce:9c:b3:
         c8:47:9c:02:f0:50:14:c8:bf:9c:bb:28:01:88:c6:dc:fd:6f:
         a2:96:f9:5e:3a:7a:9f:9d:37:a9:4a:f5:ba:e1:58:dc:5a:e8:
         7c:b4:de:c6:70:45:20:89:34:a9:dd:13:72:c9:68:dc:f6:84:
         38:f2:6f:eb:0f:fb:10:2b:1b:94:c7:e5:a1:a7:f1:79:7b:a2:
         d5:9b:a1:ec:39:7b:82:0e:98:a8:ab:a2:91:1c:9d:19:c1:36:
         6c:e2:3d:dd:3d:dd:3c:12:a6:d0:cc:c1:28:d3:4d:e0:9e:9d:
         43:47:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:17 2024 by rpki-client on console-fra.rpki-client.org