Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7d0eab1f7332c0db7693ae68fb7123c50cc4cce.cer
File:                     c7d0eab1f7332c0db7693ae68fb7123c50cc4cce.cer (raw, json)
Hash identifier:          EPipzEo7jp7sZzwqgSYYxeeyINlwLn9v3QPhHgcCxTI=
Subject key identifier:   6B:68:03:2B:FD:B6:05:E7:68:CB:E4:82:B6:48:9F:43:25:FD:34:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B570D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/efeecae9-017d-4bc7-b249-964d97188ccc/c7d0eab1f7332c0db7693ae68fb7123c50cc4cce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/efeecae9-017d-4bc7-b249-964d97188ccc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:19 +0000
Certificate not after:    Sun 23 Mar 2025 20:11:52 +0000
Subordinate resources:    AS: 52477
                          IP: 179.49.120.0/21
                          IP: 191.102.244.0/22
                          IP: 2803:3b00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17520397 (0x10b570d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:19 2017 GMT
            Not After : Mar 23 20:11:52 2025 GMT
        Subject: CN=c7d0eab1f7332c0db7693ae68fb7123c50cc4cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:ab:50:27:5e:ed:dc:99:a6:cd:b4:57:63:
                    d6:4a:2b:37:5c:94:7d:70:5d:9d:ea:be:3c:41:55:
                    40:7d:c4:6e:ef:dc:31:f0:20:cd:d3:ba:dc:8f:be:
                    54:1e:0d:5a:2e:de:a0:ec:58:07:0f:b7:e8:49:3f:
                    20:0b:fd:1b:79:a1:d0:32:fa:e8:ad:eb:37:fe:1f:
                    8f:00:2c:40:83:a4:74:66:6a:69:ce:66:e6:9d:97:
                    4e:df:64:2d:76:ed:e0:ca:1c:54:19:35:61:b3:cf:
                    46:94:66:98:c3:a5:25:57:fb:f4:3c:46:96:5e:88:
                    05:a4:3b:6f:5a:5b:42:e6:a3:25:6a:71:79:48:47:
                    06:1b:2e:70:d6:81:68:af:13:97:c8:14:a4:44:21:
                    47:1a:8a:22:9e:09:fb:c3:ba:bb:88:d6:ab:2a:a0:
                    7e:39:eb:12:1c:b7:f0:d3:31:7b:ce:22:8f:c8:94:
                    4c:75:1a:f4:f9:0f:ba:5f:e1:e1:52:ad:4b:2a:1d:
                    ff:f8:bc:c0:56:b2:ad:af:ef:62:da:1a:d4:03:b6:
                    98:16:cc:99:50:fc:c2:c9:df:0b:6f:11:27:c5:fd:
                    65:64:21:db:89:f5:4a:70:b5:d1:cc:46:e2:4c:a2:
                    62:20:02:33:8b:23:0d:66:5e:76:c4:75:9b:31:72:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:03:2B:FD:B6:05:E7:68:CB:E4:82:B6:48:9F:43:25:FD:34:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/efeecae9-017d-4bc7-b249-964d97188ccc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/efeecae9-017d-4bc7-b249-964d97188ccc/c7d0eab1f7332c0db7693ae68fb7123c50cc4cce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.120.0/21
                  191.102.244.0/22
                IPv6:
                  2803:3b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52477

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:ab:db:b5:c7:70:be:a2:4d:22:5c:43:e6:71:83:a5:b4:
         05:db:37:eb:59:0a:62:59:c2:b9:c7:1b:86:56:c7:7e:f9:26:
         78:98:b3:86:59:89:17:74:e2:56:a1:0a:23:28:b3:21:98:6b:
         98:8b:57:51:46:b7:da:c3:3c:66:31:85:82:31:0c:3d:0e:93:
         60:38:35:bb:f3:df:47:66:35:bf:01:e8:13:21:e7:35:8a:db:
         75:d0:43:13:c3:85:3e:e5:52:40:47:06:e1:51:19:fc:cf:9c:
         ca:52:e2:2d:c9:b6:46:e2:15:d2:b2:d7:d5:e7:01:d9:a7:67:
         be:60:39:eb:23:93:08:b5:10:f0:29:54:80:8b:b8:22:b4:6f:
         20:5c:6f:f6:13:64:3a:dc:50:05:cf:97:ae:a3:b2:9d:6c:d2:
         66:9e:43:ff:3f:96:3d:cc:24:78:c6:19:b0:d4:bd:ee:52:89:
         b4:4f:15:12:8d:de:db:8f:2e:68:22:37:2b:55:2c:e0:0c:c0:
         70:69:ca:32:ff:09:73:7a:1d:86:fb:aa:e1:16:9a:56:06:50:
         ec:6a:ec:4f:d7:ad:d3:c5:62:0d:60:1c:35:09:4a:d7:d6:03:
         52:99:4c:8c:fa:f2:c9:b8:88:1f:fd:d1:76:1b:ae:b8:7b:af:
         da:24:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:28 2024 by rpki-client on console-fra.rpki-client.org