Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df52fcead31a22a90a8b24772d55bb7133e5da65.cer
File:                     df52fcead31a22a90a8b24772d55bb7133e5da65.cer (raw, json)
Hash identifier:          78MXaP05ZZMZQgVANfXXuqEc37Z2pqrqCGTdyPRFoYc=
Subject key identifier:   B9:CA:AA:5B:15:B8:8B:A8:FB:04:90:61:25:A9:63:C2:BA:81:A5:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CCC48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0702915c-a10f-4f9a-8c12-d1351c55124a/df52fcead31a22a90a8b24772d55bb7133e5da65.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0702915c-a10f-4f9a-8c12-d1351c55124a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 12:00:07 +0000
Certificate not after:    Fri 04 Apr 2025 21:59:12 +0000
Subordinate resources:    AS: 267884
                          IP: 45.177.236.0/22
                          IP: 2803:1a60::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17615944 (0x10ccc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 12:00:07 2023 GMT
            Not After : Apr  4 21:59:12 2025 GMT
        Subject: CN=df52fcead31a22a90a8b24772d55bb7133e5da65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:57:78:23:1e:aa:a1:6a:e3:ce:8b:78:73:
                    86:03:0a:ce:30:31:4b:83:1c:51:7f:5b:28:29:93:
                    b4:e3:12:68:76:2b:c7:73:9c:ec:24:f6:be:1a:87:
                    f3:e8:a9:f0:12:25:fc:7f:cc:55:45:b5:e1:b5:54:
                    08:4a:c7:44:bb:bf:61:d8:80:58:9f:ff:db:b9:66:
                    e2:04:69:f7:fa:6a:2b:73:6f:d8:5b:ee:45:7d:16:
                    a9:6c:46:03:b8:a7:50:e8:19:6a:4c:91:92:15:16:
                    c9:ae:79:9e:e3:ed:27:9f:34:bf:01:a5:84:8d:e6:
                    43:58:1d:ce:98:d0:a2:c8:23:85:90:b8:57:3c:30:
                    79:dc:d1:dd:0c:0e:07:2b:bb:d8:41:6d:ea:45:4c:
                    f8:ab:14:1c:22:91:74:02:0b:ac:3c:44:c7:ab:b8:
                    85:47:c2:16:01:13:df:9d:cf:5e:7b:14:a3:58:9d:
                    40:cf:cd:c4:ea:a5:bb:97:11:64:33:a3:54:ee:45:
                    cb:6a:af:a7:c6:70:07:51:bc:e9:8d:b0:c8:68:b5:
                    1f:ea:73:b8:a7:1a:49:1a:d8:ea:40:12:1b:7e:25:
                    ec:ba:c2:aa:af:7c:b0:70:a4:8b:c2:c1:12:13:3a:
                    9d:de:f5:ba:64:1d:d9:bc:76:03:b0:9b:8a:19:6f:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:AA:5B:15:B8:8B:A8:FB:04:90:61:25:A9:63:C2:BA:81:A5:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0702915c-a10f-4f9a-8c12-d1351c55124a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0702915c-a10f-4f9a-8c12-d1351c55124a/df52fcead31a22a90a8b24772d55bb7133e5da65.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.236.0/22
                IPv6:
                  2803:1a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267884

    Signature Algorithm: sha256WithRSAEncryption
         18:55:7b:1b:f7:d1:43:20:73:12:1e:88:00:db:99:f5:9d:3a:
         66:e3:1f:2e:ee:b0:88:f4:56:ec:1f:3b:bc:37:62:2e:f9:91:
         53:ac:a5:68:87:4d:12:db:3a:3c:95:1f:51:c7:4d:d4:bd:89:
         ae:67:d9:10:5c:de:1f:21:a2:ec:30:22:2f:23:60:77:72:b8:
         e3:5e:a2:d8:06:09:46:17:4f:67:0d:27:30:df:e2:08:11:a7:
         22:47:78:5d:a5:0e:c5:ec:c0:d7:8b:58:47:b0:04:0d:d2:5d:
         9d:b3:21:fa:e5:39:b6:b1:44:05:9c:e8:e1:97:b3:6c:46:bf:
         18:c8:38:33:e1:9c:96:0e:97:51:5f:ca:1a:f0:dc:5a:6a:e4:
         b9:d3:a6:53:82:65:d6:f9:64:f0:7c:a0:e8:1d:54:c1:c3:40:
         35:3b:94:e8:a8:41:c1:98:b7:92:0d:7c:8c:af:90:d8:dc:aa:
         50:82:6c:4f:02:8c:5f:40:2a:c1:80:cf:c5:8e:34:57:a2:9d:
         1b:b7:4c:8b:df:b7:8c:4c:eb:ec:af:53:06:cc:21:6d:fb:fb:
         63:13:29:9b:3c:4c:09:dc:94:d0:79:72:9b:5c:64:04:d5:0d:
         77:ec:b8:64:5f:ec:0f:46:62:65:be:db:30:a0:b7:2d:9d:37:
         9b:c5:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:29:02 2024 by rpki-client on console-ams.rpki-client.org