Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
File:                     b12012502b7ca3b0da125f250315dfe19bfb18d5.cer (raw, json)
Hash identifier:          rfn+Ew9Yrnsm72mBU9libIZxRVw8clZhMoDjvGJks+Y=
Subject key identifier:   A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F367E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:19 +0000
Certificate not after:    Sat 31 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 23243
                          AS: 262206
                          IP: 181.174.64.0/18
                          IP: 181.189.132.0 -- 181.189.143.255
                          IP: 186.189.192.0/19
                          IP: 190.106.192.0/19
                          IP: 200.49.160.0/19
                          IP: 2803:c800::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15951849 (0xf367e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:19 2017 GMT
            Not After : Aug 31 06:00:00 2024 GMT
        Subject: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:cc:1a:c7:ef:ff:5d:92:6c:af:3e:2b:d4:
                    6c:db:09:27:a8:ef:4f:5d:23:c6:04:47:e7:73:69:
                    63:60:0d:fd:be:98:57:c1:8e:da:8f:a5:35:87:d2:
                    fe:d5:3e:b0:6b:3d:74:d1:b5:4b:42:1d:81:cb:0e:
                    64:c6:3c:05:2b:a3:f1:37:2c:fc:96:40:04:e3:3d:
                    b0:a0:2b:b6:b0:63:4f:de:35:6b:54:0f:c3:1a:40:
                    64:8b:c5:2a:5c:a4:49:b9:21:b3:bd:f6:b0:61:cd:
                    30:f9:6f:a2:d8:51:ea:52:cf:32:cb:16:bf:cc:c3:
                    27:0f:5d:ef:07:6b:e5:10:0c:dc:0a:fe:b4:0c:45:
                    e1:eb:b6:cc:2d:0d:dc:bd:ad:9d:48:c1:00:34:db:
                    94:b3:3b:43:70:31:27:9d:3f:59:2e:ad:7d:a2:d5:
                    08:5f:e6:c5:b2:14:8d:3a:28:60:ba:38:0f:a9:8f:
                    d4:df:4b:f8:b2:a1:a7:45:81:5b:45:8e:34:47:32:
                    a7:03:50:63:90:99:fc:b4:ec:b2:6d:74:b9:88:fd:
                    04:0c:b5:b1:d2:17:c8:d3:08:05:49:17:fd:13:c7:
                    66:c1:11:1d:d5:d0:11:fe:1e:2c:00:72:1f:2a:d8:
                    33:c7:56:9e:ad:db:25:8c:15:09:58:1f:34:c9:14:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.64.0/18
                  181.189.132.0-181.189.143.255
                  186.189.192.0/19
                  190.106.192.0/19
                  200.49.160.0/19
                IPv6:
                  2803:c800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23243
                  262206

    Signature Algorithm: sha256WithRSAEncryption
         63:69:97:8c:d5:2c:e1:cd:ab:71:95:0d:2c:4b:b1:ec:84:9a:
         36:c7:6e:ee:71:e4:62:5e:87:ce:59:fa:1f:a7:e4:af:fd:c5:
         2a:e8:f5:ca:da:f8:06:05:44:23:37:6d:14:26:b2:8b:be:e6:
         0b:cf:df:61:0e:d9:97:b0:21:3c:71:f2:f3:52:71:e5:0c:f7:
         e0:66:8f:84:13:af:5b:13:44:e1:31:05:43:c6:87:b1:31:64:
         08:1e:9b:fb:e3:c1:f7:df:48:2d:93:60:73:0d:ce:20:d0:e0:
         d5:22:1b:2d:5d:5c:51:5d:f4:8c:43:f1:d8:d7:3b:a3:57:a6:
         01:cf:ed:ae:6b:03:1d:ed:dc:b4:e0:df:3a:f6:e4:d1:23:b3:
         c6:2c:5a:33:c9:cc:fc:2d:da:8a:b6:7b:b2:f1:23:b0:6e:0a:
         35:2f:84:c0:fe:3f:06:66:91:3f:63:c5:23:69:4b:fa:18:35:
         87:db:60:08:80:fa:82:50:b7:a5:5a:7c:64:fd:f4:90:33:bb:
         fb:c7:8f:f3:d8:21:b7:c2:ef:88:0c:b7:91:03:f0:3b:52:c8:
         c9:e8:be:ff:f1:cc:a5:ed:65:83:64:1f:c3:16:43:2b:cb:fe:
         26:ad:ec:64:40:25:72:6b:81:0e:89:0f:e2:95:a9:f2:a8:3c:
         df:bb:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:57 2024 by rpki-client on console-fra.rpki-client.org