Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb5a270d24e9a7e70b31e2a8022272af60ae7030.cer
File:                     bb5a270d24e9a7e70b31e2a8022272af60ae7030.cer (raw, json)
Hash identifier:          TomsayrxiBGXvHeTOIdEE7xsNreIIg3ZPtb3fnn1F8o=
Subject key identifier:   E7:65:F2:16:DD:BC:8E:9C:31:A4:C6:2E:6D:98:E2:27:7F:C0:B9:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F97E0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/bb5a270d24e9a7e70b31e2a8022272af60ae7030.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:58 +0000
Certificate not after:    Mon 14 Oct 2024 23:16:29 +0000
Subordinate resources:    AS: 269885
                          IP: 179.0.29.0/24
                          IP: 2801:0:480::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16350735 (0xf97e0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:58 2017 GMT
            Not After : Oct 14 23:16:29 2024 GMT
        Subject: CN=bb5a270d24e9a7e70b31e2a8022272af60ae7030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:e8:68:e5:aa:c6:8e:5c:7b:92:02:03:89:
                    cb:ed:04:bf:53:fe:96:11:19:0b:06:22:45:1e:e6:
                    2e:c9:6f:16:c9:4d:0b:2e:d1:66:6f:6b:43:6c:66:
                    b1:d6:3c:14:89:0d:2f:65:96:4b:10:a2:21:b5:4f:
                    4c:cc:fb:66:a5:41:f1:76:c8:e1:bd:d3:73:41:8e:
                    69:40:00:cd:20:d0:55:5c:de:7d:e9:99:31:26:7d:
                    7b:5e:4d:4d:00:27:d1:d6:6d:06:c3:8a:03:ab:8b:
                    b2:86:00:17:26:e3:f1:29:c3:f9:2f:fa:f9:53:66:
                    82:17:fb:a6:89:15:0e:46:a3:96:c6:39:a4:a7:77:
                    ac:5b:38:f4:5a:02:e3:ac:08:ac:8d:02:c8:9d:7e:
                    98:dd:0a:70:3a:11:f1:ef:ae:4b:00:0b:12:b3:95:
                    20:de:2c:dc:f1:67:9f:4f:be:30:7a:6b:32:a8:03:
                    c8:97:13:49:4f:f9:5b:27:8f:0a:d8:fe:9e:a6:a6:
                    b6:1a:9e:86:fe:d4:01:70:51:1f:87:68:9e:2a:5a:
                    9e:e5:bf:08:37:c2:1c:49:d2:f2:1b:ce:64:9b:9b:
                    3b:96:34:c2:64:fc:f5:4a:89:34:7e:9d:e4:79:86:
                    35:50:44:8c:87:fc:fc:31:ba:a7:bf:85:bb:bd:09:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:F2:16:DD:BC:8E:9C:31:A4:C6:2E:6D:98:E2:27:7F:C0:B9:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/bb5a270d24e9a7e70b31e2a8022272af60ae7030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.29.0/24
                IPv6:
                  2801:0:480::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269885

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:58:57:b8:2a:ca:41:43:d0:ff:c1:f4:f1:01:6f:81:8c:
         4b:57:74:fb:a8:9f:0d:27:39:3c:3f:cc:c6:cf:8e:f6:96:3a:
         95:44:02:30:11:42:09:08:b4:9e:c7:65:65:da:96:2c:8c:a2:
         2a:4c:5e:08:3b:ca:19:b5:17:8c:a0:90:d8:05:26:6b:d3:03:
         94:34:fa:63:4a:bc:0e:3a:7a:a6:29:9f:60:4e:10:01:20:04:
         fd:15:ec:f6:73:a9:e6:60:c1:e3:11:5c:7e:02:f5:70:41:ef:
         9d:a4:70:7e:c9:ea:65:08:e0:72:83:6d:fb:3a:25:4a:0c:cf:
         bb:4a:22:15:06:ec:cd:03:05:65:28:37:b6:67:d2:71:d7:45:
         5c:fc:fb:75:61:a0:ce:91:5a:7e:31:bb:c3:e6:d5:38:1b:3b:
         ba:1f:e5:0e:5c:01:e4:7c:ba:a1:ab:a0:99:e1:4c:d1:85:fc:
         98:f8:63:43:cc:f3:43:30:e0:4c:63:74:b5:7c:32:7d:65:bc:
         80:24:c0:3b:8a:5f:83:9b:53:74:db:a1:2d:00:87:69:3a:a9:
         fa:ff:73:6d:07:d2:24:0e:f8:bb:15:50:5d:95:29:df:64:3d:
         16:c3:86:da:b5:89:e8:d8:2b:86:ef:0a:0f:15:35:9a:31:dc:
         41:96:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:24 2024 by rpki-client on console-fra.rpki-client.org