Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
File:                     9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer (raw, json)
Hash identifier:          LqN3GK0tjkk1D/C4wYGvNTBFSTmWNUku2zZs3FSRhWM=
Subject key identifier:   DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA9C0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:23 +0000
Certificate not after:    Thu 24 Oct 2024 04:00:00 +0000
Subordinate resources:    IP: 190.109.192.0/19
                          IP: 191.103.64.0/19
                          IP: 2803:3a80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16423949 (0xfa9c0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:23 2017 GMT
            Not After : Oct 24 04:00:00 2024 GMT
        Subject: CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:9d:40:5f:e5:69:48:91:c2:f1:b1:82:db:
                    87:f1:13:88:50:27:46:8d:c2:32:72:20:2e:c3:00:
                    08:3e:56:6d:38:1e:8d:f8:5f:08:1d:ad:cb:7f:8e:
                    1e:6f:d2:2b:40:36:25:94:5d:09:33:a3:54:2c:08:
                    61:70:52:2e:26:1e:d1:a0:4d:28:d9:b2:63:ae:1f:
                    85:a3:fb:56:ec:98:c9:36:9e:b1:26:16:4d:8c:78:
                    bf:e9:1b:21:84:ed:74:05:e2:41:c5:f1:43:4d:c3:
                    88:3b:a1:7a:92:d6:62:6e:b4:9d:6d:03:7f:58:9f:
                    a5:5b:e0:c5:a0:e8:be:dc:06:c9:9c:14:3d:e9:33:
                    f9:e9:50:7f:71:41:f7:a7:74:23:8d:6c:01:5d:53:
                    f5:c4:ba:96:b2:d0:9a:8f:19:4d:d4:aa:91:f4:30:
                    f1:cd:90:53:46:2d:d5:c0:6c:08:5f:68:d4:af:4d:
                    8c:c8:9a:47:d6:3f:36:47:55:b6:cf:cb:aa:0e:fd:
                    45:16:cd:84:7e:fa:c0:dd:55:f9:ad:25:ce:54:a9:
                    91:c9:20:3e:63:cb:d2:92:a5:a8:12:ab:b6:f9:46:
                    e0:25:79:5e:ec:e9:cf:d6:26:67:5b:3c:78:4f:97:
                    c4:3f:dc:47:60:b7:4d:1b:5d:59:1f:eb:52:81:40:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.192.0/19
                  191.103.64.0/19
                IPv6:
                  2803:3a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:0c:40:15:8f:4d:f0:c7:57:04:86:be:ed:2c:fa:24:4e:
         02:8a:ec:c6:56:4f:81:39:e7:a3:28:bc:12:30:fd:c2:b3:a0:
         59:a5:40:12:f4:4c:f7:ed:c5:64:6f:4e:55:bc:36:6e:59:93:
         f1:c2:27:24:c5:04:6b:1b:69:5c:08:31:71:5b:80:e1:77:fd:
         89:63:fa:ae:84:1b:4b:eb:3b:38:e5:ee:44:2f:5b:8b:58:7c:
         ea:fb:9c:6a:9d:c0:3d:a6:bc:15:62:d8:03:05:4f:20:b3:58:
         7d:f4:2f:87:58:75:3b:bc:72:38:c9:64:bf:ec:02:34:ff:a0:
         83:a6:6e:f1:69:f9:5f:e7:fb:fc:4b:16:f2:5b:41:80:dd:66:
         b8:b2:d9:70:6d:7f:c8:b2:7c:70:c7:18:97:57:1c:a3:d7:23:
         51:d3:25:61:78:38:41:d0:b1:c7:07:f8:e4:3d:26:34:9b:df:
         a4:b8:a3:9b:6f:af:e7:9e:95:f6:47:02:5a:1b:5c:f4:c1:5d:
         1b:61:9b:89:d7:82:72:5d:fb:99:c3:6f:c9:77:43:3f:11:6b:
         91:95:ed:a7:a9:1c:ac:87:9c:29:7f:d0:38:7a:66:87:e8:e3:
         b5:53:85:5b:a0:77:f7:00:19:87:59:6d:de:7c:2f:59:b9:f2:
         fa:1a:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:51 2024 by rpki-client on console-fra.rpki-client.org