Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
File:                     ef2d0ae672567bf0e707903589365faae1ff0bbc.cer (raw, json)
Hash identifier:          9+yDYd9ly6EkPJykoxDzM/Jx8fd/q8jfDsHiZZJWFP8=
Subject key identifier:   72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F05DFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:48 +0000
Certificate not after:    Fri 02 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 21826
                          IP: 167.249.32.0/22
                          IP: 170.84.136.0/22
                          IP: 181.208.0.0/16
                          IP: 186.14.0.0/16
                          IP: 186.188.0.0/17
                          IP: 190.142.0.0/16
                          IP: 200.8.0.0/16
                          IP: 200.75.96.0/19
                          IP: 200.82.128.0/17
                          IP: 200.229.152.0/22
                          IP: 2803:8100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15752700 (0xf05dfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:48 2017 GMT
            Not After : Aug  2 06:00:00 2024 GMT
        Subject: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:a0:2b:0c:d0:24:7a:fa:2b:7f:0d:11:7a:
                    cb:a5:ab:28:b9:1a:60:ea:af:ac:78:e2:bc:68:44:
                    89:cf:2c:a5:8d:00:84:13:1f:0d:be:26:0d:2f:e3:
                    43:22:4b:80:d0:b4:e9:d6:28:75:b7:d0:d9:e8:71:
                    44:58:5e:a4:b0:c5:1f:41:a3:29:22:1a:b0:24:9b:
                    90:62:5a:6c:2a:bd:d4:bc:fe:48:76:b4:e8:83:64:
                    63:44:00:76:5b:bb:3d:5a:83:bc:f3:dc:36:d2:72:
                    c0:3c:91:c5:cd:83:a2:91:05:07:4d:c9:ee:05:06:
                    37:f9:15:9d:42:1d:15:a1:de:f4:64:c9:83:74:ab:
                    22:9e:ed:54:62:84:c9:e9:5f:6e:d8:d2:34:c1:d0:
                    2f:4b:1b:e1:5b:5d:68:59:d9:04:24:02:a6:38:a1:
                    01:aa:e0:cd:da:a0:39:18:31:df:1b:22:c3:c3:4c:
                    85:a8:0f:bd:de:51:69:8e:40:00:cf:0a:7d:e7:c1:
                    ad:f0:86:2c:0f:cf:07:2f:1b:f8:d1:d7:dd:4e:63:
                    7d:0e:27:25:c1:ea:5f:a2:11:af:e3:bd:2b:a3:65:
                    c0:b9:40:b4:9e:da:be:16:b3:ee:35:88:de:8f:5d:
                    90:4e:c5:45:72:22:e1:1d:87:8d:fb:e3:da:46:78:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.32.0/22
                  170.84.136.0/22
                  181.208.0.0/16
                  186.14.0.0/16
                  186.188.0.0/17
                  190.142.0.0/16
                  200.8.0.0/16
                  200.75.96.0/19
                  200.82.128.0/17
                  200.229.152.0/22
                IPv6:
                  2803:8100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21826

    Signature Algorithm: sha256WithRSAEncryption
         14:32:da:00:a9:f8:75:5f:5e:be:9e:ec:c3:77:f6:a2:fd:01:
         be:73:2e:72:a1:c0:b2:9d:a9:39:1e:2b:e1:0d:a6:d8:f6:82:
         2f:3a:50:e3:38:a9:11:f1:db:c7:7c:02:65:5f:59:06:02:a8:
         f9:f8:9a:5a:96:3b:b6:70:e0:89:43:fa:3b:3e:eb:92:d4:86:
         fb:80:ed:5e:7b:e2:4c:f0:8b:55:f8:13:aa:e2:e2:cf:d7:95:
         fd:dd:35:f2:12:fc:97:58:3d:95:da:29:db:b9:bf:6a:e7:e9:
         09:a7:9b:43:18:65:b1:bb:52:0f:b4:7f:f6:22:3a:8d:96:ae:
         4f:c3:a1:6c:2f:e8:ef:ee:b0:47:59:b5:82:d9:6f:5a:98:0e:
         0c:33:10:9e:dc:47:63:df:6e:4a:81:e8:80:2e:51:b2:28:58:
         85:5b:fd:84:f9:bc:0f:40:93:a6:96:9d:38:d7:f9:00:c6:65:
         5a:c5:ad:d5:e0:e5:a0:9b:f3:67:85:52:06:98:f0:c6:53:cc:
         8f:6a:a7:a7:46:02:8e:94:ec:d7:99:da:44:70:27:0e:50:54:
         d4:bb:f7:b3:e0:dd:c6:38:e6:43:67:40:8c:f3:c6:70:5a:b6:
         25:fe:2a:c8:65:44:e3:27:10:84:85:09:10:30:25:da:ea:16:
         10:73:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:53 2024 by rpki-client on console-ams.rpki-client.org