Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
File:                     e5402bfe1ad870c061abac12431f9dd6da475fb9.cer (raw, json)
Hash identifier:          qq7C4w3Zy3I0yf2uvEo4pEkTTUKzR5FQCPSJIlONnes=
Subject key identifier:   7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105A1E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Sun 02 Feb 2025 22:19:44 +0000
Subordinate resources:    AS: 28050
                          IP: 200.74.248.0/21
                          IP: 2803:2040::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17146338 (0x105a1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Feb  2 22:19:44 2025 GMT
        Subject: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:cc:82:3a:8c:ef:12:15:b7:89:ee:dc:7e:
                    96:2b:ad:3f:8b:46:0c:a3:d3:88:5b:69:0b:df:95:
                    28:c8:5d:73:f6:d1:1c:1d:15:4c:ff:5f:9b:ac:40:
                    7b:29:4f:0c:2c:b4:e9:dc:46:ac:26:8b:95:6f:cf:
                    a5:52:06:2c:0f:6a:32:46:2e:35:28:04:a1:e0:0b:
                    3d:1e:ad:8a:bc:84:a0:38:4b:cf:a5:26:c1:21:61:
                    7d:4f:88:68:2a:00:16:f5:fb:74:46:3e:21:e2:d4:
                    55:f7:9b:ff:5d:f1:10:28:75:31:dd:2b:b3:eb:68:
                    7e:d4:c5:cc:55:2c:81:19:b9:03:b1:d5:9b:6b:ac:
                    e7:b5:70:ea:46:9e:0d:9c:98:03:19:a1:c8:37:7b:
                    63:2a:9b:c6:d1:9a:3f:2a:a6:46:22:bc:67:3c:06:
                    03:ae:ad:b1:b9:be:5d:5d:a5:26:e5:54:95:99:a2:
                    6f:d2:14:0c:a9:a7:8c:5e:e5:c9:c4:4f:05:f5:97:
                    25:ce:c0:0c:91:55:79:16:2e:93:16:b5:a5:6f:99:
                    6e:b3:60:32:db:0a:a3:cc:32:0e:4a:a8:72:9a:5f:
                    84:13:0e:97:f7:70:b1:c7:db:82:d5:38:4e:d6:36:
                    3f:8d:99:ab:13:8a:bf:1e:70:9f:68:93:89:b2:04:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.248.0/21
                IPv6:
                  2803:2040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28050

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:6c:81:04:3b:20:80:f5:f1:6a:45:1d:10:3f:de:63:cd:
         08:b3:f0:f5:77:66:81:e0:d3:68:6c:a2:20:28:bb:bb:26:53:
         9a:cd:59:d7:68:14:0c:14:e9:85:3b:9d:af:c5:05:29:17:ee:
         a0:11:0e:f4:4d:bd:10:75:23:ee:63:e1:54:6c:f2:4a:33:01:
         c2:0f:76:57:3b:bc:c4:b0:02:6b:53:cf:40:21:3a:f9:51:72:
         77:e6:38:60:d0:24:db:e3:af:d1:b2:36:c9:1f:a0:1a:64:8c:
         6e:2f:1b:f7:79:f6:46:24:05:a3:d2:29:1e:84:f0:d1:dd:f8:
         6a:15:61:6b:7f:7e:e8:c5:db:3d:a8:65:3b:b3:67:0e:48:00:
         0e:ad:92:10:3d:48:2e:29:eb:13:84:f7:9c:55:be:ca:d4:62:
         61:1d:b0:89:ad:b8:73:62:64:73:2a:ec:55:39:99:ea:37:f4:
         20:2a:6a:e6:15:37:a2:dc:71:3b:c6:0b:e0:84:dd:a9:fb:b7:
         d7:cf:6d:9a:4a:6a:04:32:6c:e7:9f:d1:c1:89:e1:c9:43:ce:
         c9:f5:47:71:12:a4:e5:5d:a9:20:ab:1f:c6:3e:ad:93:57:a1:
         9e:57:00:f7:c4:d1:f8:26:f9:b9:38:e7:b9:93:26:9b:83:dc:
         c1:44:54:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:58:52 2024 by rpki-client on console-fra.rpki-client.org