Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e073d0961cc52bacaf60ff9bab5a37bf764d4125.cer
File:                     e073d0961cc52bacaf60ff9bab5a37bf764d4125.cer (raw, json)
Hash identifier:          QgJxMujXfcJXgU8NWAgKu8AQqMF3VFgAMfQ3cTKHF2g=
Subject key identifier:   0B:01:73:8E:FA:CC:3D:8B:3C:38:67:20:47:CE:6A:F7:51:6D:7C:05
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104FE9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/e073d0961cc52bacaf60ff9bab5a37bf764d4125.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:20 +0000
Certificate not after:    Sun 26 Jan 2025 15:46:58 +0000
Subordinate resources:    IP: 45.4.128.0/22
                          IP: 138.94.144.0/22
                          IP: 143.208.56.0/22
                          IP: 168.227.128.0/22
                          IP: 190.122.184.0/22
                          IP: 2803:c300::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17104540 (0x104fe9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:20 2017 GMT
            Not After : Jan 26 15:46:58 2025 GMT
        Subject: CN=e073d0961cc52bacaf60ff9bab5a37bf764d4125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:81:0e:6b:fb:93:f5:5b:77:45:63:33:30:
                    81:c3:38:14:c9:75:95:6a:f2:11:cd:6f:21:b2:ab:
                    f7:dc:7b:26:41:cf:93:3b:a3:79:c9:5b:3b:61:4f:
                    f4:b0:f9:b2:e2:46:af:52:5c:79:ea:45:2c:e0:10:
                    93:06:ed:13:68:a2:1f:57:9a:5f:c8:44:3f:04:87:
                    ab:05:9f:bb:b4:1c:b0:05:5d:6d:a4:ab:e0:a7:06:
                    04:fb:35:2e:66:df:29:24:c6:95:47:4a:02:98:30:
                    13:4f:26:28:12:58:f9:e6:f6:94:ae:98:59:85:ae:
                    a5:0c:c8:e1:d7:c6:de:7b:83:df:46:88:48:91:95:
                    56:65:81:aa:e8:07:c1:ef:ee:f4:9e:81:06:90:89:
                    2f:40:ae:7c:ec:e0:24:ad:b5:9a:06:73:bd:73:30:
                    93:f1:48:60:06:35:01:5c:98:85:cc:0a:b5:25:bc:
                    3c:e6:2e:b6:62:b6:71:26:23:de:e1:4c:f2:30:38:
                    8e:05:06:02:e4:8a:b1:dd:1c:0f:01:03:89:8c:fc:
                    3f:1d:54:e1:dd:e1:7d:33:83:db:15:41:10:59:50:
                    7c:c9:e5:b8:8f:d0:3f:37:f0:45:bf:19:73:6f:00:
                    ee:11:50:19:70:b5:f1:4f:24:f0:88:38:d7:a7:b5:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:73:8E:FA:CC:3D:8B:3C:38:67:20:47:CE:6A:F7:51:6D:7C:05
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b2861a11-fc45-4606-bfec-fde6a957aa01/e073d0961cc52bacaf60ff9bab5a37bf764d4125.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.128.0/22
                  138.94.144.0/22
                  143.208.56.0/22
                  168.227.128.0/22
                  190.122.184.0/22
                IPv6:
                  2803:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:35:5a:9c:03:56:1d:60:1f:ce:64:99:dc:48:94:3b:e7:
         f1:8d:35:49:31:4d:83:da:24:89:9a:b2:f1:37:6b:80:4c:96:
         f4:70:08:5e:6b:ad:c2:fc:6f:7a:30:be:b8:33:dd:3a:4e:45:
         d8:d1:62:db:2b:e6:f1:a3:72:9b:8a:da:66:fc:3e:85:ab:56:
         44:6f:9e:c5:8f:a6:c7:76:e2:72:84:ca:ab:f8:b9:34:aa:6d:
         be:98:27:11:86:1e:35:e5:65:fb:d9:09:85:e4:63:dc:82:d5:
         88:ae:60:a7:35:51:f8:4e:40:d4:3d:a4:64:0b:89:98:a4:08:
         be:a1:91:27:05:c0:0f:3a:7b:db:8a:06:55:6a:11:ab:56:6c:
         5a:bc:72:44:c7:14:62:16:1e:78:85:d6:9e:98:7c:e4:9e:a7:
         16:d3:04:14:29:1f:b8:e2:81:85:20:69:25:6c:ff:23:e4:04:
         3d:01:59:d1:40:b2:c9:dd:82:cc:dc:77:17:13:fa:d6:fd:94:
         38:b5:ff:10:0d:d5:da:0c:40:d0:a5:3c:c3:e4:4d:d5:56:16:
         1a:cb:b4:dc:af:de:06:ec:62:8e:47:bb:d9:ec:88:a0:ff:2d:
         b6:b7:b5:a6:60:89:39:f8:02:ba:06:33:c1:ef:fb:ee:64:f2:
         14:97:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:57 2024 by rpki-client on console-ams.rpki-client.org