Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b39e9213a27f038d3701817402c0abd4741eeae8.cer
File:                     b39e9213a27f038d3701817402c0abd4741eeae8.cer (raw, json)
Hash identifier:          mfoNmiczEA5oJfpKaveTkt3D2is/YuG2XoJbP2xMLfs=
Subject key identifier:   99:79:99:98:C9:5F:87:1F:BB:3E:E7:AF:2C:AA:BF:1F:F9:F3:9F:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7F1A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/b39e9213a27f038d3701817402c0abd4741eeae8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:36 +0000
Certificate not after:    Sat 01 Jun 2024 18:47:22 +0000
Subordinate resources:    AS: 265781
                          IP: 164.163.56.0/22
                          IP: 2803:1fc0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15200674 (0xe7f1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:36 2017 GMT
            Not After : Jun  1 18:47:22 2024 GMT
        Subject: CN=b39e9213a27f038d3701817402c0abd4741eeae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:7b:a7:d7:8f:a0:26:d6:2f:f3:8c:ba:45:
                    10:df:35:89:ef:ff:89:56:50:7a:9d:b1:a2:a0:b5:
                    36:d1:ca:0b:eb:3c:a7:e8:ae:ed:3d:1e:e0:a5:0a:
                    75:26:4d:5f:9b:07:39:90:66:82:44:a4:77:03:55:
                    6f:80:de:3f:a5:3b:c7:60:7b:cf:99:34:42:9f:05:
                    eb:76:7a:b1:07:1d:4a:05:68:73:1e:00:49:fb:18:
                    00:ff:e0:74:e8:ff:28:e6:92:61:e3:d8:a1:3e:4f:
                    76:41:94:97:bf:4f:78:6c:a6:73:2e:db:34:35:64:
                    6a:48:a5:0c:7d:53:64:6b:2e:e8:56:91:d0:f9:d4:
                    1d:61:ea:ec:49:03:28:24:a2:d2:53:c9:f6:c1:b8:
                    86:5c:d8:49:db:f1:1e:a4:07:98:dd:c0:d1:f2:b9:
                    44:29:39:65:e7:ce:23:77:6b:1a:62:89:5a:07:7c:
                    b3:0c:70:66:70:d9:a1:5b:3b:8b:f6:05:ac:ab:6a:
                    81:d7:47:d5:8e:02:03:5d:04:82:68:2f:28:d3:78:
                    70:5a:55:cc:fe:cd:c6:d5:23:d1:d4:39:96:9a:e7:
                    40:9e:7b:32:58:18:3a:1e:ea:a5:a5:e1:79:f1:33:
                    0a:64:b0:bd:c4:2f:33:75:a5:67:d8:39:db:e5:8f:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:99:98:C9:5F:87:1F:BB:3E:E7:AF:2C:AA:BF:1F:F9:F3:9F:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b75a2b49-1457-4d1e-a633-44115e86909a/b39e9213a27f038d3701817402c0abd4741eeae8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.56.0/22
                IPv6:
                  2803:1fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265781

    Signature Algorithm: sha256WithRSAEncryption
         82:96:a0:c4:6f:66:d7:53:5b:cd:da:92:79:33:2c:3a:c9:04:
         56:f3:9d:08:b5:5e:71:0f:7d:34:a4:0f:8d:f4:c4:8b:93:8c:
         dd:bb:40:f5:5f:7a:e5:71:fc:f5:8d:89:26:89:61:c6:9f:f7:
         7e:c6:f2:4f:d5:36:da:cf:09:a8:ee:24:3d:03:88:c1:d7:e0:
         0b:dc:79:42:eb:bb:db:a9:fc:fd:c6:80:16:18:a5:fa:31:a0:
         8b:95:34:9a:3f:b4:95:33:e1:81:5b:1e:16:5b:8a:6a:68:52:
         65:c0:14:c0:89:3a:f8:1d:01:a5:6a:22:c9:c4:29:a7:b8:a6:
         9b:cd:95:77:58:ba:a1:0a:c9:6e:dc:eb:d8:fb:c5:73:a4:2f:
         d2:e4:b7:f6:c4:e5:ef:30:e8:56:02:f3:c5:17:61:f5:ab:bd:
         16:d6:eb:2c:c0:bd:ba:f1:ed:7f:09:ed:a0:43:16:f5:35:b4:
         61:e4:56:56:f3:7b:3e:e2:1d:3d:56:2c:12:f7:c8:68:e0:9f:
         9b:f5:0c:b2:4c:ce:d6:97:49:fe:9a:76:ed:16:a8:d1:88:3b:
         5b:15:d7:1d:fb:45:1c:17:91:4d:f8:00:a1:e4:ca:4d:7a:87:
         12:d1:53:ec:2e:49:76:92:25:44:e4:e5:a2:e2:54:04:96:20:
         b6:5b:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:39:58 2024 by rpki-client on console-fra.rpki-client.org