Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer
File:                     cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer (raw, json)
Hash identifier:          BmFc1MDuy/5x4qz2q8cP+WjZdRDGwHg82dRC0cDNrCI=
Subject key identifier:   D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDED4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:07 +0000
Certificate not after:    Wed 17 Jul 2024 18:04:41 +0000
Subordinate resources:    AS: 264605
                          IP: 138.255.248.0/22
                          IP: 170.245.164.0/22
                          IP: 170.254.64.0/22
                          IP: 2803:9640::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15592782 (0xeded4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:07 2017 GMT
            Not After : Jul 17 18:04:41 2024 GMT
        Subject: CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:76:f7:e4:6e:7b:39:68:3a:97:cd:c9:e9:
                    0c:d0:25:d8:a9:e1:11:0c:ad:13:0a:e5:e1:02:0f:
                    89:91:51:72:ee:10:b4:f6:7a:a4:24:c7:f9:9f:9b:
                    d4:26:5e:68:d1:da:cc:63:0d:a1:fe:4d:8a:b6:46:
                    72:46:c1:f6:37:8a:ae:8a:9e:cb:7e:12:31:d3:7c:
                    d5:d9:de:1f:47:fc:00:69:0f:cf:61:94:94:19:76:
                    a5:aa:cc:92:98:cb:d5:2f:68:a6:38:fa:20:40:49:
                    36:87:dd:bd:1e:e8:ca:ee:b9:2e:65:c8:28:7a:8f:
                    a6:3e:a1:a9:5d:c3:e1:ce:54:4d:d2:e8:ff:72:73:
                    24:e0:41:1a:fc:1c:b7:57:99:14:05:4b:2a:99:38:
                    47:1a:50:0f:45:5d:ee:8c:e2:d0:5f:2b:66:a8:82:
                    e5:1c:8d:fc:1a:e6:92:6c:bc:0d:e2:14:13:f7:5a:
                    5f:35:56:28:ed:19:30:75:83:1c:2e:69:d5:51:9d:
                    db:eb:f8:3f:7a:d1:a5:cd:f3:6e:d9:2d:f8:2d:ad:
                    ab:48:e5:00:7e:5d:a1:ab:fb:f6:26:e7:61:4d:9f:
                    fd:6d:ed:4e:c8:50:0f:7a:3d:76:51:85:93:da:0c:
                    eb:cd:19:64:e3:a1:91:f0:9b:cb:e5:10:5b:f5:f4:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.248.0/22
                  170.245.164.0/22
                  170.254.64.0/22
                IPv6:
                  2803:9640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264605

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:5f:31:87:b1:e7:dd:2f:ef:25:4f:c5:ff:9f:6d:75:fb:
         d7:e8:fa:e8:bd:55:fd:eb:6f:59:85:76:30:20:9b:3f:b2:4c:
         59:e0:eb:8e:e7:39:44:80:9b:ed:1d:85:46:4f:0d:5c:98:ec:
         38:f7:79:4c:43:af:37:d1:f2:09:0d:39:53:32:ee:d7:a1:fc:
         cf:7d:66:62:b8:53:58:e2:0e:4f:5f:a7:b0:45:39:94:a7:47:
         c4:2a:1a:78:7a:b8:e4:9a:34:14:5a:d4:f9:8a:ba:64:ae:ec:
         ea:2c:b3:7d:e8:9a:6d:86:47:42:db:41:92:f4:2b:ff:1d:3f:
         50:60:26:e1:a6:a5:9b:21:21:f2:f8:74:92:4f:22:fb:ef:5f:
         1f:d1:d0:df:1b:a5:56:83:8d:57:7e:4d:74:1f:2e:52:93:75:
         c9:4d:91:3d:23:da:83:6c:46:a0:e3:52:cb:e4:f6:09:13:bf:
         3e:4e:4b:70:20:05:5d:7c:59:36:cf:44:3c:bc:e2:e8:5b:ce:
         ab:07:13:7f:09:93:a9:12:73:a2:ea:34:05:ae:28:c5:ca:46:
         87:01:a9:be:1c:be:f9:aa:3f:a6:fb:2f:fc:3f:3d:70:7d:da:
         81:3b:66:07:f5:71:fa:62:2d:e1:72:67:46:b1:b7:3f:5e:b4:
         58:70:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:26 2024 by rpki-client on console-ams.rpki-client.org