Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
File:                     fcc25171c7921fdcd117ca7096ecea5ba6358873.cer (raw, json)
Hash identifier:          HbEOcKSSZ/FHn9IATraHnP9cxZwO2ulnQO/N6vTPVTo=
Subject key identifier:   44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       011014A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:16 +0000
Certificate not after:    Sun 04 May 2025 06:00:00 +0000
Subordinate resources:    AS: 27762
                          IP: 190.121.240.0/20
                          IP: 2803:1100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17831072 (0x11014a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:16 2017 GMT
            Not After : May  4 06:00:00 2025 GMT
        Subject: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:43:13:26:c1:a0:e1:dd:30:55:59:3c:08:
                    4a:43:d6:06:53:c6:e8:19:79:bc:96:a6:dd:41:8f:
                    ac:db:7c:1a:10:10:44:9b:bf:f2:0b:60:e7:5b:28:
                    d2:41:44:e6:d5:22:db:2e:55:dd:e7:23:d2:60:f4:
                    bc:3a:57:1e:c4:f8:82:81:45:25:49:30:08:e2:c4:
                    54:1d:0a:a3:80:a1:39:e2:f2:d3:e2:18:d1:52:c1:
                    a5:a2:01:f1:23:ce:83:30:21:2a:94:fa:7f:f4:7f:
                    34:08:a5:4d:b3:df:39:99:2c:0b:4c:3c:4d:d8:ad:
                    cb:3c:ae:0f:5c:6a:a6:05:1e:47:06:2a:e9:1f:5f:
                    9b:0e:05:bd:ea:92:7f:b5:7a:cd:c9:10:08:fb:31:
                    62:29:71:a5:65:2d:b7:86:01:54:8b:e7:44:7d:89:
                    d3:d4:57:61:7d:9e:80:a7:2a:68:c3:d4:ef:39:ab:
                    24:a6:5d:49:75:59:3e:75:1c:04:5d:4b:78:1f:80:
                    d4:ec:54:5c:44:b3:73:55:d8:f3:7f:d8:54:f8:c1:
                    29:f5:e6:04:d8:b4:46:a3:81:15:79:10:75:74:4d:
                    62:7e:95:c9:6d:c7:37:72:24:8c:bc:22:0e:c8:f0:
                    00:81:44:ae:65:f1:c3:33:9a:9e:93:25:26:30:56:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.240.0/20
                IPv6:
                  2803:1100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27762

    Signature Algorithm: sha256WithRSAEncryption
         b0:63:db:90:03:a2:c0:e3:80:dd:b7:62:52:fa:e0:ae:ab:ba:
         01:95:1b:3f:04:7d:c6:9e:6c:c4:8c:00:74:0e:6e:20:1a:f2:
         f2:30:c1:31:6a:2b:6b:af:54:6f:4f:4a:1c:d4:e6:68:73:a3:
         df:52:ee:57:ac:78:e2:2f:7d:12:42:b4:06:99:33:c7:4e:e7:
         e2:7e:e3:bc:b3:5b:6c:3f:56:56:31:53:a6:f9:6e:3c:5d:8c:
         b2:c3:9d:85:34:11:16:2b:c6:aa:14:69:d2:00:07:d6:4e:8d:
         56:71:2e:61:3c:f9:16:0b:2d:5a:2f:43:41:5f:8f:91:be:4b:
         04:ac:75:ac:b6:fb:90:4e:7f:59:d5:1f:07:72:83:c5:c2:94:
         73:59:98:42:27:1a:37:ea:a4:62:b7:c7:4f:88:44:e8:e8:d1:
         05:25:b5:03:a2:9f:ef:1b:94:75:f9:02:5e:af:73:63:cd:44:
         fc:fd:aa:ab:df:6a:78:9d:2b:97:99:11:63:05:12:5d:68:55:
         e3:de:cd:96:68:a6:f4:b2:03:eb:6f:cf:6b:e8:43:e0:d9:22:
         34:4d:2e:70:3f:e4:d6:87:ba:f8:d7:d7:b9:61:38:93:8c:e4:
         09:3d:2e:f5:b2:9f:b2:a6:37:12:ac:57:64:29:8f:40:c1:68:
         9b:f0:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:45:03 2024 by rpki-client on console-ams.rpki-client.org