Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer
File:                     0a62334472d90f8f616e01c4fe6b92ab5a455575.cer (raw, json)
Hash identifier:          9PqYa94ZcFV1RNGb90X7ejyZYE55IxjR9f/oH/I9Anc=
Subject key identifier:   47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F813C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/0a62334472d90f8f616e01c4fe6b92ab5a455575.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Sep 2022 17:21:52 +0000
Certificate not after:    Mon 23 Jun 2025 17:44:05 +0000
Subordinate resources:    AS: 272851
                          IP: 201.46.115.0/24
                          IP: 2803:8290::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16257985 (0xf813c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 17:21:52 2022 GMT
            Not After : Jun 23 17:44:05 2025 GMT
        Subject: CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:6e:d9:48:dc:41:8d:a1:54:1e:87:3b:e9:
                    0c:08:c3:ba:99:fb:53:4d:52:88:4f:a5:40:e3:12:
                    fb:18:e0:2c:40:5b:be:45:b7:f0:42:3f:41:ce:a9:
                    94:f8:32:6d:50:e9:31:08:42:a9:f7:7a:b9:ae:49:
                    ce:92:05:07:58:d0:63:a8:a4:a5:a6:7f:73:7e:73:
                    9b:86:c4:6b:d9:0b:e6:cf:c1:83:4b:6d:6d:a9:f5:
                    53:d3:b0:2d:13:61:0b:d0:b2:47:f0:84:c4:4c:c3:
                    9f:d1:b0:2c:92:2d:04:fd:59:05:7b:da:c7:45:76:
                    b8:6c:5b:ac:79:1f:01:f6:aa:ae:be:07:3f:c9:c0:
                    2c:4b:91:7f:1f:92:a6:bb:cf:5e:d8:c3:3c:6d:3b:
                    e6:a2:93:27:52:d6:73:40:f8:bb:69:33:97:64:ed:
                    76:ef:ff:d5:5c:73:81:16:d9:d6:ac:71:27:ac:9c:
                    dd:e9:4f:e2:0b:94:8b:18:24:fe:3b:ea:1c:06:77:
                    5a:ae:a6:ef:ea:5e:96:12:2d:94:5e:c4:1b:2f:e2:
                    6d:df:f8:cb:dd:70:d5:11:43:20:6d:19:f2:2d:85:
                    de:6a:f4:7d:76:01:92:4e:a8:8f:70:71:7b:68:60:
                    71:04:76:e4:3a:ee:78:bd:ad:fe:27:8b:31:1c:67:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/0a62334472d90f8f616e01c4fe6b92ab5a455575.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.115.0/24
                IPv6:
                  2803:8290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272851

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:e5:8f:1e:6a:40:33:3d:da:2b:27:a7:e8:ef:74:ac:64:
         f2:13:e3:16:7b:94:5c:df:48:b8:c9:93:4a:28:23:70:1c:6b:
         68:73:98:ed:5c:80:88:90:a2:53:93:51:a5:83:fb:70:22:7e:
         0d:57:68:8d:36:d9:03:26:b7:27:7e:be:d4:a5:41:d5:45:96:
         fc:bb:ec:8b:42:67:6a:2f:ee:1e:00:5b:c8:dc:3b:18:df:d6:
         cc:ab:67:fd:e1:e7:be:74:25:83:44:5d:52:c8:eb:03:23:20:
         39:37:4e:3a:61:38:33:81:c4:52:4a:e1:6b:20:a0:52:ea:03:
         93:42:25:e0:a0:e2:eb:08:ae:70:38:c9:58:de:65:27:10:80:
         f7:fa:f3:ae:01:99:6d:b1:fd:e8:f4:24:5b:9e:82:a8:aa:a8:
         06:e0:c9:97:f1:53:5a:70:e2:63:1b:0c:c9:4d:0b:54:49:d9:
         02:98:0b:26:15:98:e1:76:7e:2f:a9:8f:2f:a1:eb:f8:2a:38:
         bf:28:84:32:18:69:4d:3d:37:48:f2:45:df:3d:1e:96:3e:84:
         8a:47:8a:78:13:da:9c:2c:c5:1c:7e:48:dc:50:3a:88:18:41:
         4f:96:0e:8b:54:a9:d5:fb:36:e8:38:fd:96:d6:37:47:43:90:
         2b:67:2d:21
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAPgTwTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDkxMjE3MjE1MloXDTI1MDYyMzE3NDQw
NVowMzExMC8GA1UEAxMoMGE2MjMzNDQ3MmQ5MGY4ZjYxNmUwMWM0ZmU2YjkyYWI1
YTQ1NTU3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKPnbtlI3EGN
oVQehzvpDAjDupn7U01SiE+lQOMS+xjgLEBbvkW38EI/Qc6plPgybVDpMQhCqfd6
ua5JzpIFB1jQY6ikpaZ/c35zm4bEa9kL5s/Bg0ttban1U9OwLRNhC9CyR/CExEzD
n9GwLJItBP1ZBXvax0V2uGxbrHkfAfaqrr4HP8nALEuRfx+SprvPXtjDPG075qKT
J1LWc0D4u2kzl2Ttdu//1VxzgRbZ1qxxJ6yc3elP4guUixgk/jvqHAZ3Wq6m7+pe
lhItlF7EGy/ibd/4y91w1RFDIG0Z8i2F3mr0fXYBkk6oj3Bxe2hgcQR25DrueL2t
/ieLMRxntz8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRHrVIy8A7yI1a+Z2XlWBOG
hOT10DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NmE1Yjk5NC04M2Y3
LTQ1MWUtYTc5ZC1iZTE3OTQyZTIyOGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzZhNWI5OTQtODNmNy00
NTFlLWE3OWQtYmUxNzk0MmUyMjhkLzBhNjIzMzQ0NzJkOTBmOGY2MTZlMDFjNGZl
NmI5MmFiNWE0NTU1NzUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMkuczANBAIAAjAHAwUAKAOCkDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKdMwDQYJKoZIhvcNAQELBQADggEBAFrZ
5Y8eakAzPdorJ6fo73SsZPIT4xZ7lFzfSLjJk0ooI3Aca2hzmO1cgIiQolOTUaWD
+3Aifg1XaI022QMmtyd+vtSlQdVFlvy77ItCZ2ov7h4AW8jcOxjf1syrZ/3h5750
JYNEXVLI6wMjIDk3TjphODOBxFJK4WsgoFLqA5NCJeCg4usIrnA4yVjeZScQgPf6
864BmW2x/ej0JFuegqiqqAbgyZfxU1pw4mMbDMlNC1RJ2QKYCyYVmOF2fi+pjy+h
6/gqOL8ohDIYaU09N0jyRd89HpY+hIpHingT2pwsxRx+SNxQOogYQU+WDotUqdX7
Nug4/ZbWN0dDkCtnLSE=
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:08 2024 by rpki-client on console-fra.rpki-client.org