Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.cer
File:                     6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.cer (raw, json)
Hash identifier:          jmQAoLF6QGCUoZIQktQQ2FrUsY0/NZl1HQXvSsG8KzI=
Subject key identifier:   97:21:94:F2:C7:82:D8:97:6F:AD:23:F3:87:10:31:E4:CA:38:D7:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E3E1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:35 +0000
Certificate not after:    Thu 17 Apr 2025 15:00:00 +0000
Subordinate resources:    AS: 27987
                          IP: 168.227.204.0/22
                          IP: 181.189.160.0/20
                          IP: 186.190.176.0/20
                          IP: 190.103.192.0/19
                          IP: 2803:8500::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17710620 (0x10e3e1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:35 2017 GMT
            Not After : Apr 17 15:00:00 2025 GMT
        Subject: CN=6ae7fb8e2cfd50ff05f417ed98f81b107912a55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:42:41:28:95:42:d3:4d:b2:ad:5f:c0:cb:a1:
                    da:da:8e:07:52:04:fb:d1:23:c2:1e:28:d3:5e:0b:
                    0e:50:6a:39:ac:1a:58:d2:ca:2b:d1:8d:68:25:0f:
                    08:15:e8:c8:fa:8c:aa:21:18:33:69:d9:fc:14:1d:
                    a0:4f:ad:35:f9:95:2d:b8:0e:95:49:b7:61:97:31:
                    b4:33:9d:15:78:c2:33:88:f6:fa:d1:1a:7f:94:a0:
                    0f:51:73:63:8e:eb:02:a7:34:f1:72:c7:55:b1:9c:
                    1d:9e:f1:e7:ff:2a:2e:7d:25:25:f1:02:da:a5:52:
                    25:fc:c0:4b:cf:52:e7:26:50:fb:56:66:52:9c:6a:
                    11:e9:0f:c0:3f:4d:f4:b0:ce:4b:28:10:44:89:31:
                    d2:76:97:c5:06:d0:57:dc:2f:50:77:6d:26:75:32:
                    a4:11:52:11:b3:b8:3b:1d:ec:91:d3:1d:81:6e:45:
                    10:8a:c9:47:e0:ad:9e:b2:49:e9:bf:72:4f:1d:5d:
                    54:37:d7:4d:53:c1:ae:32:bd:86:f2:fc:b3:9f:8c:
                    7b:50:c3:ef:15:ce:d7:43:ee:bb:07:72:c5:b9:d6:
                    5c:6b:89:f5:a9:22:aa:4f:f6:60:72:52:a2:08:c9:
                    21:dd:2d:0e:25:be:12:7e:10:f1:e6:df:2a:14:3a:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:94:F2:C7:82:D8:97:6F:AD:23:F3:87:10:31:E4:CA:38:D7:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.204.0/22
                  181.189.160.0/20
                  186.190.176.0/20
                  190.103.192.0/19
                IPv6:
                  2803:8500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27987

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:62:40:02:7a:93:fe:ab:41:16:18:80:c9:ca:11:2e:72:
         41:14:0c:ac:b3:79:02:55:0a:28:43:a4:0c:fc:3d:1f:ef:6c:
         72:2f:cf:d5:48:7f:3c:f4:99:df:e1:79:c6:ee:1f:94:e9:72:
         24:91:d2:99:a2:39:d1:15:ad:88:ac:6f:d2:83:23:56:17:d0:
         46:42:a1:16:f6:2a:9d:88:9c:e1:b9:79:98:fd:30:bd:60:b2:
         01:85:87:ad:5f:1a:24:ef:33:1b:9c:1c:e8:22:dd:56:dd:95:
         e6:bc:b9:5d:7a:63:66:f0:1f:1c:5f:07:89:bb:c5:96:b2:d6:
         3c:35:13:40:a0:88:e9:82:01:28:ff:1a:4c:9e:82:8c:42:56:
         98:5b:59:42:17:9b:4b:cb:0c:8f:a2:9c:ab:4f:82:fa:67:6a:
         6d:bf:f0:b6:a4:66:be:e0:a6:3c:45:a2:2c:61:14:3a:87:46:
         30:b9:6b:f0:44:b7:cb:c0:fe:62:dd:c0:3c:0f:b4:d5:de:42:
         8b:40:09:7d:5c:ea:ae:6c:ee:0d:a2:f9:aa:6e:8c:36:d6:84:
         15:06:04:9b:ae:d8:45:5e:7b:98:a2:41:03:db:8e:ea:82:36:
         d0:06:bb:6b:8e:75:34:5d:1a:4a:23:c5:de:1f:fe:47:be:bd:
         9a:60:d7:19
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIEAQ4+HDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzNVoXDTI1MDQxNzE1MDAw
MFowMzExMC8GA1UEAxMoNmFlN2ZiOGUyY2ZkNTBmZjA1ZjQxN2VkOThmODFiMTA3
OTEyYTU1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIxCQSiVQtNN
sq1fwMuh2tqOB1IE+9Ejwh4o014LDlBqOawaWNLKK9GNaCUPCBXoyPqMqiEYM2nZ
/BQdoE+tNfmVLbgOlUm3YZcxtDOdFXjCM4j2+tEaf5SgD1FzY47rAqc08XLHVbGc
HZ7x5/8qLn0lJfEC2qVSJfzAS89S5yZQ+1ZmUpxqEekPwD9N9LDOSygQRIkx0naX
xQbQV9wvUHdtJnUypBFSEbO4Ox3skdMdgW5FEIrJR+CtnrJJ6b9yTx1dVDfXTVPB
rjK9hvL8s5+Me1DD7xXO10PuuwdyxbnWXGuJ9akiqk/2YHJSogjJId0tDiW+En4Q
8ebfKhQ6CGsCAwEAAaOCAxowggMWMB0GA1UdDgQWBBSXIZTyx4LYl2+tI/OHEDHk
yjjXSjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lZTE3ZWRiOC03MGVh
LTQ2MTctYTE0NS00NzgxYjFjZGQ5NjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZWUxN2VkYjgtNzBlYS00
NjE3LWExNDUtNDc4MWIxY2RkOTYwLzZhZTdmYjhlMmNmZDUwZmYwNWY0MTdlZDk4
ZjgxYjEwNzkxMmE1NWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAqjjzAMEBLW9oAMEBLq+sAMEBb5n
wDANBAIAAjAHAwUAKAOFADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJtUzANBgkq
hkiG9w0BAQsFAAOCAQEAfvtiQAJ6k/6rQRYYgMnKES5yQRQMrLN5AlUKKEOkDPw9
H+9sci/P1Uh/PPSZ3+F5xu4flOlyJJHSmaI50RWtiKxv0oMjVhfQRkKhFvYqnYic
4bl5mP0wvWCyAYWHrV8aJO8zG5wc6CLdVt2V5ry5XXpjZvAfHF8HibvFlrLWPDUT
QKCI6YIBKP8aTJ6CjEJWmFtZQhebS8sMj6Kcq0+C+mdqbb/wtqRmvuCmPEWiLGEU
OodGMLlr8ES3y8D+Yt3APA+01d5Ci0AJfVzqrmzuDaL5qm6MNtaEFQYEm67YRV57
mKJBA9uO6oI20Aa7a451NF0aSiPF3h/+R769mmDXGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:31 2024 by rpki-client on console-ams.rpki-client.org