Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer
File:                     4ae50a1688a42b708c8e50cedee53ca7debfc796.cer (raw, json)
Hash identifier:          5FLuvETR/+ikCV/jlIWZvf1Oc6pDaNBtYLjhA//sQQE=
Subject key identifier:   73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100B88F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Oct 2021 17:59:42 +0000
Certificate not after:    Mon 09 Dec 2024 19:15:57 +0000
Subordinate resources:    AS: 265643
                          IP: 170.247.76.0/22
                          IP: 2803:16c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16824463 (0x100b88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 18 17:59:42 2021 GMT
            Not After : Dec  9 19:15:57 2024 GMT
        Subject: CN=4ae50a1688a42b708c8e50cedee53ca7debfc796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:b9:ac:45:54:7a:c8:a4:53:9a:60:b3:06:
                    13:c4:78:7b:90:c9:0a:34:7d:28:31:4b:52:41:3f:
                    d5:1f:67:68:b9:97:be:9d:99:6d:dd:14:c5:52:29:
                    35:c4:fb:15:5c:99:1a:d2:93:0e:d8:11:c6:7f:f7:
                    06:cc:cb:7d:f5:12:9c:54:25:93:0b:d5:0f:d0:d6:
                    a8:02:fb:8d:89:1c:b3:31:5e:81:f9:8b:ba:1b:d2:
                    5b:a4:81:bc:b1:bf:ae:51:22:17:3a:61:fe:11:bf:
                    f6:59:dd:be:8d:b3:0e:be:4b:3c:dd:68:9c:5f:9a:
                    2b:91:0d:16:c8:06:cd:cd:3d:8f:17:3e:82:27:f3:
                    1c:54:86:ac:31:f4:2b:4d:96:d1:79:e6:10:42:d3:
                    50:52:51:b2:f5:03:00:43:75:4f:c0:be:1b:e0:49:
                    43:5e:c7:b5:b7:0b:4d:e1:ed:cd:11:d2:c6:45:80:
                    0b:4b:a5:56:66:17:b3:91:17:df:1d:6f:a0:cb:be:
                    81:03:a9:33:99:cf:17:32:03:30:58:f8:7c:9d:79:
                    a3:14:ba:2c:1f:e0:e7:e2:f8:16:30:c3:67:2c:ae:
                    42:bb:e2:7e:8d:12:48:36:61:8f:88:7e:2d:c3:5e:
                    eb:d7:04:8f:ec:f9:d7:f5:b6:e6:9b:c1:b3:53:0d:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.76.0/22
                IPv6:
                  2803:16c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265643

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:a9:15:14:6c:67:b0:cd:2c:39:95:fd:29:46:cd:ca:1f:
         2b:97:67:1b:32:a5:09:2f:ee:3d:fb:c8:04:2f:3b:04:14:e8:
         d3:fe:25:0b:dc:99:fc:f7:b3:ca:b1:b1:01:f8:d0:e8:2b:ef:
         de:c8:2b:54:af:03:56:9b:61:b7:1f:40:93:ae:be:bb:b8:3a:
         1d:b3:ff:6f:16:89:2e:f8:81:e1:21:dc:20:0b:37:57:ff:14:
         67:49:b9:85:f0:27:d0:e1:5a:06:5f:51:f5:36:5c:6c:93:e5:
         b0:ff:ac:e0:94:e0:80:1c:25:13:ee:9e:10:1c:91:84:a6:e7:
         b5:88:7d:90:71:c4:f4:c5:73:0d:2c:ee:ed:ea:a0:08:a0:d9:
         36:8e:2d:60:48:5d:99:8a:67:f4:0b:b6:86:a4:25:fa:ca:5d:
         d8:dd:e4:20:b6:9b:0c:29:60:47:0c:cd:27:3b:53:96:ef:ef:
         31:b1:f5:11:c1:91:7b:53:f3:1f:c5:78:9f:37:20:de:9f:0a:
         75:d5:ba:8d:f9:f4:d4:7b:b4:52:7a:7d:1b:f6:05:8e:ba:c7:
         3a:1f:94:c4:91:06:7b:7e:29:e4:51:89:16:3b:d4:8d:c5:66:
         a4:16:65:b3:30:8b:5e:a0:d9:33:49:49:f5:43:c5:e6:67:ee:
         73:c9:ae:a5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQC4jzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAxODE3NTk0MloXDTI0MTIwOTE5MTU1
N1owMzExMC8GA1UEAxMoNGFlNTBhMTY4OGE0MmI3MDhjOGU1MGNlZGVlNTNjYTdk
ZWJmYzc5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/UuaxFVHrI
pFOaYLMGE8R4e5DJCjR9KDFLUkE/1R9naLmXvp2Zbd0UxVIpNcT7FVyZGtKTDtgR
xn/3BszLffUSnFQlkwvVD9DWqAL7jYkcszFegfmLuhvSW6SBvLG/rlEiFzph/hG/
9lndvo2zDr5LPN1onF+aK5ENFsgGzc09jxc+gifzHFSGrDH0K02W0XnmEELTUFJR
svUDAEN1T8C+G+BJQ17HtbcLTeHtzRHSxkWAC0ulVmYXs5EX3x1voMu+gQOpM5nP
FzIDMFj4fJ15oxS6LB/g5+L4FjDDZyyuQrvifo0SSDZhj4h+LcNe69cEj+z51/W2
5pvBs1MNGbcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRzttNNZvM9T2ASl/CjMkf4
VjIRnjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iYjBjNTVhOS00YWY2
LTQ1YzktODI0OS1kODc4ZDI0ZTVlMzIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmIwYzU1YTktNGFmNi00
NWM5LTgyNDktZDg3OGQyNGU1ZTMyLzRhZTUwYTE2ODhhNDJiNzA4YzhlNTBjZWRl
ZTUzY2E3ZGViZmM3OTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr3TDANBAIAAjAHAwUAKAMWwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDaswDQYJKoZIhvcNAQELBQADggEBAC0g
qRUUbGewzSw5lf0pRs3KHyuXZxsypQkv7j37yAQvOwQU6NP+JQvcmfz3s8qxsQH4
0Ogr797IK1SvA1abYbcfQJOuvru4Oh2z/28WiS74geEh3CALN1f/FGdJuYXwJ9Dh
WgZfUfU2XGyT5bD/rOCU4IAcJRPunhAckYSm57WIfZBxxPTFcw0s7u3qoAig2TaO
LWBIXZmKZ/QLtoakJfrKXdjd5CC2mwwpYEcMzSc7U5bv7zGx9RHBkXtT8x/FeJ83
IN6fCnXVuo359NR7tFJ6fRv2BY66xzoflMSRBnt+KeRRiRY71I3FZqQWZbMwi16g
2TNJSfVDxeZn7nPJrqU=
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:21 2024 by rpki-client on console-ams.rpki-client.org