Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31209578eceb0ae819110ed32dee1b09ec4df21.cer
File:                     d31209578eceb0ae819110ed32dee1b09ec4df21.cer (raw, json)
Hash identifier:          yGI86QG1KViUg0qxZgj7I1wZT1GND7ZBQ5VnFGGSzEg=
Subject key identifier:   F0:85:3A:FA:EE:61:C7:D4:EA:74:FA:14:A3:EC:21:56:40:2A:84:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CD015
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/d31209578eceb0ae819110ed32dee1b09ec4df21.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 31 Aug 2019 23:54:04 +0000
Certificate not after:    Fri 04 Apr 2025 22:16:19 +0000
Subordinate resources:    IP: 200.24.12.0/22
                          IP: 2803:b180::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17616917 (0x10cd015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 23:54:04 2019 GMT
            Not After : Apr  4 22:16:19 2025 GMT
        Subject: CN=d31209578eceb0ae819110ed32dee1b09ec4df21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:f9:4c:b3:91:5e:61:bb:ec:ff:9d:75:6b:
                    24:c6:ad:5c:ee:d3:54:c9:9c:78:6d:4f:ab:56:e4:
                    75:61:5d:6b:62:ae:0c:5e:ee:83:92:77:d1:f5:21:
                    c4:22:fd:71:aa:f6:36:37:fa:17:3c:2c:b3:29:9f:
                    d3:e0:af:63:b9:b1:f2:22:63:a2:3d:28:56:be:aa:
                    b1:68:98:75:93:e2:ef:c9:a3:e1:58:d3:3b:3e:02:
                    b8:fd:a3:75:87:cd:c4:9b:57:f8:80:57:7a:66:86:
                    98:8a:7c:38:6e:88:dd:26:b2:1c:72:cb:c9:76:76:
                    b7:33:08:d3:46:57:d1:6b:58:79:85:31:93:2b:13:
                    4d:26:6a:ab:65:72:77:ab:9f:2b:5b:fa:a3:21:84:
                    3a:01:1d:63:11:d6:2b:97:17:53:f1:64:cc:f6:d1:
                    5f:bd:ac:3f:6b:77:19:48:52:87:a6:c1:f5:7b:30:
                    99:66:1d:57:7e:d6:28:20:24:20:03:3f:fc:93:c2:
                    23:07:32:9a:67:c2:d4:86:44:0a:78:86:29:9a:0d:
                    53:5b:66:91:16:f4:38:a3:71:c3:f1:aa:9f:55:43:
                    fb:b0:c9:a5:0e:70:cf:fa:fa:d8:bf:7e:fd:e6:45:
                    5a:f5:d1:af:ff:9e:e1:fb:53:4d:fe:af:ab:72:9f:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:85:3A:FA:EE:61:C7:D4:EA:74:FA:14:A3:EC:21:56:40:2A:84:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2c4ecc-0a04-42fe-950b-56ed52501d3e/d31209578eceb0ae819110ed32dee1b09ec4df21.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.12.0/22
                IPv6:
                  2803:b180::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:15:3c:3c:13:57:5b:4d:41:d0:07:65:b1:e0:9a:26:c6:
         9d:ea:63:82:4d:a3:70:7f:72:42:e0:21:38:ab:60:26:06:ce:
         3d:77:9d:3e:85:6d:80:af:d7:ed:c2:02:a6:a3:9d:fa:fb:90:
         4b:74:6b:99:56:fc:81:17:77:75:c8:66:60:64:6f:21:c0:1b:
         f7:16:2c:20:47:fa:3b:2d:28:05:69:ef:ac:b9:c5:46:3e:5c:
         22:24:91:90:3a:93:55:e3:63:23:ea:52:9c:0f:43:8f:ce:91:
         3a:b0:10:8a:c9:2c:96:58:8f:b0:27:3a:97:0c:f2:62:c3:30:
         b0:07:4e:d2:e4:4a:06:40:65:52:a1:3c:eb:4e:01:a2:63:f0:
         67:e6:ec:d5:85:1e:01:ed:3c:33:e9:6c:8d:76:f6:5b:89:a2:
         3c:51:55:37:9c:75:45:d1:64:83:03:57:80:a1:43:17:d4:db:
         71:52:64:84:d7:a9:8f:40:08:88:7d:5b:07:80:6f:3a:62:fd:
         56:af:3d:7b:e7:e3:b6:b3:9d:93:50:99:3d:5d:74:c6:14:13:
         e7:32:4c:79:88:60:f9:d0:10:cb:a3:84:bf:4c:c7:26:e6:0a:
         b9:9a:9a:2a:5b:a2:71:ab:63:24:9e:72:23:06:1b:af:8e:cf:
         17:88:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:38 2024 by rpki-client on console-fra.rpki-client.org