Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer
File:                     63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer (raw, json)
Hash identifier:          ceOs2Geuyh6H1N5Ba1/GeUdC9h9djwHMqprtR/5V9ms=
Subject key identifier:   5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2E1C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Aug 2021 18:02:23 +0000
Certificate not after:    Sun 25 Aug 2024 17:51:14 +0000
Subordinate resources:    IP: 45.224.124.0/22
                          IP: 2803:3a20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15917504 (0xf2e1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 13 18:02:23 2021 GMT
            Not After : Aug 25 17:51:14 2024 GMT
        Subject: CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:e2:e0:b7:c4:25:74:0c:2f:48:f9:a2:fb:
                    ab:e2:f9:5b:5d:95:eb:7a:7b:ce:ad:6c:b1:1f:b9:
                    57:98:b2:bf:3b:90:bd:c0:2d:85:1c:83:62:40:54:
                    7d:b9:c1:5e:36:af:c2:2c:a4:2c:39:c4:ce:55:14:
                    13:bf:2d:7c:eb:fe:82:04:d4:93:7f:d0:16:97:bf:
                    e3:33:b3:55:86:5e:f8:1d:04:bc:21:3f:41:37:01:
                    58:a9:41:b5:48:e0:84:7c:6c:e4:9c:07:b5:fe:b2:
                    63:95:d0:c4:c8:f2:fe:67:a5:bf:ad:17:64:01:53:
                    41:dd:34:5c:8c:d7:59:3f:ee:e9:06:16:5e:a5:a4:
                    57:fe:3a:b3:07:bb:ac:55:ba:b5:fb:4a:2f:a8:8e:
                    ce:25:fd:85:a1:af:6a:87:61:ff:db:0b:c0:99:a7:
                    24:4c:ab:08:f3:49:a4:e1:bf:e0:e6:c0:e1:8f:36:
                    dd:b2:1d:4c:ee:41:ba:f9:36:01:f9:8d:e8:33:1b:
                    19:2f:ec:6e:7f:73:25:c7:d8:96:5d:39:cf:e5:7c:
                    77:c4:0f:da:d2:d8:3a:a7:62:16:b8:40:99:46:fb:
                    7f:4b:2b:ca:52:13:cd:a9:a6:df:db:08:45:bc:3b:
                    27:d0:35:fe:3f:a1:31:92:c8:8a:69:06:1f:cd:3c:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.124.0/22
                IPv6:
                  2803:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:80:a0:07:61:bc:cf:5b:54:90:61:e1:dc:f3:e2:2e:9a:
         78:14:81:fb:fb:79:5b:ee:77:37:2c:2f:f1:55:8d:00:03:b9:
         3d:27:98:8f:c0:2f:fd:5b:eb:66:b7:eb:b6:5d:04:98:22:7a:
         ee:51:08:3f:38:f8:c3:f2:a4:75:c4:fc:f8:52:77:58:f3:f9:
         a3:93:2b:bb:44:3d:5f:8d:2b:c6:16:3b:ca:7c:ab:63:29:32:
         df:5a:e6:96:c7:ac:f9:30:b1:f3:3b:af:c9:32:70:01:e6:d1:
         e0:58:79:76:5f:87:6d:1f:cb:78:56:9d:96:c8:2e:85:ed:89:
         97:84:95:f1:8e:1c:ff:3b:c2:71:75:f8:6d:d8:ee:d3:f1:c1:
         36:10:3d:3f:ec:20:f3:50:ac:2e:d4:a9:99:6d:e6:5d:25:fe:
         4b:ed:b0:f2:bb:d4:db:90:50:4d:2e:eb:88:61:cb:be:dd:bd:
         d6:62:6f:fe:70:96:6c:12:58:2a:29:ee:3e:0f:7b:a4:b5:ef:
         63:81:d7:88:0d:b2:99:21:19:7d:e0:c4:2e:74:3b:b5:c3:ed:
         e0:e2:90:5c:51:6c:8b:6b:a4:7c:8f:f9:27:54:75:34:9f:14:
         22:21:47:6c:03:40:74:66:d8:b9:e6:85:90:d2:93:60:72:e9:
         05:39:e1:5a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAPLhwDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgxMzE4MDIyM1oXDTI0MDgyNTE3NTEx
NFowMzExMC8GA1UEAxMoNjNkODM0ZThhYWE3OGU3ZDdkZjczZjhhOWI2MGQ0ZmVj
ZmQyYmRjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJJt4uC3xCV0
DC9I+aL7q+L5W12V63p7zq1ssR+5V5iyvzuQvcAthRyDYkBUfbnBXjavwiykLDnE
zlUUE78tfOv+ggTUk3/QFpe/4zOzVYZe+B0EvCE/QTcBWKlBtUjghHxs5JwHtf6y
Y5XQxMjy/melv60XZAFTQd00XIzXWT/u6QYWXqWkV/46swe7rFW6tftKL6iOziX9
haGvaodh/9sLwJmnJEyrCPNJpOG/4ObA4Y823bIdTO5Buvk2AfmN6DMbGS/sbn9z
JcfYll05z+V8d8QP2tLYOqdiFrhAmUb7f0srylITzamm39sIRbw7J9A1/j+hMZLI
imkGH808sM8CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRbV/wddviuYkrBiH5qT4MC
miHK2TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNDgwNGRiNy1hMDYy
LTQ5YTAtOTA0Ny05Nzc4NjFiN2MyZDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjQ4MDRkYjctYTA2Mi00
OWEwLTkwNDctOTc3ODYxYjdjMmQwLzYzZDgzNGU4YWFhNzhlN2Q3ZGY3M2Y4YTli
NjBkNGZlY2ZkMmJkY2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3gfDANBAIAAjAHAwUAKAM6IDAN
BgkqhkiG9w0BAQsFAAOCAQEAGgCAoAdhvM9bVJBh4dzz4i6aeBSB+/t5W+53Nywv
8VWNAAO5PSeYj8Av/VvrZrfrtl0EmCJ67lEIPzj4w/KkdcT8+FJ3WPP5o5Mru0Q9
X40rxhY7ynyrYyky31rmlses+TCx8zuvyTJwAebR4Fh5dl+HbR/LeFadlsguhe2J
l4SV8Y4c/zvCcXX4bdju0/HBNhA9P+wg81CsLtSpmW3mXSX+S+2w8rvU25BQTS7r
iGHLvt291mJv/nCWbBJYKinuPg97pLXvY4HXiA2ymSEZfeDELnQ7tcPt4OKQXFFs
i2ukfI/5J1R1NJ8UIiFHbANAdGbYueaFkNKTYHLpBTnhWg==
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:58 2024 by rpki-client on console-ams.rpki-client.org