Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
File:                     61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer (raw, json)
Hash identifier:          ueNSOagehbBbl+cqPNg/qaL4sdB5fP+qNQWz2dKq52A=
Subject key identifier:   CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01022CEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Wed 25 Dec 2024 14:00:00 +0000
Subordinate resources:    IP: 190.242.0.0/16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Jan 2024 11:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16919786 (0x1022cea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Dec 25 14:00:00 2024 GMT
        Subject: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:94:3b:2a:1b:31:4d:9d:02:2d:0d:87:68:
                    b8:f0:7b:24:f4:1d:b8:e0:18:f1:da:a5:51:b5:5c:
                    e3:90:84:6c:20:34:65:85:4f:c9:38:56:b2:4e:91:
                    17:35:12:e8:da:59:78:8e:d1:30:43:7d:3c:3b:05:
                    ca:86:41:0a:00:2a:0e:86:26:17:32:57:87:ef:16:
                    fe:70:d0:8b:fd:97:52:dd:99:64:60:87:c2:a3:45:
                    a5:db:98:9f:32:75:5f:be:4a:df:ed:08:96:59:4e:
                    4e:7b:f3:73:84:dc:dd:19:0e:b6:98:aa:e0:5f:e2:
                    86:8c:0c:ef:1f:38:f6:89:32:87:8a:3a:78:92:c5:
                    3b:48:4b:58:9c:86:e4:19:cd:cd:be:19:02:40:64:
                    e7:7c:0e:c6:9b:93:0f:81:94:70:38:54:64:3c:82:
                    55:e5:1c:b2:60:56:a3:68:8c:74:dc:51:cc:6f:24:
                    0d:61:81:7a:94:7e:57:6c:28:6e:b2:dd:9f:bf:71:
                    30:71:0e:37:e8:6b:12:68:86:6e:cb:e8:e2:b2:59:
                    4e:eb:07:1f:96:76:b4:af:50:71:dd:94:3f:3b:5b:
                    85:10:81:12:8f:fe:af:13:fc:f6:58:00:b0:ac:eb:
                    11:8a:26:6b:07:3b:87:a0:55:2f:90:02:17:41:4f:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:31:c5:66:6d:55:00:ed:45:ec:1b:5c:72:7b:f4:dc:83:
         40:d2:15:6c:15:94:66:8e:e1:96:70:23:88:0c:85:c0:f3:17:
         e8:5e:63:b1:4a:71:4f:1e:eb:82:b0:44:d8:2d:bd:08:53:ba:
         79:08:51:34:3b:e4:1d:d3:07:fb:2a:dd:59:fc:2f:84:9c:fa:
         20:cc:7f:61:de:5e:13:9f:3e:7f:f2:6f:05:b3:d4:bc:d2:08:
         28:87:a3:db:a7:f6:e4:e4:27:01:eb:f9:30:5c:c6:cf:51:e1:
         c5:9e:f9:18:23:1b:34:07:5a:cf:06:8c:d3:e0:40:2a:81:fa:
         71:20:c7:97:7a:28:88:23:58:ec:8f:dd:d3:7e:b2:b9:76:80:
         f5:74:29:0c:d5:f1:c1:a1:dc:19:13:70:56:8e:3d:25:7c:18:
         16:fd:f5:36:bc:16:3a:b3:d8:8d:b5:23:13:f1:81:9f:0f:ea:
         2f:25:d2:52:d1:45:2c:94:77:e9:ba:ea:5a:fe:b5:64:2d:3f:
         fd:ca:ca:72:d6:48:ed:9a:a4:f0:a2:e3:cb:aa:08:a8:1a:82:
         e1:dc:80:2f:fd:0c:07:48:8d:18:3a:99:85:25:60:06:a5:14:
         59:41:46:70:58:90:28:6d:8f:fc:c2:62:81:ea:c9:88:02:3f:
         1c:a5:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:38 2024 by rpki-client on console.sobornost.net