Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.cer
File:                     0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.cer (raw, json)
Hash identifier:          CsHBL5tMZeDuZz1A6bQV6p73QJogardfQ5BwiVL0CTQ=
Subject key identifier:   D1:DB:F7:B2:0D:D2:56:AA:07:8B:33:0A:33:95:99:31:7B:D3:29:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01064D39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:18 +0000
Certificate not after:    Sat 08 Feb 2025 05:00:00 +0000
Subordinate resources:    IP: 168.232.100.0/22
                          IP: 179.60.184.0/21
                          IP: 190.105.144.0/21
                          IP: 2803:1080::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Jan 2024 11:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17190201 (0x1064d39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:18 2017 GMT
            Not After : Feb  8 05:00:00 2025 GMT
        Subject: CN=0a0e8f2b61f015e7398be757bbbe082aa88a9ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:fb:ca:ab:72:2a:59:45:6b:e3:85:e3:26:
                    82:c0:92:57:07:e4:ff:8a:0f:dd:3e:cf:ed:fb:14:
                    29:74:ed:e3:17:83:74:23:c9:94:0c:8e:4e:de:6c:
                    ff:42:9e:71:b3:37:30:d8:2f:54:50:55:0f:d2:76:
                    b1:81:13:de:2f:93:ef:a5:f2:0f:5c:0f:e1:82:10:
                    b6:1e:b5:a9:22:3b:56:43:d8:5b:37:53:81:7e:7c:
                    99:2c:3f:0d:ff:68:17:61:c5:0d:0c:ff:16:b6:16:
                    68:ae:2d:52:ee:07:22:06:bf:b8:b5:50:ea:b2:5c:
                    98:9c:9d:15:fa:c8:3b:96:61:63:7a:0e:6d:3c:79:
                    bc:4c:43:9e:7a:3e:4c:ab:a3:be:64:7e:80:b3:f1:
                    17:65:6e:bf:09:e2:52:36:0e:c4:6a:be:5e:8a:ea:
                    0f:9b:49:78:0a:d7:8c:0d:a0:e6:a8:c2:e4:97:7c:
                    91:09:7f:03:1c:1a:c3:4b:bc:fa:73:00:32:df:1b:
                    f5:c5:e7:e5:2b:94:ac:b0:43:21:b2:ee:40:39:94:
                    e2:49:40:76:69:7e:d0:02:01:31:16:1e:13:7a:26:
                    1e:2b:85:b7:6b:e7:e7:10:a4:0a:e7:f8:7d:73:f9:
                    22:d0:0a:76:c4:7c:73:b6:ac:93:62:56:c9:94:41:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:F7:B2:0D:D2:56:AA:07:8B:33:0A:33:95:99:31:7B:D3:29:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.100.0/22
                  179.60.184.0/21
                  190.105.144.0/21
                IPv6:
                  2803:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:29:f2:71:4c:b6:7f:f5:77:0c:13:56:6f:ff:b6:41:f9:c1:
         92:e9:eb:8e:8b:7d:0f:35:e9:41:fc:47:78:32:1f:f0:41:f0:
         64:bf:25:43:bb:50:01:13:93:f9:5b:50:ed:c6:d5:96:8e:dd:
         35:c0:30:42:10:91:0e:a2:1c:ab:33:08:5a:8f:50:4f:b9:ae:
         81:61:9f:ce:a0:b7:4e:f8:1c:5e:43:16:11:7b:0f:69:f4:cc:
         91:8f:86:84:3d:fd:b0:3c:3b:39:45:9c:52:c2:61:6a:cc:c3:
         69:60:40:b4:21:fb:4d:9a:e0:bf:39:ed:68:5f:79:63:ba:a2:
         ca:14:82:44:90:88:4d:cf:4c:15:4f:b6:27:14:25:5b:c2:eb:
         b5:9f:b0:e4:66:16:2a:0d:f1:7e:2e:7e:94:b7:57:fd:2a:11:
         29:11:0b:0a:b7:7e:ab:b4:0d:79:cf:b6:a3:30:76:ba:a1:60:
         bc:24:54:a9:0c:21:f3:1f:ac:ad:ae:08:1a:e0:9a:80:d1:8a:
         0a:30:af:33:fa:ee:cc:ab:e4:99:8f:06:48:ad:d0:fb:ef:81:
         71:d2:9e:9f:6e:ad:86:64:b4:a9:20:0e:06:0f:2a:33:53:0d:
         07:6e:f3:1e:30:af:ff:ea:e0:1a:95:d5:13:58:74:79:61:39:
         be:0c:24:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:09 2024 by rpki-client on console.sobornost.net