Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer
File:                     b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer (raw, json)
Hash identifier:          fW32hAMaifNOVGEkDjqnXLC7ucaE70eeX0rr9VWzq/c=
Subject key identifier:   FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E2420
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Aug 2020 20:19:05 +0000
Certificate not after:    Wed 16 Apr 2025 15:00:00 +0000
Subordinate resources:    AS: 16592
                          IP: 190.5.128.0/19
                          IP: 2803:9200::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17703968 (0x10e2420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 20:19:05 2020 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:6c:64:25:0e:8b:24:08:fe:df:f5:53:97:
                    66:d5:b1:a1:b1:c1:15:cb:b3:94:3f:62:bd:8f:e2:
                    7a:11:c5:84:87:86:49:05:c5:62:8c:0c:21:90:b8:
                    a8:58:70:8b:63:18:4a:af:4b:66:94:d8:51:3e:e0:
                    80:2c:2c:aa:fe:49:7e:d2:f4:c6:4c:7b:b0:ab:3e:
                    26:8c:32:5e:24:3d:a5:fe:81:ad:a8:62:cb:b2:49:
                    f4:25:71:80:6f:7c:b7:47:fe:4a:4f:40:49:6d:c4:
                    ed:9f:41:1d:dc:62:8a:c3:ee:cc:23:e4:56:37:1f:
                    83:37:2c:a6:26:a2:76:af:3c:1d:c8:9d:5a:7c:dd:
                    e9:b6:87:24:c5:74:e7:1d:03:b3:6c:88:f0:79:14:
                    cb:54:34:de:33:f5:1c:99:e3:f1:9e:87:31:b0:e8:
                    a7:8f:df:1b:d4:70:62:c0:6d:c5:e9:c8:61:69:7d:
                    e9:32:ec:fb:34:a7:d8:27:1e:11:04:22:3e:71:13:
                    88:30:68:17:d7:81:90:5c:ec:af:5b:13:fb:3b:42:
                    43:62:d5:0c:7b:25:fa:a4:d6:36:f7:06:0f:56:d3:
                    e8:7f:35:c6:3f:9a:a5:7a:c1:c6:df:c7:fe:62:72:
                    98:ab:a6:05:0d:0f:e2:74:dc:9d:09:cb:1f:97:5a:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.128.0/19
                IPv6:
                  2803:9200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16592

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:34:80:80:28:fc:0b:6c:cd:d1:2f:09:c2:6e:ab:78:70:
         78:b2:3b:11:04:04:57:ee:b8:94:e5:af:57:63:99:27:22:a8:
         79:1b:9e:5d:0b:b1:e6:e2:75:af:ab:60:df:76:51:7c:14:a2:
         0e:59:f1:a7:0f:89:f5:6e:68:b8:07:7d:ca:b0:e8:83:f7:0f:
         98:c6:8e:af:60:0d:fb:39:6d:66:50:c3:5b:92:40:b5:78:8f:
         48:95:9e:23:4a:94:fc:c0:6a:ba:cb:34:82:45:4e:27:77:e3:
         0d:05:35:f1:c8:25:7b:d4:90:d3:31:1a:c3:0e:b1:4d:ab:7b:
         b3:0f:b4:b6:b1:e1:f5:ee:44:b7:90:ff:b6:0a:be:fe:5d:c1:
         d5:e1:af:f9:b3:59:67:44:56:82:ba:21:8e:07:25:38:22:51:
         b2:a0:33:26:a3:d6:9f:1f:3f:c6:86:7d:da:76:02:65:a1:68:
         27:fc:a8:36:e5:cd:74:8c:8a:e2:4c:05:c5:b9:f4:83:c5:98:
         cd:cd:4d:cb:c4:68:c5:ef:5c:2d:1c:2a:d6:b0:b9:f4:66:5b:
         52:84:6c:07:60:d5:e8:06:1f:37:a7:7d:c2:62:23:9c:92:62:
         c3:70:33:1c:be:a9:ba:a9:bd:95:bb:52:2c:8a:db:dc:fb:80:
         7f:88:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:19:43 2024 by rpki-client on console-fra.rpki-client.org