Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b28670de25fd7cab3c0633d8b542e72d0d27342e.cer
File:                     b28670de25fd7cab3c0633d8b542e72d0d27342e.cer (raw, json)
Hash identifier:          3MADFyY9fehKn9TTXTT2neESmS6qBJ0DwaeMiRGtXVQ=
Subject key identifier:   BA:B3:40:D9:C8:1C:66:53:E5:66:88:A5:49:53:E8:4F:65:AC:82:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F99079
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/b28670de25fd7cab3c0633d8b542e72d0d27342e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Tue 15 Oct 2024 18:19:45 +0000
Subordinate resources:    AS: 264835
                          IP: 170.82.40.0/23
                          IP: 2801:144::/42

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16355449 (0xf99079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : Oct 15 18:19:45 2024 GMT
        Subject: CN=b28670de25fd7cab3c0633d8b542e72d0d27342e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:c4:36:e3:36:77:5c:f1:30:11:fc:fd:f4:
                    37:b6:fc:19:0a:9e:ba:f0:d0:f6:1f:b0:9e:ab:47:
                    c9:88:ee:c8:11:6f:57:ae:ef:0d:d5:ce:c0:82:90:
                    4c:0d:8b:96:e1:65:8d:63:62:22:e1:0e:38:b7:61:
                    27:9e:dd:f7:0c:b9:b0:46:97:36:43:ec:76:36:d6:
                    7f:ea:5c:ac:76:4f:7a:39:f2:0e:04:18:37:21:f1:
                    5f:e5:c3:48:76:02:9d:d6:5f:bd:30:0c:a3:b8:cf:
                    35:e2:ec:ed:96:0a:71:77:ec:09:4b:61:e6:b6:3c:
                    1e:17:51:13:bf:1f:92:00:9c:94:b3:0f:d6:40:34:
                    d0:e4:bd:17:d9:64:43:65:23:bd:da:db:69:8b:44:
                    4e:66:54:c5:7b:31:41:31:d6:22:62:dd:93:9f:0a:
                    d5:5c:f1:35:ab:80:aa:cd:b8:ea:97:6b:19:ea:e6:
                    28:b0:f0:9d:ce:ad:f6:22:b1:f6:f8:af:c1:97:b5:
                    2b:ab:3b:50:22:e9:db:17:44:5b:f3:3d:a5:9f:8e:
                    55:04:13:c0:bc:02:18:11:14:50:1d:88:15:d1:17:
                    42:7e:61:42:63:a8:3f:89:2d:a1:27:b2:2d:6b:10:
                    53:b9:d9:89:32:38:1e:8a:dd:48:5e:fc:fc:35:11:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:40:D9:C8:1C:66:53:E5:66:88:A5:49:53:E8:4F:65:AC:82:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/b28670de25fd7cab3c0633d8b542e72d0d27342e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.40.0/23
                IPv6:
                  2801:144::/42

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264835

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:5c:c1:9a:44:25:ae:8c:49:00:73:cb:b8:7b:65:51:2a:
         6d:54:66:68:aa:c7:61:05:51:a0:00:4d:64:08:c6:56:a6:d6:
         d3:e9:73:93:c1:bf:16:1a:7a:a7:1f:85:46:01:34:05:d3:32:
         f7:d7:f9:61:d7:7b:12:6d:ce:c1:de:23:df:bd:dd:09:2c:fb:
         d4:53:8e:ee:dc:e7:f9:d6:38:9c:74:83:14:f6:98:1d:d1:94:
         1d:6a:19:df:47:53:05:a8:78:5a:e4:4f:10:ca:f0:0d:01:8a:
         e5:0f:5c:5d:62:66:0b:6b:23:be:7d:86:8f:c6:a3:93:a8:20:
         11:83:ef:eb:b6:fc:86:4b:62:72:3a:be:f5:b6:48:8c:f3:f5:
         eb:f2:6f:b4:1e:00:d2:f1:85:2d:28:50:2f:d6:9b:68:45:2f:
         41:a9:aa:85:21:3a:df:88:33:12:8d:26:3f:c7:89:25:21:53:
         8b:6e:a4:02:7c:25:5a:f1:b2:fd:6d:d8:10:1e:9d:df:56:72:
         52:c5:cd:58:81:99:b3:b3:d7:c4:38:a9:18:e6:97:45:d9:0b:
         bc:c2:28:49:0a:5b:e2:ed:8e:6b:80:a7:7b:c7:2c:48:ff:2c:
         58:6b:a7:12:0a:65:e6:9a:22:52:6b:ed:ed:4e:fa:b4:1e:a9:
         0d:4e:23:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:45 2024 by rpki-client on console-ams.rpki-client.org