Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.cer
File:                     5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.cer (raw, json)
Hash identifier:          HLbk4sx9P8dZwpetxg9AwF85hwXPgts/oJ4jJQUsBLo=
Subject key identifier:   59:E8:32:23:A7:50:DD:19:83:C3:4A:0A:FE:10:B3:74:57:9A:C9:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0A314
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 27 Nov 2021 16:00:07 +0000
Certificate not after:    Thu 16 May 2024 16:42:53 +0000
Subordinate resources:    AS: 271942
                          IP: 2803:2610::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14721812 (0xe0a314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 27 16:00:07 2021 GMT
            Not After : May 16 16:42:53 2024 GMT
        Subject: CN=5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:14:2a:e0:f4:5b:f5:80:6b:69:67:85:ae:
                    c5:9a:b5:f9:9b:b6:ab:17:f7:2b:00:21:eb:c9:8b:
                    f0:bc:b2:a0:4a:3e:9d:cf:b4:0c:ab:2b:74:db:3c:
                    7f:97:b9:35:f2:bf:b1:18:2c:f3:d7:7d:9c:05:05:
                    fd:83:72:72:aa:32:51:32:57:80:50:31:b0:09:04:
                    e2:8f:c1:30:7d:51:7b:bb:7d:f4:2c:26:08:d3:3e:
                    ec:b7:89:71:70:37:70:c3:78:2d:ca:dd:8b:69:34:
                    15:50:e9:6e:b5:58:2b:5f:84:1b:94:ad:fe:33:cd:
                    30:fa:55:05:0e:2f:9d:63:a1:8f:8a:3c:2f:2b:6c:
                    b7:20:50:fe:fe:e5:8d:94:5a:1c:44:72:ce:f1:1f:
                    14:dc:78:5b:00:84:63:ab:94:ef:0a:7f:4c:c8:b5:
                    02:f4:b8:fa:7b:ba:aa:43:44:ea:b1:e7:4b:dd:14:
                    cc:13:4a:aa:2c:09:d5:4a:12:6e:29:74:65:12:f9:
                    82:86:4f:e3:fa:0a:d9:51:9c:e7:92:b4:25:98:ba:
                    75:3f:df:55:ab:b1:aa:73:5e:a9:86:19:97:4c:53:
                    4b:16:a6:33:f0:07:8b:33:57:4a:63:f6:e5:0c:7c:
                    6e:5e:cb:5b:97:ee:52:af:23:11:63:48:5f:6f:e0:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E8:32:23:A7:50:DD:19:83:C3:4A:0A:FE:10:B3:74:57:9A:C9:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271942

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:4e:98:06:f4:15:74:36:a7:a6:24:17:ca:52:c3:9c:b1:
         43:2c:d6:78:73:bb:0d:65:e0:a0:a9:09:e7:55:ac:97:49:0e:
         34:a4:30:cf:2d:eb:1d:10:cf:96:eb:bd:44:5f:f5:a1:95:d5:
         3a:07:fd:69:5f:d7:76:c4:82:a0:2d:2d:48:c3:33:28:2d:ba:
         08:9f:b3:3f:a2:aa:c2:32:80:c9:34:3f:3d:88:36:a0:cb:29:
         26:1d:17:1b:fb:cc:de:9b:9e:08:52:5f:ec:64:ef:ab:9f:1f:
         13:b4:00:23:e9:14:a8:57:1b:21:3e:e5:88:b7:ea:b4:0e:20:
         e2:60:36:b4:71:41:1f:4a:e7:74:bd:c6:bf:43:37:48:9c:86:
         f8:02:e4:6e:2a:a4:55:bf:b5:fd:a3:80:72:a2:22:c4:7a:76:
         fe:f7:b9:8b:33:f1:b0:2e:83:d3:55:a6:67:74:ec:ad:d8:0a:
         08:41:76:3e:98:80:84:37:04:a0:da:25:d5:50:bd:a9:1e:d0:
         91:28:f5:1b:ed:d1:a8:bb:4a:bc:8b:a8:14:16:c0:09:d7:77:
         02:6e:07:3d:d0:df:51:d6:88:01:95:35:a7:c4:cb:d8:85:62:
         4c:ac:bc:eb:cf:6f:3e:9a:75:11:41:ac:94:5a:6c:41:b5:1a:
         97:2d:65:9f
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOCjFDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTEyNzE2MDAwN1oXDTI0MDUxNjE2NDI1
M1owMzExMC8GA1UEAxMoNWI4OTI2OTU5NDBmYTJmY2RmY2M3YzdlY2MyM2FhYTA5
MDUyYmZjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI9XFCrg9Fv1
gGtpZ4WuxZq1+Zu2qxf3KwAh68mL8LyyoEo+nc+0DKsrdNs8f5e5NfK/sRgs89d9
nAUF/YNycqoyUTJXgFAxsAkE4o/BMH1Re7t99CwmCNM+7LeJcXA3cMN4Lcrdi2k0
FVDpbrVYK1+EG5St/jPNMPpVBQ4vnWOhj4o8LytstyBQ/v7ljZRaHERyzvEfFNx4
WwCEY6uU7wp/TMi1AvS4+nu6qkNE6rHnS90UzBNKqiwJ1UoSbil0ZRL5goZP4/oK
2VGc55K0JZi6dT/fVauxqnNeqYYZl0xTSxamM/AHizNXSmP25Qx8bl7LW5fuUq8j
EWNIX2/gm6UCAwEAAaOCAvswggL3MB0GA1UdDgQWBBRZ6DIjp1DdGYPDSgr+ELN0
V5rJPDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lYmIwNzcwYy04ZmZi
LTQ0MzktYTkzYy1iNTRhZmU0YWE1MjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWJiMDc3MGMtOGZmYi00
NDM5LWE5M2MtYjU0YWZlNGFhNTIzLzViODkyNjk1OTQwZmEyZmNkZmNjN2M3ZWNj
MjNhYWEwOTA1MmJmY2MubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDJhAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCZGMA0GCSqGSIb3DQEBCwUAA4IBAQBmtE6YBvQVdDanpiQXylLD
nLFDLNZ4c7sNZeCgqQnnVayXSQ40pDDPLesdEM+W671EX/WhldU6B/1pX9d2xIKg
LS1IwzMoLboIn7M/oqrCMoDJND89iDagyykmHRcb+8zem54IUl/sZO+rnx8TtAAj
6RSoVxshPuWIt+q0DiDiYDa0cUEfSud0vca/QzdInIb4AuRuKqRVv7X9o4ByoiLE
enb+97mLM/GwLoPTVaZndOyt2AoIQXY+mICENwSg2iXVUL2pHtCRKPUb7dGou0q8
i6gUFsAJ13cCbgc90N9R1ogBlTWnxMvYhWJMrLzrz28+mnURQayUWmxBtRqXLWWf
-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:46 2024 by rpki-client on console-fra.rpki-client.org