Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
File:                     30d20bef67088f83626615a8accfbafffad06334.cer (raw, json)
Hash identifier:          8+2fvphqeXhS3qTtXI2ZRCFBdUiQS+/JFsJ/CTxwFzI=
Subject key identifier:   93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBDB3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Nov 2021 21:01:51 +0000
Certificate not after:    Sun 30 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27932
                          IP: 143.202.196.0/22
                          IP: 190.124.160.0/21
                          IP: 190.185.112.0/20
                          IP: 200.52.144.0/20
                          IP: 200.107.232.0/21
                          IP: 2800:6a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15457084 (0xebdb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  2 21:01:51 2021 GMT
            Not After : Jun 30 15:00:00 2024 GMT
        Subject: CN=30d20bef67088f83626615a8accfbafffad06334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:2f:6b:12:1b:36:20:c3:ef:58:59:e2:cb:
                    00:09:8e:09:1d:f2:10:26:3a:40:c7:e1:c7:b9:4f:
                    69:07:7e:87:78:66:13:e7:98:0b:58:52:09:9f:e6:
                    8f:6e:e9:24:f0:dc:e7:be:58:4b:3e:a9:b0:5e:81:
                    98:0b:67:77:13:3c:c3:f1:a5:c4:76:99:80:c7:ce:
                    0d:c1:35:27:28:63:94:4b:d0:50:69:41:0a:69:18:
                    b2:2a:41:5f:52:34:11:ee:cf:03:38:71:42:81:8b:
                    ed:d8:db:33:36:6d:ce:8d:15:6f:88:35:6e:fe:fd:
                    ec:57:37:7a:fd:52:34:98:32:97:30:8b:6d:60:64:
                    89:47:71:5e:87:cb:e4:fe:80:1d:c9:f4:fa:fe:d6:
                    07:d6:f6:2d:ff:c2:fb:98:bb:69:0b:b7:e4:5a:53:
                    73:cb:38:c3:c4:19:ee:47:cf:48:37:a8:c7:e9:36:
                    86:3a:9d:5d:ec:9d:0b:94:65:8a:b3:0b:16:58:73:
                    18:f8:92:a9:25:4f:51:2a:f4:92:04:c0:7c:9a:79:
                    8c:f2:8c:52:23:0f:b7:86:6d:15:88:42:66:b7:1b:
                    3a:d6:4f:5c:61:59:8a:a2:6b:15:8f:8f:66:42:c5:
                    a8:dd:3c:31:52:22:02:28:c0:17:12:b2:e8:bb:b6:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.196.0/22
                  190.124.160.0/21
                  190.185.112.0/20
                  200.52.144.0/20
                  200.107.232.0/21
                IPv6:
                  2800:6a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27932

    Signature Algorithm: sha256WithRSAEncryption
         b8:48:aa:b6:21:38:60:48:e8:5b:bc:5f:cf:a1:54:a9:97:95:
         ca:3e:4a:6c:be:78:88:01:17:2f:62:c5:c5:11:ba:62:63:72:
         59:d9:2a:3f:84:25:aa:3a:76:ea:f0:e3:14:4c:f6:b8:6e:d6:
         04:55:d5:43:b1:a5:f6:85:f0:72:3f:49:6d:70:21:77:c6:64:
         8f:9e:17:2f:e0:78:fb:82:1f:7f:01:9a:1a:37:9d:7c:fe:3a:
         eb:68:13:ea:f7:00:eb:c6:b5:30:a6:74:5d:ef:e0:7e:3e:64:
         11:b1:89:b1:4e:c7:67:fe:e2:30:f3:2d:5a:69:fd:9f:15:b7:
         60:f0:d1:3f:96:ed:ac:e0:ab:30:93:fb:33:74:e2:c7:31:41:
         55:75:fb:32:b5:b4:dd:0f:f7:93:83:a1:d7:f0:af:cd:db:cd:
         64:ad:77:8d:5c:3b:72:a4:5b:37:19:f7:19:44:66:d9:dd:ff:
         3b:e6:c3:15:cf:83:b3:89:f2:96:8b:9a:17:ee:62:58:a3:5b:
         3b:a9:6d:e6:b2:a6:03:ec:57:0d:de:e0:0d:c6:6b:46:cc:f1:
         56:3b:d2:68:f7:47:73:9b:fc:38:78:1a:f8:2a:7e:3f:01:3b:
         a1:f8:be:b3:1f:e2:4b:52:48:f8:65:6e:0b:73:c6:95:3f:ea:
         08:22:0b:49
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIEAOvbPDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTEwMjIxMDE1MVoXDTI0MDYzMDE1MDAw
MFowMzExMC8GA1UEAxMoMzBkMjBiZWY2NzA4OGY4MzYyNjYxNWE4YWNjZmJhZmZm
YWQwNjMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKw2L2sSGzYg
w+9YWeLLAAmOCR3yECY6QMfhx7lPaQd+h3hmE+eYC1hSCZ/mj27pJPDc575YSz6p
sF6BmAtndxM8w/GlxHaZgMfODcE1JyhjlEvQUGlBCmkYsipBX1I0Ee7PAzhxQoGL
7djbMzZtzo0Vb4g1bv797Fc3ev1SNJgylzCLbWBkiUdxXofL5P6AHcn0+v7WB9b2
Lf/C+5i7aQu35FpTc8s4w8QZ7kfPSDeox+k2hjqdXeydC5RlirMLFlhzGPiSqSVP
USr0kgTAfJp5jPKMUiMPt4ZtFYhCZrcbOtZPXGFZiqJrFY+PZkLFqN08MVIiAijA
FxKy6Lu2tZkCAwEAAaOCAyAwggMcMB0GA1UdDgQWBBSTNOAt4gBaGkO8/00u4IgO
I7HhZjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NjNmY2Y4MC05MWI1
LTRkYTYtYTNlYS03YmI4NGEwZTgzZWQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTYzZmNmODAtOTFiNS00
ZGE2LWEzZWEtN2JiODRhMGU4M2VkLzMwZDIwYmVmNjcwODhmODM2MjY2MTVhOGFj
Y2ZiYWZmZmFkMDYzMzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAo/KxAMEA758oAMEBL65cAMEBMg0
kAMEA8hr6DANBAIAAjAHAwUAKAAGoDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJt
HDANBgkqhkiG9w0BAQsFAAOCAQEAuEiqtiE4YEjoW7xfz6FUqZeVyj5KbL54iAEX
L2LFxRG6YmNyWdkqP4Qlqjp26vDjFEz2uG7WBFXVQ7Gl9oXwcj9JbXAhd8Zkj54X
L+B4+4IffwGaGjedfP4662gT6vcA68a1MKZ0Xe/gfj5kEbGJsU7HZ/7iMPMtWmn9
nxW3YPDRP5btrOCrMJP7M3TixzFBVXX7MrW03Q/3k4Oh1/CvzdvNZK13jVw7cqRb
Nxn3GURm2d3/O+bDFc+Ds4nylouaF+5iWKNbO6lt5rKmA+xXDd7gDcZrRszxVjvS
aPdHc5v8OHga+Cp+PwE7ofi+sx/iS1JI+GVuC3PGlT/qCCILSQ==
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:34:46 2024 by rpki-client on console-fra.rpki-client.org