Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/037235d2dc88d539d90c8d0ee69035f3eb274a9e.cer
File:                     037235d2dc88d539d90c8d0ee69035f3eb274a9e.cer (raw, json)
Hash identifier:          w5KppO3a2PhLdEPvRxYvxxHI77LP5gLXA9Wbn2/dpuY=
Subject key identifier:   21:E2:A4:1B:5D:C2:34:39:EF:DE:C1:1A:07:10:E6:77:00:64:09:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AD0B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9a291180-a400-4a34-866c-348e07dbba92/037235d2dc88d539d90c8d0ee69035f3eb274a9e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9a291180-a400-4a34-866c-348e07dbba92/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 20:52:58 +0000
Certificate not after:    Tue 18 Mar 2025 22:32:57 +0000
Subordinate resources:    AS: 52248
                          IP: 200.12.194.0/23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17486003 (0x10ad0b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 20:52:58 2023 GMT
            Not After : Mar 18 22:32:57 2025 GMT
        Subject: CN=037235d2dc88d539d90c8d0ee69035f3eb274a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:b2:8e:9a:20:73:27:01:57:c1:de:5f:63:
                    9a:f8:a5:4d:c9:98:0f:2a:e8:d5:cd:11:c2:1d:af:
                    43:cb:f7:80:95:a2:cc:00:82:7d:94:a9:b5:d4:ff:
                    71:e2:c5:df:8f:8c:7a:63:dc:f5:03:46:ef:65:a5:
                    ac:ec:52:91:e0:1a:83:58:fe:d6:2a:30:bb:88:ee:
                    b3:ef:ff:90:58:b2:e5:88:60:f0:07:a8:5f:e9:5b:
                    5b:b5:31:2a:7b:bf:2c:84:e6:58:4c:28:f4:29:dd:
                    39:bd:23:38:4a:e3:16:97:a7:46:d4:8f:e6:cd:d6:
                    77:e1:d3:e8:54:78:9c:77:a9:bc:09:48:ce:ed:d6:
                    fd:04:3c:ae:2d:71:05:d5:1a:23:8b:74:ed:1c:e4:
                    71:fd:65:c1:11:ff:59:5c:6c:d1:60:34:9a:68:49:
                    91:00:3f:b6:a1:82:a6:a7:cb:78:2d:5c:96:35:d9:
                    ee:85:0f:d0:61:21:85:53:cb:43:13:1f:03:df:40:
                    e7:04:23:a5:10:7a:00:3a:b3:9d:93:f9:8f:6e:c5:
                    c5:d8:75:af:4b:62:c2:0e:c2:35:dc:17:9f:0f:fc:
                    6e:10:6a:84:a5:80:a2:29:e8:d8:7f:c4:9e:73:48:
                    07:50:53:d3:2c:fd:b8:d6:e3:c3:f8:8a:ea:38:4c:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E2:A4:1B:5D:C2:34:39:EF:DE:C1:1A:07:10:E6:77:00:64:09:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9a291180-a400-4a34-866c-348e07dbba92/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9a291180-a400-4a34-866c-348e07dbba92/037235d2dc88d539d90c8d0ee69035f3eb274a9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.194.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52248

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:58:19:12:bc:6c:22:b8:4a:32:55:0b:75:31:c1:61:3e:
         f0:41:08:33:0d:f5:2f:3b:7f:69:bc:24:34:f3:b7:71:24:b7:
         b8:12:06:58:0f:ed:f0:8d:60:4c:a8:48:d0:3e:82:9a:5a:aa:
         65:04:83:7a:08:fb:64:31:53:e6:1a:d5:0b:b1:4c:88:6b:68:
         4f:29:fa:22:8f:e3:d6:26:0a:41:28:35:39:68:be:14:8f:66:
         ed:98:e2:a0:56:48:3a:9a:14:80:ee:9c:f6:60:35:31:9e:3f:
         98:85:e3:6c:2c:c7:f1:e2:46:a6:a8:c5:e8:59:7b:93:da:74:
         95:67:6b:75:4d:09:67:64:33:e9:dd:c8:f2:26:81:0f:4a:ea:
         21:03:31:1a:b3:ec:76:0c:34:ed:7d:79:49:35:08:9d:df:1e:
         a8:52:a5:49:c3:d3:0c:45:58:bd:60:6c:d4:7b:55:ff:b0:61:
         3d:38:a6:01:23:f2:37:83:cc:00:99:9f:89:be:a3:0f:9f:72:
         e9:ac:14:25:ef:12:2a:2a:00:19:32:cc:c6:8c:5d:7b:be:49:
         94:7e:18:3b:2f:1a:65:f0:05:e5:c2:88:3a:65:65:dd:18:9c:
         71:33:d5:1d:be:4e:d2:4a:9d:f5:29:8e:23:0f:50:48:dd:4b:
         c1:0a:13:7a
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIEAQrQszANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwMzIwNTI1OFoXDTI1MDMxODIyMzI1
N1owMzExMC8GA1UEAxMoMDM3MjM1ZDJkYzg4ZDUzOWQ5MGM4ZDBlZTY5MDM1ZjNl
YjI3NGE5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAILUso6aIHMn
AVfB3l9jmvilTcmYDyro1c0Rwh2vQ8v3gJWizACCfZSptdT/ceLF34+MemPc9QNG
72WlrOxSkeAag1j+1iowu4jus+//kFiy5Yhg8AeoX+lbW7UxKnu/LITmWEwo9Cnd
Ob0jOErjFpenRtSP5s3Wd+HT6FR4nHepvAlIzu3W/QQ8ri1xBdUaI4t07Rzkcf1l
wRH/WVxs0WA0mmhJkQA/tqGCpqfLeC1cljXZ7oUP0GEhhVPLQxMfA99A5wQjpRB6
ADqznZP5j27Fxdh1r0tiwg7CNdwXnw/8bhBqhKWAoino2H/EnnNIB1BT0yz9uNbj
w/iK6jhMUPsCAwEAAaOCAvowggL2MB0GA1UdDgQWBBQh4qQbXcI0Oe/ewRoHEOZ3
AGQJdzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85YTI5MTE4MC1hNDAw
LTRhMzQtODY2Yy0zNDhlMDdkYmJhOTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWEyOTExODAtYTQwMC00
YTM0LTg2NmMtMzQ4ZTA3ZGJiYTkyLzAzNzIzNWQyZGM4OGQ1MzlkOTBjOGQwZWU2
OTAzNWYzZWIyNzRhOWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgMwjAaBggrBgEFBQcBCAEB/wQL
MAmgBzAFAgMAzBgwDQYJKoZIhvcNAQELBQADggEBAHzlWBkSvGwiuEoyVQt1McFh
PvBBCDMN9S87f2m8JDTzt3Ekt7gSBlgP7fCNYEyoSNA+gppaqmUEg3oI+2QxU+Ya
1QuxTIhraE8p+iKP49YmCkEoNTlovhSPZu2Y4qBWSDqaFIDunPZgNTGeP5iF42ws
x/HiRqaoxehZe5PadJVna3VNCWdkM+ndyPImgQ9K6iEDMRqz7HYMNO19eUk1CJ3f
HqhSpUnD0wxFWL1gbNR7Vf+wYT04pgEj8jeDzACZn4m+ow+fcumsFCXvEioqABky
zMaMXXu+SZR+GDsvGmXwBeXCiDplZd0YnHEz1R2+TtJKnfUpjiMPUEjdS8EKE3o=
-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:17 2024 by rpki-client on console-fra.rpki-client.org