Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
File:                     fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer (raw, json)
Hash identifier:          TE+5a/uHZ/d4dg+kbTASYsHWlbwgAs0Vw92SAqVCsTo=
Subject key identifier:   81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01004B46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2019 00:05:08 +0000
Certificate not after:    Sat 07 Dec 2024 21:02:31 +0000
Subordinate resources:    AS: 28319
                          IP: 132.255.236.0/22
                          IP: 138.185.12.0/22
                          IP: 168.90.156.0/22
                          IP: 168.194.168.0/22
                          IP: 191.98.200.0/21
                          IP: 2803:b280::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16796486 (0x1004b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 00:05:08 2019 GMT
            Not After : Dec  7 21:02:31 2024 GMT
        Subject: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:55:96:d3:36:9b:bb:d9:27:28:d8:ea:1e:
                    e5:2e:f9:16:47:43:81:fa:59:00:50:0b:88:a8:50:
                    b0:72:d9:24:4e:bb:be:04:d9:b8:25:63:ec:86:75:
                    bc:da:b0:5c:f3:7c:5c:77:e3:41:fe:b1:92:4b:d0:
                    7e:3e:6f:d1:b6:ce:4d:1c:5b:be:e8:df:75:5c:ec:
                    20:b8:f3:36:03:54:b7:7b:d1:d6:38:41:ac:42:44:
                    8c:c0:bc:59:3c:89:5b:f6:9c:eb:a7:b9:03:65:01:
                    16:64:9b:73:53:a4:d4:4c:5c:02:54:f4:3a:0e:ed:
                    71:ab:e7:1d:50:31:fc:ab:d3:26:4e:15:59:39:86:
                    1e:37:d6:60:bb:dc:f6:73:2d:ee:74:00:7a:b0:23:
                    e8:10:1f:19:dc:d4:14:b9:e9:e3:29:17:e3:12:83:
                    bf:34:86:ff:21:44:fe:62:09:69:55:9a:43:03:7c:
                    a8:ad:cf:53:f6:4b:51:34:11:37:67:05:bd:41:31:
                    ec:fe:ed:95:7e:38:d7:d6:b7:d4:33:b5:13:24:01:
                    27:d6:0c:27:62:53:43:4d:af:9b:2a:28:0d:bf:ff:
                    c0:56:8b:54:06:49:88:db:72:23:dd:6d:49:21:c1:
                    c3:aa:fc:d5:26:28:23:35:4d:29:d0:d1:60:97:f7:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.236.0/22
                  138.185.12.0/22
                  168.90.156.0/22
                  168.194.168.0/22
                  191.98.200.0/21
                IPv6:
                  2803:b280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28319

    Signature Algorithm: sha256WithRSAEncryption
         48:19:fe:85:be:c4:8a:4e:4f:18:57:e1:7c:da:64:b6:fc:a1:
         36:20:b0:49:27:52:ab:64:c9:2c:e3:8c:fd:05:0a:7d:29:65:
         16:cf:11:97:4d:68:f9:db:45:6f:71:14:58:b2:29:21:55:d0:
         cd:60:4e:85:5b:4a:be:3b:6a:21:85:02:e0:2e:1d:0c:76:75:
         9f:f3:46:6f:e5:af:58:e1:5b:33:3a:37:8c:9c:eb:f2:ca:c0:
         d9:18:35:4d:1c:e1:ab:bb:1f:4f:28:e4:7e:4a:43:7c:17:70:
         41:61:09:24:f2:19:03:1e:22:cc:24:dd:4d:8f:d0:4c:24:9b:
         f8:d1:ed:bc:16:61:2c:02:1a:2a:36:a0:f2:3c:c7:48:98:ce:
         f2:e3:b2:08:54:89:73:d6:1b:2b:87:d3:8b:29:bb:26:d3:e4:
         3c:91:0f:2f:e9:9b:e6:b1:79:61:4d:ed:c3:d2:98:2e:2a:b9:
         d1:eb:a6:f8:e0:86:df:73:c9:72:3c:17:00:cb:37:b8:23:ea:
         34:f5:f4:f9:b9:0a:91:99:00:82:dd:c5:f7:49:13:13:71:11:
         37:a8:b4:a3:32:99:34:51:fd:4b:95:d0:fb:c5:e7:f6:1f:68:
         4d:83:cd:14:06:15:43:29:af:a0:78:3a:b7:de:fc:9b:c6:74:
         01:0e:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:39 2024 by rpki-client on console-ams.rpki-client.org