Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/526f148db3642a4a306035e6b42c3ba3b0c78140.cer
File:                     526f148db3642a4a306035e6b42c3ba3b0c78140.cer (raw, json)
Hash identifier:          jfD4hmcjWdfe0WQCiwIjoxlmyYpsJZtylL4bIRSpLHA=
Subject key identifier:   07:55:9D:5B:7D:1D:AD:78:13:EA:A3:22:22:41:BF:9E:14:15:49:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEA36D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58d495ae-b24e-4947-9cca-4be9d404927c/526f148db3642a4a306035e6b42c3ba3b0c78140.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58d495ae-b24e-4947-9cca-4be9d404927c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Nov 2020 16:13:48 +0000
Certificate not after:    Sun 21 Jul 2024 19:39:18 +0000
Subordinate resources:    AS: 271810
                          IP: 168.181.88.0/22
                          IP: 2803:9010::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15639405 (0xeea36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 16:13:48 2020 GMT
            Not After : Jul 21 19:39:18 2024 GMT
        Subject: CN=526f148db3642a4a306035e6b42c3ba3b0c78140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:74:36:29:dd:04:85:f3:db:05:e4:7a:f2:
                    bd:fd:b8:c9:ec:59:b1:64:14:f2:4b:99:da:6e:65:
                    f3:1a:53:2d:74:81:14:f7:07:67:e9:77:49:64:13:
                    3d:65:f7:2d:b7:6c:c7:11:95:27:5e:10:c0:c6:d0:
                    95:15:27:c0:eb:a0:8d:a6:4a:7a:2c:03:39:f1:29:
                    0f:75:e3:7b:e0:10:d5:2f:f1:20:96:e8:5e:f5:30:
                    57:0f:38:06:79:22:54:08:64:fe:b7:ca:9c:04:a6:
                    ba:e7:50:12:01:48:1c:8f:3a:2d:be:6e:b9:64:20:
                    bb:85:17:bb:3f:ab:d5:c6:fd:9e:28:c3:f3:06:71:
                    0c:84:bc:72:03:1c:58:8e:8c:91:a7:98:15:40:cc:
                    cc:c9:bb:3d:f4:30:af:6f:51:b8:ac:df:85:4d:b0:
                    7a:72:cb:df:fa:82:a9:6b:18:04:36:42:7b:31:0a:
                    c0:ff:56:56:29:d4:bd:65:b6:f3:42:fd:11:56:b5:
                    20:48:80:92:27:1c:f9:2c:b3:33:9a:fa:07:3a:24:
                    ba:d6:00:78:14:e2:d7:68:12:68:5d:5d:20:6e:0a:
                    ee:bc:8b:a1:da:17:06:aa:bb:0f:31:31:d1:37:c1:
                    43:ae:9c:4d:13:91:b3:53:d0:57:64:0a:0f:0e:8e:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:9D:5B:7D:1D:AD:78:13:EA:A3:22:22:41:BF:9E:14:15:49:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58d495ae-b24e-4947-9cca-4be9d404927c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58d495ae-b24e-4947-9cca-4be9d404927c/526f148db3642a4a306035e6b42c3ba3b0c78140.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.88.0/22
                IPv6:
                  2803:9010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271810

    Signature Algorithm: sha256WithRSAEncryption
         21:08:9d:d1:7c:c0:8f:74:7a:89:04:00:9a:8c:e1:2f:cf:de:
         61:5c:c5:c6:63:ef:c5:cd:fa:2a:2c:ab:7e:a9:f0:9a:d2:dd:
         8c:14:1f:10:41:ea:12:c1:34:ed:e7:dd:fb:e6:af:ff:09:74:
         eb:94:39:c7:17:03:c3:88:34:02:93:a2:de:bc:3a:8b:95:05:
         71:f5:f5:3b:19:8f:fd:e2:9c:6d:3a:a2:b3:c4:bc:32:de:4e:
         48:ea:c4:e8:fe:4b:5e:7f:60:ae:16:e3:cb:60:1a:ce:65:58:
         b1:ee:5d:93:f5:e3:ee:71:86:13:b8:25:b9:f1:e5:53:a5:99:
         02:b2:da:78:a1:3d:06:2e:1c:67:84:d2:03:05:67:5a:8d:39:
         51:cb:9a:1d:41:8b:95:8e:e7:22:e7:35:39:23:57:a3:39:7e:
         69:09:7a:93:49:15:58:2c:f5:bf:f2:d5:3a:36:00:ab:5d:01:
         11:e4:f3:03:70:c9:f3:77:87:7a:d4:07:c5:cc:1c:c1:73:45:
         5d:bd:5b:b1:68:9a:2a:4f:2b:ee:e1:ad:b8:a3:c0:be:91:96:
         0b:01:46:32:64:ef:a7:02:15:3e:b4:96:ce:88:23:5a:41:cc:
         40:50:f0:65:39:59:a4:09:fe:e2:4f:70:6e:0b:d0:4b:cf:bf:
         71:d0:3c:d0
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO6jbTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTExMDE2MTM0OFoXDTI0MDcyMTE5Mzkx
OFowMzExMC8GA1UEAxMoNTI2ZjE0OGRiMzY0MmE0YTMwNjAzNWU2YjQyYzNiYTNi
MGM3ODE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALsqdDYp3QSF
89sF5Hryvf24yexZsWQU8kuZ2m5l8xpTLXSBFPcHZ+l3SWQTPWX3LbdsxxGVJ14Q
wMbQlRUnwOugjaZKeiwDOfEpD3Xje+AQ1S/xIJboXvUwVw84BnkiVAhk/rfKnASm
uudQEgFIHI86Lb5uuWQgu4UXuz+r1cb9nijD8wZxDIS8cgMcWI6MkaeYFUDMzMm7
PfQwr29RuKzfhU2wenLL3/qCqWsYBDZCezEKwP9WVinUvWW280L9EVa1IEiAkicc
+SyzM5r6BzokutYAeBTi12gSaF1dIG4K7ryLodoXBqq7DzEx0TfBQ66cTRORs1PQ
V2QKDw6OjUcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQHVZ1bfR2teBPqoyIiQb+e
FBVJxzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81OGQ0OTVhZS1iMjRl
LTQ5NDctOWNjYS00YmU5ZDQwNDkyN2MvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNThkNDk1YWUtYjI0ZS00
OTQ3LTljY2EtNGJlOWQ0MDQ5MjdjLzUyNmYxNDhkYjM2NDJhNGEzMDYwMzVlNmI0
MmMzYmEzYjBjNzgxNDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqi1WDANBAIAAjAHAwUAKAOQEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJcIwDQYJKoZIhvcNAQELBQADggEBACEI
ndF8wI90eokEAJqM4S/P3mFcxcZj78XN+iosq36p8JrS3YwUHxBB6hLBNO3n3fvm
r/8JdOuUOccXA8OINAKTot68OouVBXH19TsZj/3inG06orPEvDLeTkjqxOj+S15/
YK4W48tgGs5lWLHuXZP14+5xhhO4Jbnx5VOlmQKy2nihPQYuHGeE0gMFZ1qNOVHL
mh1Bi5WO5yLnNTkjV6M5fmkJepNJFVgs9b/y1To2AKtdARHk8wNwyfN3h3rUB8XM
HMFzRV29W7FomipPK+7hrbijwL6RlgsBRjJk76cCFT60ls6II1pBzEBQ8GU5WaQJ
/uJPcG4L0EvPv3HQPNA=
-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:48 2024 by rpki-client on console-fra.rpki-client.org