Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer
File:                     fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer (raw, json)
Hash identifier:          QLFliSutM+ayVQSUqfr1KiQBuFpDfkkyJzS6En2borM=
Subject key identifier:   C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108073E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Mon 24 Feb 2025 06:00:00 +0000
Subordinate resources:    AS: 27897
                          IP: 158.170.0.0/16
                          IP: 2801:0:150::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17303358 (0x108073e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Feb 24 06:00:00 2025 GMT
        Subject: CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:e4:49:0d:05:16:d8:8c:04:09:27:52:b2:
                    b6:43:d3:2c:fe:07:3d:c5:54:f1:c5:47:71:45:da:
                    0f:fb:df:8b:bc:87:fb:48:a1:c9:f7:13:50:b7:95:
                    d2:0d:ac:8b:65:ff:4d:03:7c:c3:9f:76:67:01:0e:
                    d5:fa:9b:8e:d3:93:ea:a9:56:a9:fa:bc:12:11:21:
                    53:a1:40:cf:a7:b4:d0:99:4b:cd:4f:ef:a9:55:76:
                    f7:bc:01:52:04:aa:df:d3:40:cd:48:ea:fb:d4:18:
                    eb:b8:40:3b:c9:32:f7:e4:5d:12:4e:e3:8b:10:b4:
                    dc:c2:13:1b:e2:a0:5d:39:53:58:8f:80:a2:07:66:
                    e0:6e:6b:ff:d1:91:e5:59:ed:d8:f7:09:5a:43:57:
                    4e:37:8b:68:8c:9a:bf:72:ff:0b:7e:04:41:27:63:
                    28:18:fb:bb:0f:a3:0c:ad:86:58:62:b0:50:fc:9a:
                    8d:e6:45:18:64:ff:5b:3f:db:40:3d:19:aa:14:68:
                    65:f8:a4:12:13:3e:a7:44:dc:a6:1b:59:17:59:cc:
                    73:21:44:6a:13:2f:0c:b7:d6:f5:9d:64:6b:b1:e3:
                    be:f5:8f:36:43:6f:f9:2c:b2:5a:4d:3d:74:81:fb:
                    a3:6c:d9:69:1d:cf:dc:a6:9a:24:3a:ce:b9:a9:81:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.170.0.0/16
                IPv6:
                  2801:0:150::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27897

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:4d:cf:a5:34:d1:fe:79:0a:b1:8e:ea:20:db:3f:c9:f4:
         e7:f5:9f:69:d6:23:f8:64:d1:c7:b4:da:63:ac:b6:4e:1f:a3:
         89:98:72:41:41:87:5e:25:42:36:74:40:12:df:e6:7b:c7:a4:
         b3:82:c9:8b:a9:20:aa:cf:de:7c:f7:b7:23:4b:87:67:0d:86:
         ac:1f:17:21:63:8c:d4:04:08:94:02:92:b2:24:fd:46:03:ce:
         70:af:0e:7b:56:dd:d6:85:ad:c4:87:2a:e9:37:6d:a8:bd:0e:
         cf:00:78:89:20:07:ef:10:ab:ee:d3:51:34:96:49:c4:10:21:
         4c:0c:5e:4c:d3:50:e9:03:0f:d4:83:79:2e:7e:64:0e:30:27:
         c4:15:6f:97:ac:c5:64:f2:7c:4c:b0:37:f8:5f:da:11:03:77:
         5b:39:45:28:49:bc:47:18:e1:2b:ee:1e:cd:77:69:90:e4:e0:
         42:c5:6e:45:ea:13:a9:f0:e1:d0:74:d0:60:77:6a:ef:3a:ba:
         38:59:e2:90:1d:7d:d2:82:64:34:5d:60:93:f1:eb:39:52:ff:
         21:2b:e0:6c:61:12:d5:7f:1d:1c:07:64:60:41:6b:b0:ea:23:
         91:e0:7b:c7:f5:95:e2:f0:e5:06:ee:23:cf:0b:91:2f:d6:ae:
         80:0e:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:22 2024 by rpki-client on console-fra.rpki-client.org