Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.cer
File:                     9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.cer (raw, json)
Hash identifier:          yyrQ0tjD0fJUl2nEWNhi6SRaNK357vup/SOHbtT2tZw=
Subject key identifier:   37:05:6F:25:93:D5:B4:8C:14:A9:67:F1:B9:AA:CF:3F:94:1D:E7:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103629A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Fri 10 Jan 2025 19:24:41 +0000
Subordinate resources:    AS: 265673
                          IP: 45.4.100.0/22
                          IP: 2803:dec0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16999066 (0x103629a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Jan 10 19:24:41 2025 GMT
        Subject: CN=9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:98:bc:54:7f:92:d2:83:08:f5:dc:0a:2e:
                    eb:e8:b1:a7:8e:1e:06:e9:6d:1f:f6:28:60:1a:61:
                    31:33:4f:a8:d3:f0:2d:1a:7c:5f:00:d5:9f:66:87:
                    19:bb:e8:c2:c5:e1:35:a7:2e:e0:04:b9:4b:16:87:
                    58:41:ca:dc:11:73:aa:a0:f0:6e:f8:a5:20:1d:d6:
                    c0:58:df:7e:1f:13:98:90:c1:a3:c9:e5:32:9d:0c:
                    ad:a1:23:22:51:ba:80:f5:f1:05:79:60:4c:97:f1:
                    b3:c8:95:07:d6:7c:8f:17:7c:6c:18:dc:d5:4b:a7:
                    19:54:b9:29:80:b8:f4:77:33:bc:8c:33:0c:9f:e0:
                    31:52:c4:6e:28:8e:c5:48:2a:1f:ab:45:7b:1c:d1:
                    04:c3:55:4a:09:99:ee:f6:ac:ec:6a:87:aa:cd:29:
                    af:bc:9c:f9:2b:93:9c:58:5e:bb:8f:71:ab:98:1c:
                    6e:0d:ea:ac:ca:0c:60:bd:16:ed:2b:8f:91:99:1a:
                    70:ad:42:d1:38:01:ad:bb:a2:69:79:f9:a8:0d:53:
                    02:09:a7:cd:88:09:bf:36:fa:eb:b3:bb:35:f4:c0:
                    a9:9e:df:6f:4d:66:13:75:d6:b8:4c:5e:0e:22:c9:
                    ea:ab:8b:87:15:dd:b4:d8:91:73:98:27:a3:54:4f:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:6F:25:93:D5:B4:8C:14:A9:67:F1:B9:AA:CF:3F:94:1D:E7:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94ea7d96-e9fa-421c-a4f0-a83dcbe0602b/9f3cb8c2f5a1e802d4d66e06b1d4140b6600581a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.100.0/22
                IPv6:
                  2803:dec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265673

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:ef:68:34:2f:11:8e:c3:3c:53:7b:0f:99:2a:90:50:16:
         e0:7b:41:90:4f:c1:c3:30:ca:a2:42:ce:91:fc:ac:a6:b2:99:
         21:14:f9:4f:7d:47:59:d2:3e:e4:48:62:75:af:2d:c5:3b:09:
         3c:a9:8b:54:f0:b8:93:9d:0f:83:f8:8d:38:3b:e6:21:2b:9d:
         cf:ae:14:aa:31:6d:6a:1d:07:00:0a:cb:87:c8:83:64:e4:d2:
         b8:4e:53:7d:19:db:dc:9e:ef:09:9b:9f:af:94:0a:bb:1e:ec:
         58:41:18:16:85:02:a7:eb:fc:c0:ec:06:8d:c0:38:24:55:77:
         12:a2:a1:b3:21:c6:46:78:71:b3:83:c8:20:c2:4b:63:4d:10:
         8b:bf:e6:ce:8f:b8:61:9b:0a:63:e4:b6:21:9e:1f:67:53:bc:
         43:c0:cf:92:8b:45:e7:08:7c:51:b4:7e:d0:0a:09:7f:ec:f8:
         8a:f4:65:df:3d:5a:54:7b:35:2a:16:d9:12:d7:8c:f9:20:c0:
         08:6d:20:fb:8b:03:f2:a2:b1:02:0f:29:76:f7:60:db:29:75:
         65:d3:60:07:1f:6a:0e:71:89:8b:73:4c:3c:b2:18:a4:da:2f:
         f4:32:76:b8:ec:3f:dc:d8:c0:c1:72:54:8b:cf:8b:c7:f5:d5:
         5f:cf:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:14 2024 by rpki-client on console-ams.rpki-client.org