Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer
File:                     f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer (raw, json)
Hash identifier:          Ex9agO8KV7NCJS4F23qTwW75VotZOrRP48k3j/k5oUU=
Subject key identifier:   27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B9FE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Dec 2018 22:35:51 +0000
Certificate not after:    Tue 25 Mar 2025 23:26:31 +0000
Subordinate resources:    AS: 266815
                          IP: 45.237.48.0/22
                          IP: 2803:78a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17539047 (0x10b9fe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 24 22:35:51 2018 GMT
            Not After : Mar 25 23:26:31 2025 GMT
        Subject: CN=f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:9a:27:95:7b:b3:2f:e1:68:c8:d1:b7:4b:
                    35:f9:20:6b:a9:76:d5:7a:44:dc:05:69:64:9f:43:
                    30:04:eb:74:04:d0:d0:c3:07:2b:b7:b9:12:6f:29:
                    4a:01:30:b8:cf:75:fa:ae:48:45:9e:72:68:f9:06:
                    89:ae:be:95:80:a5:27:0f:34:ea:ca:4d:a3:0a:78:
                    a8:22:1e:5f:2e:47:d3:e4:7d:6b:16:00:1e:43:a7:
                    1e:5d:5b:55:79:42:a9:bf:19:e1:51:c0:8e:27:1d:
                    6e:78:1b:9d:2a:8a:4b:74:57:2c:ec:94:82:c1:b3:
                    7b:d3:68:a8:fd:f2:4a:de:22:2d:f8:27:e6:3b:66:
                    1a:fd:47:95:4f:dd:e4:47:0f:f3:1f:9a:21:73:43:
                    6a:38:d0:44:d7:50:90:60:6d:0f:da:0e:63:06:41:
                    bc:df:88:a8:90:77:d6:a6:f0:ba:48:d5:94:9b:c0:
                    07:13:0d:93:9f:65:da:7f:f3:2f:5b:6f:d0:8f:4d:
                    64:3b:76:a8:cd:86:d0:45:a9:6d:57:4e:de:b7:d8:
                    a7:7e:1c:40:7e:14:c6:ac:1e:b3:d4:19:df:6a:53:
                    38:e2:38:8e:b6:a8:66:1e:54:dc:4d:e4:5a:24:fa:
                    56:98:2b:5c:1e:cc:da:af:86:8a:95:20:1a:de:79:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.48.0/22
                IPv6:
                  2803:78a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266815

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:0f:29:03:8f:b9:b3:67:1b:43:2b:7c:7d:f4:25:81:d6:
         0c:28:89:69:6f:82:70:d9:83:07:a8:25:e1:56:47:60:5a:55:
         86:e9:7d:e3:ff:7c:2b:c7:c7:42:41:0a:12:14:76:bf:39:c3:
         80:70:93:a5:06:7d:4e:d2:b9:96:8b:b4:2c:df:da:b8:d1:d2:
         73:fb:7a:d9:76:8b:b7:a8:05:2f:a4:17:11:42:2d:10:3c:5e:
         33:b5:c8:74:2a:cb:4c:1b:41:4a:85:a5:46:fb:6e:16:8f:83:
         5f:20:d1:73:d6:1e:72:0d:5e:5e:cb:07:bb:52:af:ef:21:9e:
         7e:b6:aa:7e:3f:ab:29:2e:a7:8e:85:08:56:a1:40:bc:81:3c:
         4c:83:9c:63:cc:f8:86:df:fa:5d:5f:c7:fe:18:3e:1f:88:f2:
         38:ef:88:05:92:9c:d4:c8:7c:73:75:c5:da:97:85:81:d4:67:
         30:95:0e:8b:32:83:ce:41:12:bd:6e:f0:fc:9e:0b:94:51:70:
         cf:d0:e7:f0:9d:25:aa:47:56:18:7e:77:90:d3:b7:1e:b9:84:
         94:93:88:6c:ce:cb:c9:df:2a:9f:48:33:7e:f9:77:d4:b5:e0:
         46:46:d1:55:f7:b3:66:40:b1:28:a4:99:cf:9e:44:d0:13:50:
         04:39:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:58 2024 by rpki-client on console-ams.rpki-client.org