Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer
File:                     bf38729659b3ab84a635f8b5534cde56fe622a7b.cer (raw, json)
Hash identifier:          Aib7+i9LPyFz8GyLHSy+GMfr28+83dmI5+F1Q8enxC0=
Subject key identifier:   A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED85BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:26 +0000
Certificate not after:    Sat 13 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 14232
                          IP: 138.219.4.0/22
                          IP: 170.78.200.0/22
                          IP: 179.51.80.0/20
                          IP: 201.219.64.0 -- 201.219.111.255
                          IP: 2800:2b0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15566269 (0xed85bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:26 2017 GMT
            Not After : Jul 13 15:00:00 2024 GMT
        Subject: CN=bf38729659b3ab84a635f8b5534cde56fe622a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:63:2f:a9:29:e4:25:36:13:47:c5:f2:8c:
                    99:10:7c:e0:94:85:a7:3e:5b:fa:cb:b4:c7:81:1b:
                    96:bf:87:80:68:9a:36:24:18:39:7d:9d:9d:ae:15:
                    3f:64:d5:9d:73:f1:fe:70:94:d8:db:df:b7:5e:90:
                    2b:13:67:c0:b0:e9:f3:37:c8:df:bb:45:4b:d0:a2:
                    f8:1b:0a:76:30:18:e6:66:91:63:58:dd:99:c7:e6:
                    ef:a7:94:68:4f:c1:2a:09:74:11:71:31:b4:06:0d:
                    a0:55:cc:07:50:2d:eb:64:3a:29:a7:d0:ac:8a:a3:
                    02:93:8e:7b:b7:12:be:d5:06:f4:04:98:7a:16:38:
                    39:45:50:50:8a:af:66:22:a2:09:e0:0a:de:65:e4:
                    fa:01:68:ea:be:66:e6:92:cd:fb:e1:a0:68:8a:51:
                    a2:c6:ae:08:7e:49:29:75:cf:6b:2b:ca:45:f5:d3:
                    31:c1:0e:dd:53:6c:d9:c5:95:aa:68:1b:fe:e5:49:
                    63:f3:12:f1:44:54:d0:81:06:1d:6e:ea:50:3f:08:
                    b2:59:c9:3f:0f:a0:09:ee:0d:ca:24:00:67:a3:9a:
                    2c:72:4a:a3:46:78:f9:a8:65:63:01:ed:88:8c:62:
                    85:55:14:e5:d4:8f:70:59:18:82:34:ea:35:26:fd:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.4.0/22
                  170.78.200.0/22
                  179.51.80.0/20
                  201.219.64.0-201.219.111.255
                IPv6:
                  2800:2b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14232

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:0b:f6:4b:2f:18:d1:d7:f9:65:27:91:bc:62:93:23:d2:
         2d:a8:30:fe:ba:80:94:38:71:50:97:9e:62:90:65:42:24:e7:
         b7:7e:9e:ec:7e:c3:7d:f4:98:7f:0a:b3:fb:79:19:89:e6:15:
         fd:d8:f2:ec:ea:97:46:41:ff:8d:14:fd:ce:94:88:ad:ca:e0:
         bd:e5:b6:78:1a:eb:97:50:14:22:2d:66:50:f1:ca:65:2f:3f:
         95:78:c1:88:aa:a9:b7:e5:6f:7e:45:16:26:42:2a:a4:9f:c9:
         c5:cb:8f:2c:a2:f1:13:a8:da:13:30:41:59:61:9a:35:b5:ac:
         79:b7:b2:40:07:07:f5:fb:5c:06:a6:28:1b:9a:61:a5:81:22:
         d4:0b:a1:ad:15:7f:5c:2c:9a:37:a6:3a:23:9e:d9:78:54:f8:
         02:00:99:bb:81:c9:dc:4f:60:b0:1c:9e:96:f1:c5:32:b7:2f:
         60:91:f2:9b:d9:ef:9a:81:af:67:0d:22:7d:3e:ca:4f:c1:d8:
         47:da:a2:a2:8e:4b:54:5a:33:4c:26:bb:ec:aa:e1:73:dd:a1:
         e6:ff:0b:dc:6a:b6:bc:d2:35:6a:53:0b:88:27:f2:fa:14:79:
         b9:ae:19:73:28:59:6b:e7:44:6c:15:64:b1:fc:d6:dc:c9:05:
         12:d7:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:45 2024 by rpki-client on console-ams.rpki-client.org