Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer
File:                     bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.cer (raw, json)
Hash identifier:          hwodFzKxZlw+dsz4wMFvioCZV9Ig2sVQhaUFC2wzxDk=
Subject key identifier:   0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA1585
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:31 +0000
Certificate not after:    Mon 17 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 27843
                          IP: 45.226.68.0/22
                          IP: 45.231.80.0/22
                          IP: 45.232.104.0/22
                          IP: 143.0.248.0/22
                          IP: 167.249.8.0/22
                          IP: 168.121.44.0 -- 168.121.51.255
                          IP: 168.121.220.0/22
                          IP: 168.121.236.0/22
                          IP: 168.181.8.0/22
                          IP: 168.205.132.0/22
                          IP: 170.0.232.0/22
                          IP: 170.82.96.0/22
                          IP: 170.231.80.0/22
                          IP: 170.231.168.0/22
                          IP: 170.254.232.0/22
                          IP: 181.177.224.0/19
                          IP: 190.12.64.0/19
                          IP: 190.102.128.0/19
                          IP: 191.98.128.0/18
                          IP: 2800:120::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15340933 (0xea1585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:31 2017 GMT
            Not After : Jun 17 06:00:00 2024 GMT
        Subject: CN=bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:0c:b2:e1:96:e1:9f:27:af:25:8e:dd:03:
                    fc:a8:ef:37:b5:40:00:b5:46:71:14:18:04:c0:72:
                    c3:10:33:ae:78:42:a6:d5:9e:85:97:d2:fb:f4:45:
                    31:02:9e:5f:f1:8c:02:4f:bc:ef:b2:f8:39:d4:76:
                    17:67:32:c5:c8:4d:86:58:95:05:a4:53:b5:99:f1:
                    b2:f4:dd:e6:9b:87:6b:4c:7b:e3:ab:01:cd:b5:06:
                    34:ae:5d:cd:13:5d:88:e5:4e:3d:1b:63:f7:a3:52:
                    07:f4:2f:5d:e1:89:cc:82:cb:b0:b1:fd:9e:6e:2d:
                    9d:f3:66:37:a2:cc:23:64:81:b9:84:63:bf:29:33:
                    b9:71:ff:9d:7a:ee:58:93:b1:f9:40:81:a8:fe:24:
                    d2:a6:7f:59:fd:79:eb:4c:69:dc:51:8d:b7:56:f6:
                    17:61:6e:5e:fc:2e:e4:e0:88:b2:30:10:06:ab:e0:
                    50:94:f1:b1:52:b6:31:f1:f0:87:0a:a4:46:e7:f8:
                    36:70:a2:5e:64:9c:0e:23:01:c0:2f:6f:4a:bc:22:
                    5b:52:c0:3c:31:90:52:0d:05:6f:8e:c4:1d:43:60:
                    28:95:41:7a:99:1c:3f:23:79:17:9b:4d:d1:08:8f:
                    4b:b2:b7:3a:6b:38:7a:4d:a0:6a:5d:d9:12:7e:1f:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:26:3B:CE:B9:F7:4D:A9:83:42:09:5A:07:6F:E6:16:8D:F5:83:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f80cb3d1-8335-49f8-b600-49f350103b02/bc60fae2b8b5d118366d0ffb0d7ecacf0167aed0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.68.0/22
                  45.231.80.0/22
                  45.232.104.0/22
                  143.0.248.0/22
                  167.249.8.0/22
                  168.121.44.0-168.121.51.255
                  168.121.220.0/22
                  168.121.236.0/22
                  168.181.8.0/22
                  168.205.132.0/22
                  170.0.232.0/22
                  170.82.96.0/22
                  170.231.80.0/22
                  170.231.168.0/22
                  170.254.232.0/22
                  181.177.224.0/19
                  190.12.64.0/19
                  190.102.128.0/19
                  191.98.128.0/18
                IPv6:
                  2800:120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27843

    Signature Algorithm: sha256WithRSAEncryption
         38:53:bd:07:14:bf:9e:e0:5c:52:23:f4:34:34:1f:03:73:f8:
         46:67:a7:bd:7d:ae:8b:c5:89:47:76:b4:36:34:3b:b7:df:cf:
         09:29:7f:1a:0e:3f:3d:fe:38:57:1f:55:7c:da:4b:65:be:e9:
         66:2e:bc:97:4a:12:ef:e9:77:53:fe:29:21:9a:e4:02:99:82:
         34:32:e3:43:4b:6c:60:c6:eb:b6:03:87:89:76:b6:35:d2:b0:
         f2:5d:9b:dc:65:11:a6:88:8b:b7:63:9f:01:7e:3a:8e:32:11:
         e9:23:c4:0f:eb:55:5b:e6:3f:cb:0b:09:fe:75:5b:16:b9:e3:
         2b:65:cb:0f:c1:39:05:51:f9:81:83:fd:27:68:7e:b9:ef:c4:
         14:29:f5:dd:2a:10:0a:b0:3a:8c:83:0b:61:9a:ce:1c:b0:db:
         9c:13:7f:1c:9f:48:0b:c2:98:e3:ee:8d:e0:60:3f:6e:d6:4a:
         a7:50:55:d0:00:b0:48:3b:ca:4f:ae:f9:2f:e7:7d:18:d6:32:
         59:dd:ed:a0:13:2d:05:bb:24:ea:1f:8e:5b:25:5c:81:29:83:
         cd:e0:51:ed:27:88:92:5f:e9:60:b4:ac:0b:96:b4:8f:16:2c:
         dc:76:88:5b:f9:6c:e3:62:48:27:22:10:53:2d:5c:de:ae:24:
         5d:51:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:40 2024 by rpki-client on console-ams.rpki-client.org