Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
File:                     b937c1111990e7b39c1f43b075333acd225a29b1.cer (raw, json)
Hash identifier:          igB0vQa6xMPFb+BeF0M7TopIbdKax5yjf38Tnrf0lUU=
Subject key identifier:   1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4A08D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:33 +0000
Certificate not after:    Tue 03 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 28103
                          IP: 131.161.252.0/22
                          IP: 138.186.60.0/22
                          IP: 179.189.218.0/23
                          IP: 190.110.226.0/23
                          IP: 190.211.240.0/22
                          IP: 201.222.48.0/21
                          IP: 2803:c100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16031885 (0xf4a08d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:33 2017 GMT
            Not After : Sep  3 05:00:00 2024 GMT
        Subject: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:a6:8d:5f:fb:58:ae:c6:5c:7c:54:f0:62:
                    07:f2:83:c5:fd:35:55:b7:25:ec:7e:62:0c:42:56:
                    23:05:e7:73:b1:b9:b3:b2:83:b3:a5:a8:07:61:fb:
                    3a:9b:b5:a4:5d:0f:4a:f9:38:d1:16:ed:32:00:d8:
                    8a:e7:76:b8:a4:75:9e:aa:2e:3e:79:f4:28:2a:8a:
                    2b:09:dc:f3:a2:82:e8:9b:7f:5b:cb:eb:4a:3a:4e:
                    1b:71:2d:48:55:54:0a:fa:61:7f:b9:b7:fa:b7:bb:
                    5d:91:6d:c6:a9:42:0d:5f:c0:6e:81:c0:e7:3d:b6:
                    98:7a:fc:b6:18:a6:ab:e8:3f:9d:b0:4d:b7:9b:e8:
                    a4:f7:56:2d:9c:b7:71:63:bb:f0:e4:ff:ff:14:49:
                    fd:3d:38:8d:ac:53:56:34:84:ef:af:9f:5d:54:1c:
                    5b:da:86:59:de:2c:86:12:93:e5:f1:42:d8:0b:40:
                    a2:d0:0d:2b:ae:c0:36:06:63:50:f0:bc:44:ec:39:
                    61:63:1b:3b:d4:29:a2:56:71:38:aa:de:a3:cb:8d:
                    ff:a1:e0:0b:81:10:58:b4:9a:52:62:35:40:a4:37:
                    6c:64:f2:9b:57:15:7e:04:1d:26:e8:53:6f:8c:65:
                    d5:dc:66:4e:3f:17:9b:00:40:2b:3a:dc:53:42:20:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.252.0/22
                  138.186.60.0/22
                  179.189.218.0/23
                  190.110.226.0/23
                  190.211.240.0/22
                  201.222.48.0/21
                IPv6:
                  2803:c100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28103

    Signature Algorithm: sha256WithRSAEncryption
         04:ea:e1:07:62:00:8a:14:d1:31:aa:e1:41:1d:dd:53:eb:bc:
         27:b5:59:e8:d3:31:dd:75:4d:b0:84:16:0a:db:63:1b:ef:9f:
         7c:16:6e:f3:73:7e:0a:91:ab:9d:b8:7a:95:f0:87:b5:65:53:
         bd:6a:7b:33:20:b2:6e:05:96:42:d3:37:74:78:ec:54:a3:33:
         a2:2e:e3:bd:10:59:13:df:83:09:94:21:15:b9:74:2d:14:ae:
         a4:96:33:1b:49:10:1e:7c:58:d5:6d:e1:d3:90:e7:49:07:c7:
         cd:10:90:68:7d:94:2f:40:c4:5f:5b:db:13:3d:b6:f5:f4:f9:
         59:20:30:e2:15:2a:0e:57:f8:ed:3d:a1:e6:dd:82:98:ea:4f:
         45:21:8f:ca:16:07:74:c8:c1:21:3c:32:17:ed:b9:0b:90:a4:
         05:38:6f:22:f5:77:e6:44:16:9b:e2:1c:e2:83:48:25:27:0b:
         4f:9d:a4:ea:db:fc:b9:65:7e:ad:80:f6:65:ca:c0:78:77:b8:
         75:48:16:52:dc:9c:96:66:c3:d6:ec:93:c6:e4:5d:e2:d1:05:
         8e:95:0e:d2:39:32:78:ea:01:03:46:1b:5e:d6:9b:dc:12:94:
         8b:c5:5d:47:f3:05:fd:f4:17:9c:2f:39:a0:55:5b:e5:52:74:
         89:2c:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:21 2024 by rpki-client on console-ams.rpki-client.org