Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b676762a1384a1416b6cb26bcd1d4cae385a213d.cer
File:                     b676762a1384a1416b6cb26bcd1d4cae385a213d.cer (raw, json)
Hash identifier:          b05AIUgy2fc9ktFL+lzB2fuqWDJGU4ua/TlskG6k57E=
Subject key identifier:   A8:5B:96:42:DB:AD:81:7B:FB:1E:7F:E2:E6:22:21:F0:B8:95:E1:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E87262
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/881696db-e93f-4803-bba2-3db08ac159c9/b676762a1384a1416b6cb26bcd1d4cae385a213d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/881696db-e93f-4803-bba2-3db08ac159c9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 18:42:45 +0000
Certificate not after:    Thu 01 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 16397
                          AS: 26592
                          AS: 264220
                          AS: 265376
                          AS: 270475
                          IP: 138.36.216.0/22
                          IP: 168.90.172.0/22
                          IP: 177.47.0.0/19
                          IP: 177.126.160.0/19
                          IP: 177.154.128.0/19
                          IP: 177.184.0.0/19
                          IP: 179.107.32.0/20
                          IP: 179.124.32.0/20
                          IP: 187.0.192.0/19
                          IP: 187.33.0.0/19
                          IP: 200.33.253.0/24
                          IP: 200.95.188.0/22
                          IP: 200.143.160.0/19
                          IP: 200.150.144.0/20
                          IP: 200.155.0.0/19
                          IP: 200.155.64.0/20
                          IP: 200.198.176.0/20
                          IP: 200.219.192.0/18
                          IP: 201.20.0.0/18
                          IP: 201.49.208.0/20
                          IP: 201.150.92.0/22
                          IP: 2001:12e8::/32
                          IP: 2801:80:19e0::/48
                          IP: 2804:50::/32
                          IP: 2804:246c::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15233634 (0xe87262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 18:42:45 2023 GMT
            Not After : Aug  1 15:00:00 2024 GMT
        Subject: CN=b676762a1384a1416b6cb26bcd1d4cae385a213d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:b0:65:91:be:ca:09:e9:fa:28:44:48:60:
                    3e:13:95:a7:7b:97:62:7b:0c:2a:a2:05:e6:69:48:
                    15:d0:9f:e8:73:f1:c2:0c:78:7b:74:af:c3:25:3c:
                    f5:d6:bb:71:d8:8b:33:5f:7b:ce:86:8b:e5:64:cc:
                    d7:2b:9d:73:34:3d:65:6b:e0:45:7f:ea:29:a3:62:
                    01:c6:e8:08:ab:4b:62:bc:ec:f7:ad:46:36:03:b7:
                    0b:48:b6:24:d6:6e:a3:65:53:44:f8:32:2a:bd:95:
                    20:52:7e:45:f0:70:9a:f5:47:c6:36:9c:f4:ef:78:
                    50:7f:f4:3d:63:f4:d1:78:0a:97:11:7a:50:a6:39:
                    1b:6b:c7:8c:a1:21:d1:79:77:4c:b4:d8:08:86:72:
                    e6:e8:3d:88:4a:63:c5:61:c6:80:ee:89:c1:31:4f:
                    0c:d0:e0:8d:33:4e:56:8f:76:8c:ba:0b:60:82:0d:
                    dc:60:11:fe:5d:73:16:b5:ad:c5:0f:b7:b6:3b:11:
                    9f:8a:9d:8a:a8:c4:32:30:cb:0f:bd:5c:63:a9:be:
                    f4:e1:01:ec:59:81:17:03:7f:63:df:59:e8:40:d9:
                    f9:81:a1:8b:06:37:bd:d0:a2:a7:b5:5d:38:a8:a5:
                    a0:4b:88:cd:82:a8:35:44:04:6d:77:7e:13:9a:d6:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:96:42:DB:AD:81:7B:FB:1E:7F:E2:E6:22:21:F0:B8:95:E1:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/881696db-e93f-4803-bba2-3db08ac159c9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/881696db-e93f-4803-bba2-3db08ac159c9/b676762a1384a1416b6cb26bcd1d4cae385a213d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.216.0/22
                  168.90.172.0/22
                  177.47.0.0/19
                  177.126.160.0/19
                  177.154.128.0/19
                  177.184.0.0/19
                  179.107.32.0/20
                  179.124.32.0/20
                  187.0.192.0/19
                  187.33.0.0/19
                  200.33.253.0/24
                  200.95.188.0/22
                  200.143.160.0/19
                  200.150.144.0/20
                  200.155.0.0/19
                  200.155.64.0/20
                  200.198.176.0/20
                  200.219.192.0/18
                  201.20.0.0/18
                  201.49.208.0/20
                  201.150.92.0/22
                IPv6:
                  2001:12e8::/32
                  2801:80:19e0::/48
                  2804:50::/32
                  2804:246c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16397
                  26592
                  264220
                  265376
                  270475

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:f9:c6:eb:19:02:59:dd:a5:54:2e:c6:ca:b0:a4:8a:57:
         e6:1d:71:aa:cd:ae:d5:0a:33:0a:5b:78:d8:aa:00:04:ba:20:
         6f:45:5c:f5:31:66:38:aa:05:ce:95:74:c8:dc:8b:19:bf:de:
         fd:b7:2e:93:22:14:21:46:11:d5:d0:87:a7:9a:8a:06:fb:fb:
         6c:c9:a6:9b:f4:47:4e:e0:03:89:27:95:6c:b2:54:af:3c:1e:
         8c:06:3e:8f:b5:a2:3f:94:14:2e:2c:ec:16:6e:f0:ae:8d:89:
         a8:ea:44:2c:3b:d3:c4:ca:ad:59:8a:d6:34:b3:59:8e:25:9d:
         a2:dd:e2:89:42:13:c6:2c:96:f7:02:cb:1a:b4:0a:e6:a9:45:
         21:9c:4c:fa:d7:60:20:13:ac:b0:b0:3c:a6:34:e6:70:37:66:
         df:df:f0:c8:36:5d:12:a4:60:62:d5:b6:64:70:c9:68:f5:f8:
         8a:38:12:d1:5c:d1:15:dd:19:e2:46:8d:87:30:a2:4f:95:44:
         9e:a4:77:29:98:b6:ab:33:ac:95:81:c5:aa:38:a6:d0:9e:64:
         14:f9:fa:2c:4f:38:f7:14:97:bb:09:08:41:96:51:aa:6a:dd:
         c8:6d:c0:0d:bb:91:64:25:24:58:1b:b8:6f:cb:dd:39:5a:d0:
         d7:e6:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:28:49 2024 by rpki-client on console-ams.rpki-client.org