Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d61c6f426b8a2c16c83cb11ccfadec4ae81533fc.cer
File:                     d61c6f426b8a2c16c83cb11ccfadec4ae81533fc.cer (raw, json)
Hash identifier:          jBiObGSTE1bgELMTiSY3u/Mb2x9s47ACZm2cQ83pzvg=
Subject key identifier:   E5:62:22:0F:E2:82:B0:FD:3F:5A:22:EA:76:4B:10:6C:A5:57:24:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E74D49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0fedd1a5-4ee0-4a01-995b-20dfe23abdc1/d61c6f426b8a2c16c83cb11ccfadec4ae81533fc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0fedd1a5-4ee0-4a01-995b-20dfe23abdc1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Apr 2018 12:42:52 +0000
Certificate not after:    Sun 26 May 2024 20:55:38 +0000
Subordinate resources:    AS: 265713
                          IP: 170.246.20.0/22
                          IP: 170.254.92.0/22
                          IP: 2803:f740::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15158601 (0xe74d49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 12:42:52 2018 GMT
            Not After : May 26 20:55:38 2024 GMT
        Subject: CN=d61c6f426b8a2c16c83cb11ccfadec4ae81533fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:0f:b7:9b:0e:31:fe:47:8e:fb:84:e7:28:
                    fd:61:13:24:ef:9a:eb:6d:9a:ce:c0:e1:36:28:52:
                    dd:22:7d:17:63:67:78:56:59:19:2a:b2:79:ce:fb:
                    d0:82:7e:67:fb:8d:1f:17:3c:0d:39:78:bc:23:b2:
                    f0:c7:10:41:47:ba:8c:91:f4:56:1f:c3:41:e0:b4:
                    0a:ad:88:af:d1:15:f8:8e:d7:d9:7c:a5:aa:f8:f2:
                    d3:5d:32:b2:90:dc:0f:35:59:40:84:58:64:e0:a3:
                    67:06:c5:29:8b:8b:00:4a:dd:ea:0e:97:8f:a9:ff:
                    c8:e1:a4:3d:48:a4:b0:a7:f0:ba:96:ce:ad:a1:ba:
                    0b:46:f9:79:4c:25:21:58:e0:82:61:24:76:92:29:
                    6c:b5:43:32:6b:07:d6:87:05:52:73:e2:1f:85:4c:
                    b1:1d:7e:25:e3:76:de:61:f9:63:e4:db:00:4f:91:
                    17:6b:56:05:ac:2a:d5:18:c9:19:56:92:d0:f7:2f:
                    2a:d9:6d:32:21:02:25:d5:0a:c0:d8:6a:d0:42:51:
                    22:53:d2:d8:45:ec:65:a5:f3:d7:4c:54:fa:a9:50:
                    c8:67:cd:75:11:4c:9f:3b:8e:bb:cb:9d:56:b3:f9:
                    d8:e3:ef:57:57:1e:ff:15:1c:6b:91:44:65:96:52:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:22:0F:E2:82:B0:FD:3F:5A:22:EA:76:4B:10:6C:A5:57:24:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0fedd1a5-4ee0-4a01-995b-20dfe23abdc1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0fedd1a5-4ee0-4a01-995b-20dfe23abdc1/d61c6f426b8a2c16c83cb11ccfadec4ae81533fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.20.0/22
                  170.254.92.0/22
                IPv6:
                  2803:f740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265713

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:85:93:59:53:ca:be:5c:45:94:8c:c7:70:00:2b:0d:9e:
         bc:3b:49:22:ed:56:22:8e:8d:30:5a:c7:e8:a7:20:40:29:91:
         4e:5f:6c:f3:aa:f1:0e:36:6e:f1:1c:96:4b:87:ec:fc:0a:c0:
         f7:a9:0a:c0:e7:39:6b:a7:6c:be:54:64:eb:fb:a5:ae:88:e1:
         de:3b:d4:73:73:b3:8b:15:5b:db:7b:7a:0b:e9:83:86:9c:42:
         33:6b:60:d5:d3:ef:29:11:26:25:8b:e2:da:92:d9:57:fa:94:
         42:bb:73:fe:dd:88:d3:99:83:8e:36:b1:df:c1:0c:98:60:98:
         49:8b:56:f0:07:ea:4c:1c:be:f9:42:4d:1a:0b:0e:65:c8:47:
         80:58:a5:d2:d0:cf:a8:c1:f0:55:8c:9f:cb:a3:36:4f:a3:91:
         34:3e:91:82:82:47:f8:08:73:6e:48:54:51:0a:19:87:06:ae:
         da:9d:0b:f3:f6:20:ce:cd:42:15:9f:c3:a2:bf:8a:3a:a2:2d:
         35:8f:4f:a9:24:e1:ae:f8:04:33:f5:ad:0d:ea:12:03:1e:7a:
         f6:d2:4a:c1:4d:3f:fb:8e:9d:33:f7:36:18:b8:34:cb:16:1b:
         3c:e3:1b:8d:a3:69:48:57:08:80:a4:79:e7:87:38:a1:dd:05:
         c4:b3:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:09 2024 by rpki-client on console-fra.rpki-client.org