Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0d97239c672aaf558151333ba884776ee069539.cer
File:                     e0d97239c672aaf558151333ba884776ee069539.cer (raw, json)
Hash identifier:          RHWjGoH0UCx5t5PYOnOfMYtvZILx0qJqj3PQo6WLX8I=
Subject key identifier:   0C:2B:24:A0:12:A0:14:5D:40:FF:F7:F9:54:B0:80:6C:F5:2E:E4:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108C805
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d7d652ad-5739-45f9-bdcf-0d83644c42a2/e0d97239c672aaf558151333ba884776ee069539.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d7d652ad-5739-45f9-bdcf-0d83644c42a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Apr 2018 12:09:59 +0000
Certificate not after:    Sat 01 Mar 2025 02:17:35 +0000
Subordinate resources:    AS: 266792
                          IP: 45.234.164.0/22
                          IP: 2803:90a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17352709 (0x108c805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 30 12:09:59 2018 GMT
            Not After : Mar  1 02:17:35 2025 GMT
        Subject: CN=e0d97239c672aaf558151333ba884776ee069539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:a0:72:52:01:18:38:72:d4:22:89:2c:c3:
                    64:be:44:ec:c9:1f:2b:e2:9f:95:22:bb:3e:e1:2d:
                    1e:7b:7a:14:9f:03:4a:76:07:81:8d:f3:10:96:c8:
                    e1:9d:45:6f:04:70:e0:ed:a8:6a:0a:eb:db:aa:ae:
                    a2:3d:c3:96:f9:bf:f5:97:39:7b:1c:d3:0e:98:ed:
                    40:7f:0a:d5:ef:95:79:78:ca:1c:a8:d3:42:38:88:
                    ac:fa:8f:84:d1:1c:20:15:d6:5f:0a:17:05:96:2f:
                    b5:cb:bc:8f:ac:9f:5d:15:2b:92:65:5a:e0:c5:bc:
                    ea:05:66:c5:77:3a:ad:cf:fc:9d:81:68:45:31:3c:
                    93:c0:5c:b0:a0:26:5e:32:1c:6f:d2:e3:4c:76:0a:
                    86:08:63:8f:64:c3:48:d3:a4:8b:06:5e:99:20:2a:
                    62:3d:89:af:a5:12:91:fc:87:72:51:82:1b:bd:54:
                    75:cb:85:a3:04:db:ab:74:9c:ef:3b:8d:c1:7f:54:
                    d2:88:89:48:95:a4:9d:a7:2b:1a:6b:02:b6:e9:c2:
                    88:21:3b:c1:e2:ce:44:27:a1:97:9e:49:17:a1:57:
                    47:28:8d:fd:6c:46:02:c2:5b:98:2c:e9:68:5d:86:
                    b3:c9:36:9c:19:76:f4:56:9b:f8:76:65:b9:32:95:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:24:A0:12:A0:14:5D:40:FF:F7:F9:54:B0:80:6C:F5:2E:E4:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d7d652ad-5739-45f9-bdcf-0d83644c42a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d7d652ad-5739-45f9-bdcf-0d83644c42a2/e0d97239c672aaf558151333ba884776ee069539.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.164.0/22
                IPv6:
                  2803:90a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266792

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:9c:de:ca:77:31:4a:86:fa:a9:92:32:32:bb:02:50:76:
         a0:5e:c9:b0:02:a5:b2:36:38:f0:97:d5:89:70:27:a3:96:d2:
         45:0c:a8:91:2e:a2:4d:f6:c7:4f:f0:c4:d9:17:e9:f2:d0:82:
         42:20:9e:cd:64:6b:11:13:7e:77:6d:4e:fe:b6:58:db:f9:7d:
         3b:b5:3f:90:23:cb:ef:6d:62:06:f3:66:c7:fd:d0:f7:ff:e1:
         f4:db:0a:ff:f2:b7:49:65:06:13:c3:e1:3e:05:4b:d0:7f:a5:
         7c:19:f9:52:0c:7e:0a:e7:0f:9b:78:8e:9c:7e:e9:19:c9:74:
         2a:9a:10:96:21:57:4c:fc:25:9f:8a:a5:ce:ea:d3:32:10:5f:
         07:f3:63:6a:22:80:d4:81:1d:22:f0:3a:56:a4:d5:4d:9e:f7:
         52:66:bf:0b:a4:8a:4b:87:8c:78:3d:f4:c6:bc:8e:90:67:81:
         18:99:68:c5:84:61:97:1d:d9:f7:02:e9:65:c7:99:ff:fa:8b:
         8a:f1:d1:7b:33:19:fa:6f:58:7d:11:1f:f7:d4:15:1b:be:b3:
         c5:a2:5e:58:cb:25:39:4f:c4:67:19:19:11:08:6d:37:6c:0c:
         25:e1:74:2d:e0:57:d6:12:e1:f0:28:db:11:69:c7:1a:e8:f6:
         d9:84:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:31 2024 by rpki-client on console-ams.rpki-client.org