Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ea4f7ede264d502ffbb6e5b51b2b8eb56eb228e.cer
File:                     3ea4f7ede264d502ffbb6e5b51b2b8eb56eb228e.cer (raw, json)
Hash identifier:          +lmyhh4Yp54B2KEbgZrFcdP2kwnWhg9AqbwtrXZwmCQ=
Subject key identifier:   95:D3:E6:D3:F1:69:75:EA:39:71:7D:5E:39:FF:69:70:4D:42:8E:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E58099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/442886b0-8b07-445f-903b-4759b58182b3/3ea4f7ede264d502ffbb6e5b51b2b8eb56eb228e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/442886b0-8b07-445f-903b-4759b58182b3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 04:00:17 +0000
Certificate not after:    Wed 04 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 28083
                          IP: 190.110.64.0/19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15040665 (0xe58099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 04:00:17 2023 GMT
            Not After : Dec  4 04:00:00 2024 GMT
        Subject: CN=3ea4f7ede264d502ffbb6e5b51b2b8eb56eb228e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:68:6f:38:8a:0f:7b:16:24:41:ea:f5:56:
                    f2:fd:55:5a:fc:d7:cb:76:be:72:ac:14:97:b2:7f:
                    c8:46:3d:bd:0b:90:3d:0b:a6:dd:f4:33:56:d5:bb:
                    e5:b4:6b:20:45:a1:d2:ca:00:b2:99:94:8e:f8:36:
                    77:f4:32:12:72:d9:1f:18:75:ae:30:c0:d8:9c:d3:
                    b8:82:76:bc:5e:5a:4d:bf:de:04:db:5f:8a:b2:12:
                    12:a9:af:f9:f3:62:de:5f:dd:1b:73:bf:2f:ab:95:
                    66:44:b9:ce:0b:a4:14:7f:05:07:dc:2d:42:38:53:
                    94:8b:f7:c7:28:83:32:4e:f9:88:16:ac:d6:c0:57:
                    41:b4:bb:50:62:d9:66:9a:bd:9e:80:ef:e3:bf:d3:
                    85:57:88:97:c2:00:e1:33:46:31:c1:a6:79:2a:85:
                    16:cc:b6:04:83:1b:7b:fd:a0:c4:a6:82:51:86:92:
                    d1:cd:9a:57:cc:ae:f8:c8:d4:33:0b:4e:16:de:83:
                    b8:37:59:7c:6d:85:69:b1:17:0c:8e:c4:51:fe:92:
                    46:ba:0c:f5:0a:a1:7d:d5:10:dd:9d:7d:34:55:06:
                    a1:26:77:62:1c:cf:ab:1d:0b:46:45:46:a9:b9:bc:
                    5f:1f:17:3c:67:64:7b:7f:32:bf:53:ed:bc:b3:32:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:E6:D3:F1:69:75:EA:39:71:7D:5E:39:FF:69:70:4D:42:8E:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/442886b0-8b07-445f-903b-4759b58182b3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/442886b0-8b07-445f-903b-4759b58182b3/3ea4f7ede264d502ffbb6e5b51b2b8eb56eb228e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.64.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28083

    Signature Algorithm: sha256WithRSAEncryption
         8b:6d:d1:a1:9f:bc:a9:9c:79:bb:6e:f2:0f:73:27:2f:09:a2:
         42:d3:4d:95:ad:0a:d9:1b:cb:01:e5:12:5d:a3:13:2f:cd:80:
         e1:69:f1:ca:a0:7e:6b:3f:c9:5c:fc:85:fc:23:3b:29:9e:9a:
         b0:d2:b2:6a:64:f3:49:bc:aa:c0:3b:e6:97:d1:01:0d:38:fa:
         01:d0:16:bc:ec:ac:c1:6e:2d:6a:c0:28:c3:c4:61:3c:f5:89:
         5d:77:c3:8d:45:99:1f:86:17:51:53:3f:54:e3:ea:c1:20:09:
         d6:28:18:ed:13:5a:6a:f1:e7:fd:e4:19:96:d8:fa:bf:93:03:
         8b:e8:6b:96:c6:a7:91:28:d8:cf:4d:43:a0:ad:2b:74:fb:3b:
         be:b7:7e:94:d2:00:11:a1:00:02:c3:c4:d5:b5:e4:9e:87:96:
         36:6e:66:74:f6:d6:c1:f3:5a:6e:17:cf:5a:35:2b:d7:12:c8:
         a9:d0:13:fb:be:58:b2:01:4c:1b:18:d9:0d:83:81:96:5d:34:
         bb:b7:d4:a1:41:72:f2:8b:a6:7f:62:f3:b2:d2:4b:e6:d9:76:
         60:5e:06:a6:a1:47:fd:53:7d:af:df:b0:16:47:29:5d:d8:66:
         22:95:4b:ce:98:49:f9:4b:23:0f:4c:b0:c6:31:33:26:28:67:
         e0:b4:52:f9
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAOWAmTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxNDA0MDAxN1oXDTI0MTIwNDA0MDAw
MFowMzExMC8GA1UEAxMoM2VhNGY3ZWRlMjY0ZDUwMmZmYmI2ZTViNTFiMmI4ZWI1
NmViMjI4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALkqaG84ig97
FiRB6vVW8v1VWvzXy3a+cqwUl7J/yEY9vQuQPQum3fQzVtW75bRrIEWh0soAspmU
jvg2d/QyEnLZHxh1rjDA2JzTuIJ2vF5aTb/eBNtfirISEqmv+fNi3l/dG3O/L6uV
ZkS5zgukFH8FB9wtQjhTlIv3xyiDMk75iBas1sBXQbS7UGLZZpq9noDv47/ThVeI
l8IA4TNGMcGmeSqFFsy2BIMbe/2gxKaCUYaS0c2aV8yu+MjUMwtOFt6DuDdZfG2F
abEXDI7EUf6SRroM9QqhfdUQ3Z19NFUGoSZ3YhzPqx0LRkVGqbm8Xx8XPGdke38y
v1PtvLMyqrkCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSV0+bT8Wl16jlxfV45/2lw
TUKOFjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80NDI4ODZiMC04YjA3
LTQ0NWYtOTAzYi00NzU5YjU4MTgyYjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDQyODg2YjAtOGIwNy00
NDVmLTkwM2ItNDc1OWI1ODE4MmIzLzNlYTRmN2VkZTI2NGQ1MDJmZmJiNmU1YjUx
YjJiOGViNTZlYjIyOGUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb5uQDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJtszANBgkqhkiG9w0BAQsFAAOCAQEAi23RoZ+8qZx5u27yD3MnLwmi
QtNNla0K2RvLAeUSXaMTL82A4WnxyqB+az/JXPyF/CM7KZ6asNKyamTzSbyqwDvm
l9EBDTj6AdAWvOyswW4tasAow8RhPPWJXXfDjUWZH4YXUVM/VOPqwSAJ1igY7RNa
avHn/eQZltj6v5MDi+hrlsankSjYz01DoK0rdPs7vrd+lNIAEaEAAsPE1bXknoeW
Nm5mdPbWwfNabhfPWjUr1xLIqdAT+75YsgFMGxjZDYOBll00u7fUoUFy8oumf2Lz
stJL5tl2YF4GpqFH/VN9r9+wFkcpXdhmIpVLzphJ+UsjD0ywxjEzJihn4LRS+Q==
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:48 2024 by rpki-client on console-ams.rpki-client.org