Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4148fec5d63878beccdfd61c25ec33637126b8c.cer
File:                     c4148fec5d63878beccdfd61c25ec33637126b8c.cer (raw, json)
Hash identifier:          sgzZkYnWVV+W33DPaSFOVtVFBatxgDQrUGvFP7xlzuA=
Subject key identifier:   AC:A2:08:E8:AB:CB:89:32:61:13:D6:AB:19:30:D6:C7:A1:84:D9:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C4A26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/c4148fec5d63878beccdfd61c25ec33637126b8c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 06 Oct 2019 04:31:12 +0000
Certificate not after:    Sun 30 Mar 2025 21:53:35 +0000
Subordinate resources:    AS: 267879
                          IP: 45.177.180.0/22
                          IP: 2803:4a60::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17582630 (0x10c4a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 04:31:12 2019 GMT
            Not After : Mar 30 21:53:35 2025 GMT
        Subject: CN=c4148fec5d63878beccdfd61c25ec33637126b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:0f:34:89:e0:80:d0:f4:3b:9d:4f:98:97:
                    43:ef:f5:1b:87:56:c7:7d:d6:e1:bf:e0:5e:6e:a5:
                    39:74:80:d9:96:de:15:77:3e:a2:09:5e:dc:66:fc:
                    01:89:01:e8:2d:2a:56:01:53:f2:83:46:03:c3:4e:
                    af:4a:5c:c4:32:12:09:52:cd:12:1e:1d:a6:83:22:
                    20:35:19:5d:ce:35:69:05:d2:0c:c0:ff:e2:bf:c8:
                    c2:c8:35:50:42:f1:e7:01:a6:d8:6a:65:90:bc:dd:
                    f1:96:3f:c0:03:ca:09:85:b2:66:2c:51:bc:d0:16:
                    eb:d1:98:03:d5:03:c2:f3:8f:77:13:40:cb:b9:9b:
                    1a:15:14:79:ab:85:19:11:56:78:dc:1d:5a:f7:32:
                    8b:3b:0f:31:37:e5:73:26:64:de:53:b4:83:1b:77:
                    29:4a:a3:86:37:fa:8d:be:1e:15:0a:ee:27:6b:3f:
                    fc:9e:79:66:6d:00:84:62:2b:d9:37:05:7a:58:a0:
                    80:73:91:db:8f:e8:a3:9f:c1:a6:01:6c:f7:bd:c1:
                    84:b6:89:60:44:ee:3b:0e:ee:8f:70:d8:d7:13:55:
                    1d:16:fa:ad:22:e7:b8:be:31:6b:c4:e7:23:f4:c6:
                    e5:a0:be:c8:c9:3c:f9:79:4e:21:23:76:ae:fb:eb:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A2:08:E8:AB:CB:89:32:61:13:D6:AB:19:30:D6:C7:A1:84:D9:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/c4148fec5d63878beccdfd61c25ec33637126b8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.180.0/22
                IPv6:
                  2803:4a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267879

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:45:c9:35:b8:19:f2:e9:62:cf:e5:68:82:e0:dd:32:36:
         fc:dd:b2:7b:e2:6b:e3:75:86:d7:bb:ce:bd:6e:3a:86:d9:38:
         a1:ae:3c:17:8d:cf:d0:e7:c3:4f:3f:66:d2:48:56:0c:ff:25:
         1e:b8:29:2a:21:60:e1:43:ee:9e:94:aa:e9:87:34:21:a9:17:
         3c:da:04:36:c8:93:b6:cf:a7:8c:92:4d:79:5a:4b:60:c5:6a:
         dc:e1:2c:65:4b:48:eb:bf:72:31:1f:60:fc:07:dd:73:44:1b:
         54:b4:fd:33:9a:90:55:91:51:13:6f:92:11:03:e6:3d:54:2a:
         3c:8a:15:a6:76:16:67:04:ad:07:64:ed:9b:51:41:7d:e1:ac:
         a7:bc:26:71:ee:26:60:2b:1e:b7:7a:87:53:8b:c3:e9:28:0c:
         8e:ca:a8:82:1d:b8:69:ba:ed:8b:6b:ce:eb:f3:af:95:f6:09:
         16:38:48:db:29:e6:f7:d0:d8:4b:c1:ac:a1:b2:37:1e:ee:0c:
         bd:e3:8e:ca:83:e3:cd:f0:b6:1b:29:89:7f:65:e0:61:64:75:
         66:a9:70:b8:0a:c5:0b:46:bb:af:b0:6c:e8:07:57:8d:89:02:
         25:0a:d3:e4:b5:24:9c:78:f4:29:c7:2e:c0:14:b8:4d:43:3d:
         93:66:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:27 2024 by rpki-client on console-fra.rpki-client.org