Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abd5d8e14d4caefcfec09db3542d5ce703734884.cer
File:                     abd5d8e14d4caefcfec09db3542d5ce703734884.cer (raw, json)
Hash identifier:          P0YK5t4nQebBeHBOhMaW+RHt63uCgN02jzvFtex259E=
Subject key identifier:   91:29:FF:58:CB:91:78:C4:E8:CB:49:76:80:BE:D8:12:1A:EE:C9:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED9FC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/123041e8-ddb4-4d63-b2bf-cb24168944bd/abd5d8e14d4caefcfec09db3542d5ce703734884.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/123041e8-ddb4-4d63-b2bf-cb24168944bd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:47 +0000
Certificate not after:    Sun 14 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 264775
                          IP: 207.248.102.0/24
                          IP: 2801:1c:5000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15572931 (0xed9fc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:47 2017 GMT
            Not After : Jul 14 06:00:00 2024 GMT
        Subject: CN=abd5d8e14d4caefcfec09db3542d5ce703734884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:1e:94:d6:cc:0e:b6:4d:fc:84:11:0b:eb:
                    9c:52:cf:68:92:9a:b1:56:4f:4a:72:64:3a:fa:99:
                    fb:2a:f4:c8:b6:19:9c:3b:a7:8f:3e:6c:cd:29:28:
                    a7:cb:1c:ee:50:de:89:e2:e0:a1:90:46:5e:a4:19:
                    34:b6:b2:c9:96:4f:9a:06:86:25:7e:af:4c:32:89:
                    24:8c:0b:f6:8e:d0:78:0c:f7:c0:59:c2:b7:c9:87:
                    b0:95:ae:ea:4c:b3:79:76:61:08:67:fa:b8:53:54:
                    07:d7:17:1b:de:3f:fd:d0:1d:6f:b3:c5:9c:e9:d6:
                    03:f6:f4:54:52:af:64:dd:b7:31:b2:ba:10:e6:00:
                    18:fb:f2:8c:bc:36:11:c9:45:5a:f7:f5:4e:8a:2b:
                    04:ca:65:68:ac:61:f7:02:e5:48:ee:dd:01:a5:f5:
                    d2:4b:21:00:e5:cd:57:d2:2e:11:53:51:f4:d1:bb:
                    02:e6:7e:78:9a:db:b8:2a:0c:6a:89:ab:3b:f2:f6:
                    1b:2d:a9:38:0b:35:20:e8:57:88:6a:2c:68:81:78:
                    ba:e4:f2:c7:a4:08:6a:97:c1:e1:df:e8:b0:fb:c9:
                    0b:53:3c:f1:56:9c:eb:58:74:fb:40:85:d3:6a:a8:
                    71:38:77:88:a8:1b:19:14:6f:4c:f5:17:6f:6c:0e:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:FF:58:CB:91:78:C4:E8:CB:49:76:80:BE:D8:12:1A:EE:C9:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/123041e8-ddb4-4d63-b2bf-cb24168944bd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/123041e8-ddb4-4d63-b2bf-cb24168944bd/abd5d8e14d4caefcfec09db3542d5ce703734884.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.102.0/24
                IPv6:
                  2801:1c:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264775

    Signature Algorithm: sha256WithRSAEncryption
         55:78:2e:25:b8:07:ec:48:8c:88:4d:ec:3d:2a:ab:6e:e2:1e:
         bb:8b:b7:07:c3:cf:3c:0e:fe:ac:5b:61:7c:40:8c:a1:7d:45:
         c5:a2:0b:b2:38:a6:f3:6b:42:4b:fb:f9:22:f2:b1:bf:07:06:
         13:ea:e2:38:43:7f:a8:42:6d:21:9e:99:27:22:31:84:85:af:
         91:67:e9:13:3b:b4:6d:48:7e:60:08:8c:aa:bc:37:68:10:6b:
         69:9d:77:99:4a:95:04:c1:73:53:75:a0:70:55:3f:c5:4d:67:
         6f:55:7f:74:5c:a2:84:5e:d2:90:94:48:de:ff:88:b9:48:ad:
         eb:64:f4:10:e6:80:2d:07:89:67:fa:9e:4e:89:d6:8f:ca:33:
         b8:82:f6:19:19:64:e7:99:56:c7:c0:67:a4:a7:01:bb:dd:55:
         85:0b:06:58:33:e5:ae:24:a6:3a:44:18:89:27:34:c2:87:ec:
         3d:82:84:60:98:22:82:b5:03:fc:50:0c:1f:dc:25:3b:39:64:
         3b:66:3f:ed:c6:52:1c:e0:ea:8b:66:ee:7f:89:b3:bb:18:77:
         2b:48:23:14:59:f6:56:90:65:10:c2:55:59:fe:96:19:51:82:
         91:f8:10:13:5c:9f:1d:91:15:e6:bf:d9:d4:63:2f:c6:35:67:
         ce:43:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:55 2024 by rpki-client on console-fra.rpki-client.org