Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b80851dbe630162fa48a971618bbb58a4472f664.cer
File:                     b80851dbe630162fa48a971618bbb58a4472f664.cer (raw, json)
Hash identifier:          HOLxfQpPuWu/p4Gu5sh85/OZ3KiSCBe1HXSEK8a47oQ=
Subject key identifier:   A4:A6:89:EF:41:2A:2A:64:AA:27:89:7A:AC:D0:DB:0C:BE:80:C1:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5F8D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/b80851dbe630162fa48a971618bbb58a4472f664.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Sat 21 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 27800
                          IP: 131.100.36.0/22
                          IP: 170.82.208.0/22
                          IP: 170.84.8.0/22
                          IP: 179.60.212.0/22
                          IP: 181.118.32.0/19
                          IP: 200.7.88.0/21
                          IP: 2803:1500::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16120020 (0xf5f8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Sep 21 05:00:00 2024 GMT
        Subject: CN=b80851dbe630162fa48a971618bbb58a4472f664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:e3:f8:d7:24:7b:54:6d:da:bf:26:6e:1c:
                    48:5b:f3:1f:74:df:96:70:d7:68:dc:f2:37:61:4c:
                    bb:e9:7b:b0:b2:f9:4f:34:5e:25:98:17:0a:f2:18:
                    a0:e2:25:a5:81:d7:28:24:ba:3f:99:d0:2e:0a:93:
                    f7:5e:74:7f:dc:b5:10:9c:6c:7b:f2:7a:4e:c2:e1:
                    bf:65:5f:a1:55:41:5a:bf:39:47:62:63:01:10:c0:
                    b6:4f:dc:41:fe:90:d0:3b:81:07:ca:ae:14:33:8a:
                    94:a4:09:0b:bd:83:a6:f0:67:05:2f:2b:84:0f:74:
                    16:ba:80:36:5e:25:1c:87:eb:35:16:f7:26:40:a0:
                    91:f2:4b:72:60:74:ad:02:f8:0e:f5:91:b6:26:e4:
                    84:de:94:10:49:01:76:9d:dc:54:08:02:0f:e7:f9:
                    19:5f:c1:e7:29:17:7c:fc:4c:91:d1:8b:cd:2f:59:
                    fa:24:55:ba:84:58:f6:9f:a0:db:85:24:9c:77:1d:
                    3d:55:58:7e:82:a2:cd:83:86:a0:0b:e6:8f:50:21:
                    ed:08:58:68:9f:c4:00:98:72:39:40:e2:81:01:7a:
                    a4:7b:7b:fe:7a:44:6a:2a:d4:71:85:c6:4d:64:06:
                    9f:ad:40:42:c2:88:27:1f:17:3b:96:0a:a9:f1:cc:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A6:89:EF:41:2A:2A:64:AA:27:89:7A:AC:D0:DB:0C:BE:80:C1:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/b80851dbe630162fa48a971618bbb58a4472f664.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.36.0/22
                  170.82.208.0/22
                  170.84.8.0/22
                  179.60.212.0/22
                  181.118.32.0/19
                  200.7.88.0/21
                IPv6:
                  2803:1500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27800

    Signature Algorithm: sha256WithRSAEncryption
         90:62:11:a2:f1:d7:78:aa:6b:2f:15:ed:88:6f:24:e4:b9:a3:
         8b:4d:d9:cc:bf:4e:74:30:7d:34:4e:c8:da:5b:6a:a3:ad:ca:
         c4:3c:9c:d2:9f:e8:04:58:b6:32:25:02:1a:0c:66:83:7c:d0:
         da:14:7b:ec:92:c3:e2:96:93:45:b7:74:93:70:84:46:09:e4:
         da:0b:63:5a:b9:36:86:71:fd:f7:f8:0d:bd:d3:89:28:60:9f:
         7e:e5:f7:c7:37:18:34:d5:e9:d9:cd:73:14:0a:33:bc:41:53:
         5e:4a:8e:d5:52:62:3e:49:58:02:d1:05:7b:e7:6c:5c:17:02:
         c1:c1:05:a0:0e:0e:2e:4d:2d:23:90:25:19:ec:bd:ff:0a:c4:
         76:50:2e:1a:41:3e:75:95:bb:d4:90:8e:bf:fd:00:53:78:f4:
         95:fd:dd:1b:19:8f:ad:cd:ff:9a:1e:7b:97:b1:65:7b:b8:a2:
         7e:0e:00:4a:ae:35:90:a6:6f:22:c0:63:51:1c:d2:1f:49:fd:
         e3:db:e4:52:39:60:ea:f0:2b:67:65:1a:c9:33:19:80:2b:ba:
         09:a8:b1:e6:26:89:24:e8:8e:4a:d1:25:28:9d:48:c3:19:26:
         d9:af:ca:50:80:01:4b:9a:44:0c:d2:50:34:7d:58:43:64:05:
         87:a5:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:53 2024 by rpki-client on console-ams.rpki-client.org