Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
File:                     a79f7c916be3a1ea7251327afacd5a877554edc2.cer (raw, json)
Hash identifier:          nuhmAB5y8LxKxYqptQ11sH5/QamNcjhH5rJcXpOBLhU=
Subject key identifier:   72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3DA8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Tue 03 Sep 2024 17:04:00 +0000
Subordinate resources:    AS: 52329
                          IP: 131.72.240.0/22
                          IP: 186.148.240.0/21
                          IP: 2800:b60::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15981199 (0xf3da8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Sep  3 17:04:00 2024 GMT
        Subject: CN=a79f7c916be3a1ea7251327afacd5a877554edc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:25:6b:fd:a2:eb:c7:88:8f:cd:47:a8:b2:
                    b4:07:2f:ed:20:9c:54:90:5c:e6:e2:48:87:86:e3:
                    a7:b7:fe:b7:12:f3:c3:21:e9:6f:c8:9d:b4:87:0e:
                    6b:42:05:8f:ee:0a:36:ab:91:6b:23:d9:a6:85:d0:
                    c3:07:60:e4:2d:40:1b:d1:07:b6:ff:59:d4:f3:5c:
                    07:65:1c:d1:03:01:07:be:55:4f:d0:61:ea:3b:d9:
                    dd:8a:13:b7:b4:4c:db:6b:76:5c:71:55:7e:b1:d0:
                    63:fc:cf:94:91:08:40:88:3c:98:57:d3:2e:e4:29:
                    56:3e:f0:da:74:e8:2f:fb:5b:4a:39:d3:0d:22:ca:
                    9e:ba:5b:cd:23:a4:07:ff:d0:02:ae:0e:df:80:31:
                    3a:c3:4d:84:95:9b:eb:0b:1d:85:35:fd:2a:e6:3f:
                    a4:fe:22:b4:a8:ec:b4:be:7b:d4:a5:5a:fa:54:88:
                    93:ed:6f:fb:16:d8:f3:0b:15:d4:74:6a:2e:5b:97:
                    f0:4f:5e:d8:f6:2a:3d:b0:d8:3d:ae:66:34:bb:b4:
                    80:52:e6:43:ec:36:ec:b3:92:39:46:b1:44:e8:0b:
                    77:8d:ee:86:b1:33:b7:a1:e4:67:b8:13:a8:c2:67:
                    48:66:f7:b6:38:0d:5c:5f:f4:7a:8d:2c:2e:93:d1:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.240.0/22
                  186.148.240.0/21
                IPv6:
                  2800:b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52329

    Signature Algorithm: sha256WithRSAEncryption
         4e:d2:30:29:6d:0c:7c:19:28:2b:f2:5c:1f:db:cd:60:71:a2:
         80:a6:cf:11:5b:bb:9e:dc:13:ca:ac:a5:ec:5e:9c:d2:85:04:
         b8:8d:9e:d8:cf:ea:c2:8d:c0:6d:53:0c:0c:15:c7:67:d4:33:
         50:94:71:22:cb:12:6d:34:13:8d:5e:4a:d1:58:78:be:18:00:
         0c:f9:11:e0:33:c5:93:ec:16:dc:13:b3:01:a5:ea:fa:1d:f8:
         6e:72:6c:b3:2a:61:34:8a:0b:03:97:6c:62:29:aa:0c:a4:39:
         05:f5:be:05:c2:0b:9a:fa:1f:7b:9f:df:7b:8e:75:60:e3:54:
         26:dc:1b:5a:61:41:79:6b:f6:d6:26:95:4d:41:94:55:83:c7:
         c9:5f:c6:97:e5:7a:fe:2c:7c:75:f7:d3:01:e1:23:e4:07:47:
         f8:f1:51:f2:9c:98:72:1c:d6:d4:a8:41:54:75:a7:3f:bc:a1:
         26:40:f4:cf:11:03:76:a8:78:91:fc:cd:89:52:69:83:27:71:
         ef:9b:38:ec:c1:5d:56:ba:b0:1a:c0:45:d2:b7:00:82:03:01:
         83:b0:e9:cf:e2:1f:6d:42:49:84:ac:17:db:d1:44:93:b5:27:
         8c:76:de:15:05:0a:4b:a3:ec:1e:43:5f:1b:8b:18:02:f2:30:
         12:e4:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:42 2024 by rpki-client on console-ams.rpki-client.org