Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e2ae5210e2706096a35963c0712c39ac108d6e.cer
File:                     c6e2ae5210e2706096a35963c0712c39ac108d6e.cer (raw, json)
Hash identifier:          LgyhJBJqLQPERmWKnwYZs/pjLKaeYJ5wzNqg8ivqWD0=
Subject key identifier:   00:7C:73:EB:3E:E2:AC:3E:4E:06:B1:6B:7C:34:CC:82:1C:EF:22:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DAEBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/c6e2ae5210e2706096a35963c0712c39ac108d6e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Sat 12 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 52488
                          IP: 200.3.144.0/23
                          IP: 2801:190::/36

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17673917 (0x10daebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Apr 12 06:00:00 2025 GMT
        Subject: CN=c6e2ae5210e2706096a35963c0712c39ac108d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:08:14:a4:dc:8c:f3:95:d7:db:ef:92:26:
                    6b:57:36:90:17:a1:9a:57:10:37:93:e2:b5:3e:b9:
                    9e:70:ed:1c:20:3f:e8:95:79:e8:c1:c4:10:3a:83:
                    97:73:2c:54:c2:e5:30:13:ce:1e:cb:76:7d:90:cf:
                    49:7b:aa:f9:45:c8:f8:76:f5:e7:4f:cc:c3:ee:64:
                    2a:3f:2e:19:2d:d7:23:f9:d8:08:77:d3:ff:ae:de:
                    8b:cc:1e:9e:9e:16:1d:fb:d1:86:9f:c1:9d:17:1e:
                    a5:ba:1b:16:44:6d:df:46:e1:aa:0c:04:91:61:27:
                    53:5b:fa:a8:47:31:3a:8d:5e:a4:c1:ec:49:68:e7:
                    39:48:05:a2:6f:fa:07:11:25:82:92:60:76:b2:95:
                    b0:ba:6b:bd:83:10:8e:1e:b0:2f:69:27:67:92:f2:
                    a9:27:ba:bb:18:e1:23:59:94:16:13:de:3f:cc:08:
                    21:ca:17:b3:43:80:98:82:08:92:6f:b0:d5:ee:05:
                    43:0e:42:a6:e5:3c:0f:ed:a7:cb:f0:7e:c7:ae:12:
                    e7:2f:ff:13:ee:02:dc:93:00:a0:a3:fe:0c:17:b3:
                    cd:79:62:e4:94:10:1d:52:88:82:02:11:e5:ba:68:
                    b9:75:19:1e:23:50:20:4c:a0:e4:5f:47:f1:1c:24:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:73:EB:3E:E2:AC:3E:4E:06:B1:6B:7C:34:CC:82:1C:EF:22:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/c6e2ae5210e2706096a35963c0712c39ac108d6e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.144.0/23
                IPv6:
                  2801:190::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52488

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:e2:a5:9f:83:99:10:72:01:7d:13:03:3e:59:72:50:9d:
         dc:79:de:17:65:f2:73:b3:bb:a1:a9:ca:6a:0a:a6:53:33:9d:
         f7:d3:c0:b6:6b:32:ad:11:4f:df:73:28:40:3c:98:0f:d1:9d:
         d7:d9:c4:93:2b:70:76:7c:8e:be:45:d7:a2:31:f7:84:49:09:
         53:e5:39:6e:22:6d:51:64:aa:ef:f5:07:32:90:69:a8:f7:53:
         4f:eb:ef:14:84:6c:3b:7c:2c:4e:ed:8e:c9:3c:af:07:2b:08:
         17:e2:a1:93:2f:d6:03:cb:48:f5:76:7c:9e:6c:8b:55:79:19:
         48:13:c6:9b:bf:31:47:96:bf:83:3e:09:b9:7f:87:40:c0:f5:
         fa:0c:2c:e4:40:b6:06:3c:d2:ee:1c:0e:12:07:22:e3:38:24:
         75:9a:c8:1c:07:a3:d9:72:56:dd:a8:b9:00:26:56:17:ad:f8:
         c2:6d:37:ba:00:44:51:55:46:7d:de:6f:94:ee:e1:40:2d:d9:
         a0:fc:94:2c:51:e8:47:ba:36:e8:c7:d5:76:5c:21:88:50:39:
         d6:11:cf:c1:d1:54:cf:18:c9:63:41:84:d5:0a:74:b4:5e:20:
         e2:39:12:46:58:e1:95:1c:d6:a8:9c:bd:58:17:c8:65:1a:75:
         c7:b6:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:24 2024 by rpki-client on console-ams.rpki-client.org