Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d85ce0d434273e623cb46add718a5d62e967fd1.cer
File:                     9d85ce0d434273e623cb46add718a5d62e967fd1.cer (raw, json)
Hash identifier:          IlWF8iJHPv0j9L/xJwuSEeREhSAMJPcZhm90Pf9rb2c=
Subject key identifier:   ED:8D:8E:6D:4B:82:4C:B3:59:AC:E3:13:E5:A0:AD:3F:01:A1:E9:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106C75A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/9d85ce0d434273e623cb46add718a5d62e967fd1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:18 +0000
Certificate not after:    Sat 15 Feb 2025 05:00:00 +0000
Subordinate resources:    AS: 263221
                          IP: 161.0.176.0/21
                          IP: 2803:a680::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17221466 (0x106c75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:18 2017 GMT
            Not After : Feb 15 05:00:00 2025 GMT
        Subject: CN=9d85ce0d434273e623cb46add718a5d62e967fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:79:49:54:6c:b5:94:c0:4f:69:16:68:d8:
                    b6:17:d5:42:41:ce:5e:bc:29:a8:67:6c:67:59:b5:
                    77:5c:bf:8f:05:7f:e8:86:5e:04:72:57:e7:70:46:
                    40:d4:57:25:33:60:92:5b:f4:9d:0e:47:8d:58:f1:
                    17:a6:f0:37:62:7d:57:9e:e5:3a:67:69:36:85:c9:
                    ef:4a:3b:b6:20:d8:7c:a4:77:c0:9c:b0:a7:8f:36:
                    50:88:8a:35:c2:d8:12:5d:6a:f2:c4:2a:ee:8f:f6:
                    58:51:22:bb:13:84:3a:f5:39:6e:db:4d:87:7f:97:
                    af:51:ed:b3:4e:47:4f:cd:c4:e5:5f:e4:e5:94:b7:
                    da:d1:ed:76:d9:0e:60:1c:51:a9:b9:8c:c0:76:73:
                    de:3c:cd:4c:a9:4a:3d:78:a7:7c:8c:ea:ce:26:84:
                    59:74:7f:56:15:ad:c0:c7:34:11:b6:e5:b9:0d:7f:
                    50:96:a3:b9:a9:3a:b8:f8:74:ab:34:89:ee:cc:9e:
                    88:f8:30:6f:0e:11:6c:92:06:b4:f7:e9:37:f1:9c:
                    40:51:54:1d:d9:65:d3:aa:2a:23:05:56:76:1e:f5:
                    31:0b:96:ab:65:23:76:02:d2:32:2a:a7:03:d3:26:
                    05:68:57:9f:66:c9:fc:d1:83:c8:84:3c:ff:e8:41:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8D:8E:6D:4B:82:4C:B3:59:AC:E3:13:E5:A0:AD:3F:01:A1:E9:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/9d85ce0d434273e623cb46add718a5d62e967fd1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.176.0/21
                IPv6:
                  2803:a680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263221

    Signature Algorithm: sha256WithRSAEncryption
         ab:01:9a:4e:e6:93:9e:ef:73:7a:d8:7c:f2:15:d1:3b:fe:66:
         46:8e:5d:55:97:c2:0a:fe:66:3b:8d:05:1c:5a:de:88:d5:88:
         3e:36:7e:46:bb:c9:95:5d:be:94:1f:8b:f0:99:c8:3b:86:2a:
         14:c8:b4:46:c5:58:1a:9b:92:3e:79:c7:43:0f:91:19:2d:c9:
         77:b1:8b:39:86:62:36:8e:79:8e:c9:51:4f:d7:35:be:c4:9e:
         82:a3:e8:90:d3:2e:9c:75:8c:23:6e:70:76:7c:b5:ed:3b:2d:
         f5:b9:40:52:fa:ec:5e:89:cd:f7:a7:b2:94:c3:c5:67:52:b1:
         93:3b:e2:28:f9:6f:1e:9a:86:a6:22:1d:88:bd:6e:d2:14:39:
         ab:8c:b9:3c:0d:60:c5:49:04:79:8b:b7:cb:f7:24:f8:94:0e:
         64:43:e3:08:de:70:d7:b1:8b:7b:95:8b:d9:c1:5c:b2:44:8b:
         c4:27:2f:60:7c:07:f1:df:41:b0:ce:2b:64:50:d3:1f:64:76:
         9c:cd:57:da:9e:54:fd:8c:a2:38:77:8e:68:ad:e6:f8:93:db:
         7c:8f:ab:92:58:a1:22:9b:28:18:a7:f8:34:64:c3:95:2f:e3:
         c2:d2:b6:40:d1:3e:89:7f:3f:60:72:e2:39:9b:c1:fc:c7:39:
         48:22:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:19:30 2024 by rpki-client on console-fra.rpki-client.org