Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef640f7ea7a6b188596318dadeffcac5ca26a907.cer
File:                     ef640f7ea7a6b188596318dadeffcac5ca26a907.cer (raw, json)
Hash identifier:          9gvyzIbeG2Urb/7Q7HAOnA0e3SFTvx/MoohnsSkzF8g=
Subject key identifier:   38:2B:1B:14:3C:85:03:51:C2:70:92:9B:A3:6D:48:65:F0:31:01:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105EBC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/ef640f7ea7a6b188596318dadeffcac5ca26a907.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:33 +0000
Certificate not after:    Wed 05 Feb 2025 18:28:42 +0000
Subordinate resources:    AS: 264689
                          IP: 168.228.140.0/22
                          IP: 2803:2340::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17165250 (0x105ebc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:33 2017 GMT
            Not After : Feb  5 18:28:42 2025 GMT
        Subject: CN=ef640f7ea7a6b188596318dadeffcac5ca26a907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:ec:7b:5e:a0:00:4a:7c:3a:82:37:29:f8:
                    46:70:ca:fc:5e:10:45:7a:95:69:4d:65:e0:25:ff:
                    c8:65:06:4f:7a:79:fd:49:fe:2b:b0:b9:82:e3:32:
                    41:4b:66:4f:35:70:c5:4b:ba:2c:2d:80:4e:17:92:
                    e4:f3:80:43:de:38:12:95:7d:96:bc:a1:17:ea:ef:
                    fa:fb:ed:89:cc:68:40:01:35:0c:20:e0:e1:72:8f:
                    49:44:20:32:cb:d5:ef:62:49:bd:af:ad:c7:34:27:
                    fa:3a:8d:bb:73:fd:24:3f:df:7c:68:8f:08:a4:61:
                    09:4a:02:7a:46:c3:d4:d7:dc:96:e3:9d:1b:af:87:
                    5a:63:43:08:e4:cf:37:db:5c:50:b0:fc:ff:07:bc:
                    ef:b0:fb:0f:da:26:f6:1f:e0:8e:f5:1e:11:4f:21:
                    76:bc:2a:af:20:a5:46:ef:33:e0:dd:37:c4:b1:aa:
                    d8:d5:2f:ac:ce:c6:e5:c8:8f:4c:22:bf:57:f5:5d:
                    f8:03:ba:06:33:9f:0e:7c:75:48:72:b2:ca:b0:93:
                    02:db:77:f8:69:6d:1d:cb:38:7e:2c:28:c6:88:73:
                    55:49:c4:e3:ee:8b:fc:80:e5:6b:68:ed:6b:62:c2:
                    e6:2c:a4:dd:b4:37:e4:3d:ec:5e:0e:9b:47:79:af:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2B:1B:14:3C:85:03:51:C2:70:92:9B:A3:6D:48:65:F0:31:01:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/ef640f7ea7a6b188596318dadeffcac5ca26a907.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.140.0/22
                IPv6:
                  2803:2340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264689

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:a5:fc:59:63:6b:26:2a:a1:4c:24:f7:3e:a8:84:c2:0d:
         7c:32:9b:07:50:f4:5a:fd:e8:ed:7b:23:f1:dd:50:78:41:99:
         34:55:cd:74:94:a8:90:d6:cf:92:36:61:9c:e5:7b:d2:93:27:
         5a:23:41:ca:e9:52:b1:98:c7:75:6f:30:d4:53:09:80:dc:bc:
         df:49:b9:08:c2:50:c8:2d:ab:1e:74:0c:a4:72:5f:2f:31:dd:
         b3:5b:6d:f4:03:ef:0c:20:4f:d3:33:91:cd:e9:1d:9b:50:33:
         f7:02:61:24:00:72:fa:e5:9f:ce:a2:31:cb:2e:b0:a7:2e:63:
         d3:62:5b:c9:af:1d:fc:92:c0:ad:aa:36:02:72:d2:a7:63:91:
         28:ef:96:50:2a:39:25:c1:5a:84:8a:4b:51:15:88:bc:ca:77:
         94:60:42:fe:d6:81:b5:3a:16:3d:2c:f3:8c:0d:47:7f:35:63:
         17:99:1e:f8:34:a4:91:e0:0a:76:81:8c:d5:ba:7a:23:22:c1:
         1e:db:ed:42:2a:78:70:d3:0b:e9:a8:01:0b:c8:ac:fd:de:31:
         78:c9:8b:dc:a9:9f:29:16:5a:01:8d:d2:00:ff:38:ae:f4:e9:
         fd:b4:12:68:4b:42:44:17:36:9d:11:e1:df:b1:2c:c4:8b:41:
         61:26:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:35 2024 by rpki-client on console-ams.rpki-client.org