Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
File:                     bd7f33cd5376098fb55565247f8dae5ea5de2952.cer (raw, json)
Hash identifier:          5yVCeFpSZbJeHXbRXsthj9S2hVHY7/dn8EVHilpjG6M=
Subject key identifier:   A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010051A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:12 +0000
Certificate not after:    Sun 08 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 27958
                          IP: 200.50.232.0/21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16798113 (0x10051a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:12 2017 GMT
            Not After : Dec  8 04:00:00 2024 GMT
        Subject: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:0d:b1:8f:a3:06:9a:93:dd:e0:16:61:b8:
                    13:5d:ba:42:12:39:ce:1c:d1:87:fd:9e:41:59:61:
                    a5:70:51:ec:e8:e3:cc:c8:4e:62:07:47:ff:fb:58:
                    37:22:59:8d:16:7d:25:39:e6:93:c9:ab:64:8c:5d:
                    d4:74:b8:f4:f7:9a:08:41:22:87:92:ab:eb:49:92:
                    fe:d4:cb:1c:24:b5:8c:40:0e:1a:1c:dc:b2:1f:73:
                    63:28:19:4a:90:02:03:75:ec:c8:21:02:12:a4:23:
                    e3:ca:1c:b1:52:62:5a:60:69:b8:72:31:fb:d6:34:
                    5b:d4:af:e4:51:f0:e8:1c:89:a4:23:df:3f:40:39:
                    a6:61:6c:59:b3:87:f3:7f:7d:3a:85:33:f7:03:59:
                    8e:f2:90:b1:bb:bd:81:7c:b9:15:0b:88:12:80:f8:
                    e7:97:1b:86:2a:98:5d:35:4b:66:83:66:4b:5d:06:
                    03:2c:39:d4:65:1b:86:ad:2f:04:92:b9:6a:91:92:
                    e2:24:11:ea:4f:b2:a3:81:c6:cc:4f:6f:a8:a9:06:
                    32:17:32:12:c6:64:c2:f1:5a:68:db:71:1b:e0:03:
                    a6:fb:8d:ec:d3:57:1f:48:3e:9f:74:23:25:81:01:
                    ef:1b:df:31:62:d4:f5:f0:06:cc:e0:5f:14:ff:5b:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.232.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27958

    Signature Algorithm: sha256WithRSAEncryption
         14:64:52:0e:18:63:59:ad:93:f7:26:b2:d3:02:cb:67:9f:b6:
         db:94:33:a9:07:40:61:c2:dc:e8:24:10:6d:d8:f9:97:9e:cf:
         ef:d6:33:94:80:5c:01:7b:ef:f6:51:19:f3:1f:b7:6f:ff:55:
         d3:50:e7:68:f4:d9:d3:4e:0b:ab:75:1a:c0:2d:c5:0e:4e:64:
         91:ea:e6:ee:bd:cf:bb:dd:db:33:7d:d0:34:c3:bd:3b:a1:86:
         b8:aa:6f:d9:b9:86:47:af:fa:cc:e0:ff:05:be:7f:64:51:fc:
         ae:50:0c:e9:11:cf:63:50:51:89:c7:c7:c8:21:2e:6f:3c:9a:
         5f:e4:d7:f9:22:f5:89:13:33:86:a1:3b:b7:a2:35:08:cc:c2:
         d6:f9:1e:33:65:e3:61:08:65:d3:99:f3:cc:33:20:3f:a5:a0:
         ed:9f:45:04:5a:41:fa:34:1b:bb:43:c9:78:d2:1c:ea:8e:5a:
         66:2e:ef:67:60:5d:23:d5:5b:fc:d9:39:be:9f:e0:62:c5:07:
         a2:9b:f7:56:47:cd:44:20:9d:4e:69:26:7a:56:43:42:52:5e:
         c6:26:2b:e2:ed:52:d5:ad:71:31:d7:d0:3b:e5:7d:79:22:0f:
         87:56:f3:d0:d6:84:95:e1:09:2d:c6:37:6c:bd:cd:02:39:6c:
         f6:89:74:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:45 2024 by rpki-client on console-ams.rpki-client.org