Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer
File:                     e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer (raw, json)
Hash identifier:          fw1uF+Wolr5xkr5mbUSYdgh13I6h3gw5wlIiwx7XNsc=
Subject key identifier:   95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4B02E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Jul 2019 22:08:45 +0000
Certificate not after:    Wed 11 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 52295
                          IP: 190.211.244.0/22
                          IP: 2803:d410::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16035886 (0xf4b02e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  5 22:08:45 2019 GMT
            Not After : Sep 11 05:00:00 2024 GMT
        Subject: CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f9:9f:39:cb:ac:33:d1:97:d5:c7:d3:ec:af:
                    c5:b3:fc:a0:10:ae:ca:6f:17:07:3f:ce:ad:81:f0:
                    3a:5b:5b:5f:dc:dd:17:53:fe:b1:73:57:c5:38:dc:
                    6b:74:7f:9c:b3:da:50:29:a5:a1:1f:1e:4b:db:aa:
                    4c:9b:52:e3:69:22:84:41:dc:3c:fe:9a:7b:24:68:
                    5e:ab:5b:fe:1d:7a:df:6c:4c:14:83:c9:eb:d4:e3:
                    5e:e3:2f:1d:d0:0a:a1:de:21:1c:1e:5c:3b:f4:5c:
                    6a:a0:6a:93:43:85:cb:de:6d:cc:b2:47:06:02:1d:
                    87:eb:da:94:ff:ca:f3:ba:80:cd:65:04:5f:56:76:
                    7d:09:23:99:0c:13:1a:3d:fc:7f:69:55:b6:30:f5:
                    4c:d3:6f:2a:84:bb:e8:b3:2d:7e:ef:1d:f3:c4:50:
                    37:2e:81:5a:79:af:fa:29:98:67:c0:d0:b5:48:92:
                    e9:fb:b3:fe:8c:71:64:a5:d2:62:f5:77:0e:6c:81:
                    81:2b:3c:6f:c5:95:ab:17:a8:3d:ea:bc:3c:05:58:
                    b9:04:29:b8:57:13:a2:ae:ff:8d:b7:dc:d7:1c:8e:
                    98:23:00:18:0c:2b:2f:db:5c:1c:ae:ab:24:d3:b4:
                    33:56:e4:e0:dc:22:55:22:f9:db:da:bf:8d:f3:f7:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22
                IPv6:
                  2803:d410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52295

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:8b:aa:6f:ed:86:a2:cc:5c:01:b1:78:24:34:67:b6:41:
         73:ef:aa:63:78:17:da:bf:de:1c:60:21:aa:bb:ec:ac:ad:78:
         a6:f7:36:ff:a3:18:3d:52:30:e1:00:a1:58:89:65:1f:94:ac:
         1f:7a:58:94:0b:81:47:31:bd:87:46:38:d7:c2:26:95:9b:57:
         e6:55:36:09:69:6d:72:30:5e:51:b9:eb:23:a3:16:35:17:96:
         6b:d6:8f:fb:9c:ab:9b:d9:07:db:ec:14:39:6e:39:63:5e:5d:
         f3:12:22:2b:70:3c:51:32:6d:a3:32:d6:74:ac:cd:02:56:c6:
         c2:20:61:35:71:0d:81:25:d4:ed:e3:0d:8d:8a:93:d2:f2:52:
         dd:70:07:49:d0:31:ee:36:30:f1:8b:c4:da:52:64:be:1b:b4:
         1d:b9:44:3d:a4:d3:57:e0:67:be:91:f3:8d:c3:19:d0:9c:18:
         d3:6f:6a:ae:68:fb:8c:ce:e0:09:55:8b:89:13:e3:ec:44:d9:
         82:5d:1f:99:a8:9d:e8:df:ab:84:e4:80:5a:8a:7f:30:5e:01:
         b2:5e:cc:05:6e:60:ba:12:f3:5b:38:94:a3:3f:5d:69:47:89:
         7a:2c:d1:a1:0c:b6:24:14:f9:56:f7:4e:48:11:dd:3c:2b:52:
         96:49:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:51 2024 by rpki-client on console-ams.rpki-client.org