Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.cer
File:                     d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.cer (raw, json)
Hash identifier:          ZtHDHhW0CCZwF3aABTjP6jC2XBxdOFOECboW9dA/YGM=
Subject key identifier:   10:85:A4:CD:F7:8C:98:7B:F6:A3:6F:7B:6A:13:AC:B2:E8:91:E0:F3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104592F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Nov 2018 23:44:44 +0000
Certificate not after:    Sun 19 Jan 2025 05:00:00 +0000
Subordinate resources:    IP: 131.0.72.0/22
                          IP: 190.93.240.0/20
                          IP: 2803:f800::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 15:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17062191 (0x104592f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 28 23:44:44 2018 GMT
            Not After : Jan 19 05:00:00 2025 GMT
        Subject: CN=d81e5fc116ecd393cdbf8127afbbabd5b1758ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:f6:b4:b5:1d:dc:94:15:24:b9:40:c3:b6:
                    d5:20:1e:9e:d8:40:fc:b9:21:2f:e8:5d:7f:a0:b4:
                    eb:b2:8d:be:d8:85:f3:21:a5:68:2f:13:74:ae:92:
                    c9:c3:5b:57:2b:08:78:0b:25:01:19:6d:5e:02:16:
                    d6:9c:56:8d:9b:5d:d5:42:36:6b:e3:c2:d3:02:e5:
                    ce:63:a9:31:d9:0e:46:2f:6f:8c:06:13:37:d6:b9:
                    de:bf:4a:e7:a7:87:be:25:c9:78:c5:d1:d9:4d:af:
                    4a:dd:c5:bf:79:73:ed:f0:5c:85:4b:b3:16:52:3b:
                    33:e0:0e:49:cb:dc:43:d3:da:eb:ed:70:d2:2f:8d:
                    74:fe:9b:22:47:e0:3a:07:ba:4a:69:a2:b8:e7:1f:
                    42:16:0b:12:c5:5c:21:3a:df:6b:f9:e7:22:f5:60:
                    e4:68:a1:96:4f:7e:a3:fa:57:00:1b:a0:1c:85:e0:
                    3b:70:a6:58:f8:88:51:15:cf:5b:30:41:cc:28:0e:
                    e8:af:d9:85:57:d4:b3:63:87:1f:eb:5c:0a:a8:de:
                    dd:89:21:cb:04:47:31:e2:3e:fa:1e:19:ea:dd:d3:
                    98:7b:6d:53:83:4a:9c:6b:e1:44:1c:c7:cd:d3:3d:
                    08:c4:57:85:8d:6d:b1:01:85:af:44:47:64:70:86:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:85:A4:CD:F7:8C:98:7B:F6:A3:6F:7B:6A:13:AC:B2:E8:91:E0:F3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.72.0/22
                  190.93.240.0/20
                IPv6:
                  2803:f800::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:70:81:6b:6e:fb:d4:dc:a6:66:3a:66:21:8c:95:b7:03:
         88:aa:a6:3a:64:c5:dc:41:5a:64:27:f5:69:63:b5:df:2e:fa:
         d1:40:3f:47:d1:09:a0:88:18:b7:fc:10:a3:0e:d2:3b:9d:06:
         5a:d9:2f:b6:2a:af:b6:43:4f:ec:e6:01:44:c8:54:62:37:a6:
         5e:5c:8b:1e:76:c8:d8:aa:01:41:3e:32:1c:d1:f5:49:5c:9a:
         f9:f3:4e:48:4d:42:fb:a0:d7:d2:31:4b:95:6f:e4:71:5b:f6:
         87:ff:c2:22:ca:fd:66:af:88:eb:4c:4f:5e:5d:00:a5:db:6f:
         d9:30:2e:3e:95:ec:8a:c4:56:22:e2:92:7f:87:2c:3b:1c:c0:
         b9:6c:08:12:20:6f:ec:0c:a4:3c:19:42:ec:69:f1:64:1f:67:
         43:26:1a:c3:1d:3c:55:28:a7:04:66:02:a2:d1:b4:e3:37:60:
         fb:37:1f:f8:74:8b:3b:4a:e0:4a:71:73:72:91:c2:45:18:da:
         93:71:d6:18:dd:fa:b3:55:2d:a4:0d:af:d1:ec:4d:26:ee:40:
         bb:cc:be:b0:b3:be:b9:54:bc:95:97:14:be:00:8b:d5:5d:f5:
         9f:40:56:da:67:6f:53:ec:59:bc:12:72:c2:b3:42:9f:4a:ef:
         09:03:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 15:31:27 2024 by rpki-client on console-fra.rpki-client.org