Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
File:                     42b08b0342f4f7f7c4e44054026d23d7568373f6.cer (raw, json)
Hash identifier:          c0iRUIS/Cfwcn0xQk0hGawmpIuDfxiW/7d0VmaLAF0U=
Subject key identifier:   1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01047C47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Mar 2021 20:18:59 +0000
Certificate not after:    Mon 20 Jan 2025 02:36:46 +0000
Subordinate resources:    AS: 270110
                          IP: 189.85.100.0/22
                          IP: 2806:3b1::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17071175 (0x1047c47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 20:18:59 2021 GMT
            Not After : Jan 20 02:36:46 2025 GMT
        Subject: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:0a:af:40:2c:1a:3c:8a:70:22:af:b9:2f:
                    f9:62:ea:21:15:3b:09:cf:05:67:e4:b5:e7:fa:5a:
                    90:35:b1:36:23:6c:97:ea:5d:f7:f5:0e:32:a5:b5:
                    de:3b:d3:0c:ca:39:48:2e:95:59:d6:44:a3:b2:80:
                    68:c0:2b:c1:4d:8b:75:e1:94:b8:f7:ae:22:5f:6d:
                    83:ba:fe:7e:4b:2f:67:1c:f4:d5:c1:88:af:4b:54:
                    6a:ea:ff:82:22:08:9d:1b:db:7c:e2:30:39:09:42:
                    19:90:95:85:44:d3:93:68:76:75:a6:09:d0:91:d8:
                    b2:a5:ce:98:c9:85:eb:8b:d2:3b:ab:96:12:af:ce:
                    21:08:d5:1b:fd:cf:c9:96:b5:62:47:3a:a4:6b:69:
                    3e:a7:17:3c:c4:3e:c6:b6:f3:e2:98:1a:43:dd:f4:
                    22:92:cf:f5:51:56:a9:92:a7:a2:b9:7e:9d:45:8f:
                    91:85:70:cd:72:e3:f5:aa:fe:ec:b9:81:10:1d:8d:
                    8f:dd:ef:b3:09:2e:c7:a1:3b:29:24:bf:8a:ef:61:
                    56:84:cd:e2:5d:c5:05:6e:98:63:fe:3a:fe:33:bd:
                    44:12:85:88:97:86:87:ca:dc:21:8a:0e:d6:c6:07:
                    9a:3b:57:a5:61:d6:92:0f:71:35:33:c2:25:d7:e5:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22
                IPv6:
                  2806:3b1::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270110

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:d2:5c:9b:98:7d:4b:49:b3:5a:ef:9c:a0:20:5c:63:37:
         b1:61:02:7d:b1:81:ed:46:fa:3d:a0:f1:99:c5:b1:1b:7f:57:
         45:27:9b:b8:02:b1:94:58:47:92:3b:62:c4:b7:ef:af:4d:ce:
         06:df:a3:8b:7b:6c:d0:df:4e:f1:2b:2d:92:c6:14:2f:19:b1:
         35:8c:cd:6a:08:d9:1c:0c:a7:e5:26:bd:5c:b1:7c:0d:2b:fa:
         f9:3c:b4:0e:7d:a7:11:2e:13:34:f4:33:35:81:bc:93:1a:4c:
         07:29:b5:95:05:48:dd:38:84:a0:d5:ac:13:3f:25:41:30:b2:
         39:e3:29:bd:46:c8:df:c6:d5:7e:ea:54:0b:a6:50:d6:26:f6:
         3a:23:b6:08:a0:8d:23:42:9d:c9:1f:60:d6:ae:2e:24:da:b1:
         d5:7e:c9:07:02:47:b5:a1:b2:49:21:36:ad:cf:71:99:c8:0f:
         96:6b:8a:86:05:de:dc:50:58:3a:f0:95:75:3a:93:16:1f:35:
         6c:e4:ea:85:7e:5f:08:76:04:6d:4a:78:aa:c6:ea:21:17:55:
         d4:9a:c6:99:2f:0a:92:fa:f8:74:bc:6d:0c:78:4a:81:7e:1b:
         d2:81:6a:ff:61:62:f9:ff:b7:c0:0b:cb:e7:79:e9:d2:c5:87:
         fa:ce:eb:57
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQR8RzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDMyOTIwMTg1OVoXDTI1MDEyMDAyMzY0
NlowMzExMC8GA1UEAxMoNDJiMDhiMDM0MmY0ZjdmN2M0ZTQ0MDU0MDI2ZDIzZDc1
NjgzNzNmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwACq9ALBo8
inAir7kv+WLqIRU7Cc8FZ+S15/pakDWxNiNsl+pd9/UOMqW13jvTDMo5SC6VWdZE
o7KAaMArwU2LdeGUuPeuIl9tg7r+fksvZxz01cGIr0tUaur/giIInRvbfOIwOQlC
GZCVhUTTk2h2daYJ0JHYsqXOmMmF64vSO6uWEq/OIQjVG/3PyZa1Ykc6pGtpPqcX
PMQ+xrbz4pgaQ930IpLP9VFWqZKnorl+nUWPkYVwzXLj9ar+7LmBEB2Nj93vswku
x6E7KSS/iu9hVoTN4l3FBW6YY/46/jO9RBKFiJeGh8rcIYoO1sYHmjtXpWHWkg9x
NTPCJdflnAECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQfRynSw2L/dluK1Ljx2bcY
JKT0XzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80NTIwNjE1NS0wOTJj
LTQ1OTEtODRlNC1mN2U4NmYxYmRmZGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDUyMDYxNTUtMDkyYy00
NTkxLTg0ZTQtZjdlODZmMWJkZmRjLzQyYjA4YjAzNDJmNGY3ZjdjNGU0NDA1NDAy
NmQyM2Q3NTY4MzczZjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr1VZDANBAIAAjAHAwUAKAYDsTAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHx4wDQYJKoZIhvcNAQELBQADggEBAGJN
0lybmH1LSbNa75ygIFxjN7FhAn2xge1G+j2g8ZnFsRt/V0Unm7gCsZRYR5I7YsS3
769Nzgbfo4t7bNDfTvErLZLGFC8ZsTWMzWoI2RwMp+UmvVyxfA0r+vk8tA59pxEu
EzT0MzWBvJMaTAcptZUFSN04hKDVrBM/JUEwsjnjKb1GyN/G1X7qVAumUNYm9joj
tgigjSNCnckfYNauLiTasdV+yQcCR7WhskkhNq3PcZnID5ZrioYF3txQWDrwlXU6
kxYfNWzk6oV+Xwh2BG1KeKrG6iEXVdSaxpkvCpL6+HS8bQx4SoF+G9KBav9hYvn/
t8ALy+d56dLFh/rO61c=
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:34:53 2024 by rpki-client on console-fra.rpki-client.org