Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d3fb389f70a916033345e190c8c7b8f1e388696.cer
File:                     6d3fb389f70a916033345e190c8c7b8f1e388696.cer (raw, json)
Hash identifier:          CCa4P5t96DDDnZYSvsekXACxlK34Myl9+INONL8J35c=
Subject key identifier:   AC:48:F4:78:B6:A4:54:06:28:E6:F8:E7:BF:2C:FE:77:FB:DB:CB:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFCBCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99dd9bde-ddb3-4611-8419-1b5bd54ad15b/6d3fb389f70a916033345e190c8c7b8f1e388696.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99dd9bde-ddb3-4611-8419-1b5bd54ad15b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Jul 2022 16:22:13 +0000
Certificate not after:    Sun 01 Dec 2024 14:17:31 +0000
Subordinate resources:    AS: 272064
                          IP: 181.232.160.0/22
                          IP: 2803:e310::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16763855 (0xffcbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 16:22:13 2022 GMT
            Not After : Dec  1 14:17:31 2024 GMT
        Subject: CN=6d3fb389f70a916033345e190c8c7b8f1e388696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:59:ad:a3:79:58:f4:3e:fa:24:f4:a1:b0:
                    b3:77:b5:57:a6:21:a3:2d:af:e6:62:b9:0b:b6:94:
                    14:7f:46:07:bf:f9:78:7a:aa:83:ee:85:67:4b:25:
                    53:d6:b0:72:31:0a:08:8d:dd:2b:e5:66:02:78:a0:
                    72:e2:82:1c:e3:79:e4:92:70:82:70:53:1c:4c:57:
                    b8:ce:50:bc:42:24:db:af:b7:bf:33:6f:b7:84:08:
                    4f:a4:01:4b:f3:d4:6f:66:46:07:54:31:1b:ab:90:
                    06:18:0b:15:03:32:b8:85:31:19:ef:ed:27:52:b9:
                    ab:9d:44:63:c8:05:a0:e1:83:d4:9a:8a:a3:6d:53:
                    fd:2f:94:1b:e5:3e:7d:3c:bc:d7:3a:8b:5a:8f:6a:
                    0b:2f:69:a1:df:2e:02:67:43:e2:a6:40:61:60:c2:
                    ef:0d:f4:ff:2b:03:7c:88:89:02:77:53:6d:f5:0e:
                    e5:9f:e8:0f:15:43:03:8b:57:3a:3c:be:26:d5:12:
                    a8:a3:e7:ce:a9:1e:b0:82:9a:b2:b1:83:b0:da:49:
                    c6:3c:2f:7e:42:e6:7e:61:11:5d:37:9c:1a:61:0e:
                    49:ba:2a:9d:e1:94:73:1a:9c:45:be:da:42:9e:de:
                    16:62:84:33:03:f8:32:e6:9e:d6:b1:0e:c9:d4:0b:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:F4:78:B6:A4:54:06:28:E6:F8:E7:BF:2C:FE:77:FB:DB:CB:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99dd9bde-ddb3-4611-8419-1b5bd54ad15b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99dd9bde-ddb3-4611-8419-1b5bd54ad15b/6d3fb389f70a916033345e190c8c7b8f1e388696.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.160.0/22
                IPv6:
                  2803:e310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272064

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:de:d5:84:39:a4:32:43:9d:d5:6b:9a:ef:f0:c9:73:d0:
         88:d0:ab:24:bb:fd:d3:75:61:97:55:0f:a2:47:f3:6b:79:e7:
         ef:9b:4e:36:02:7c:b8:1b:74:f5:97:5c:30:a5:0d:a5:ee:21:
         f1:de:d8:86:ed:4d:5b:ae:df:68:a6:7c:ef:37:4d:80:71:c5:
         5f:49:47:83:05:f9:37:c6:77:64:cc:ca:6b:21:8b:60:1b:a5:
         d2:7d:fe:3c:d9:9e:22:f8:b3:76:48:a1:22:9e:54:f8:18:67:
         51:1c:38:bd:29:2b:8d:9d:a9:42:43:43:af:f7:8f:5b:54:30:
         a2:5e:21:15:24:97:3a:13:bf:64:95:52:bc:1e:31:8e:9a:db:
         44:45:09:94:95:74:d6:91:a2:11:07:72:1a:43:1f:f3:ab:4a:
         52:d0:6e:4c:d9:01:58:05:cb:2a:65:27:1e:a7:1b:90:be:fe:
         0d:28:25:df:ac:b9:7d:6d:05:54:8e:47:d4:70:ea:1b:22:e6:
         1f:d2:e2:67:3a:1b:38:ca:44:d9:75:03:ec:de:7c:65:1e:bd:
         4e:f8:17:ee:6a:82:3a:ac:0c:cb:5c:42:1e:1f:d9:db:0d:f2:
         34:85:90:db:c2:04:6d:f5:b3:e2:96:ff:98:31:16:fe:9d:90:
         be:c2:a4:f2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAP/LzzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDcxODE2MjIxM1oXDTI0MTIwMTE0MTcz
MVowMzExMC8GA1UEAxMoNmQzZmIzODlmNzBhOTE2MDMzMzQ1ZTE5MGM4YzdiOGYx
ZTM4ODY5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTFWa2jeVj0
Pvok9KGws3e1V6Yhoy2v5mK5C7aUFH9GB7/5eHqqg+6FZ0slU9awcjEKCI3dK+Vm
AnigcuKCHON55JJwgnBTHExXuM5QvEIk26+3vzNvt4QIT6QBS/PUb2ZGB1QxG6uQ
BhgLFQMyuIUxGe/tJ1K5q51EY8gFoOGD1JqKo21T/S+UG+U+fTy81zqLWo9qCy9p
od8uAmdD4qZAYWDC7w30/ysDfIiJAndTbfUO5Z/oDxVDA4tXOjy+JtUSqKPnzqke
sIKasrGDsNpJxjwvfkLmfmERXTecGmEOSboqneGUcxqcRb7aQp7eFmKEMwP4Muae
1rEOydQLKjkCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSsSPR4tqRUBijm+Oe/LP53
+9vL0jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85OWRkOWJkZS1kZGIz
LTQ2MTEtODQxOS0xYjViZDU0YWQxNWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTlkZDliZGUtZGRiMy00
NjExLTg0MTktMWI1YmQ1NGFkMTViLzZkM2ZiMzg5ZjcwYTkxNjAzMzM0NWUxOTBj
OGM3YjhmMWUzODg2OTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArXooDANBAIAAjAHAwUAKAPjEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJsAwDQYJKoZIhvcNAQELBQADggEBAGqb
3tWEOaQyQ53Va5rv8Mlz0IjQqyS7/dN1YZdVD6JH82t55++bTjYCfLgbdPWXXDCl
DaXuIfHe2IbtTVuu32imfO83TYBxxV9JR4MF+TfGd2TMymshi2AbpdJ9/jzZniL4
s3ZIoSKeVPgYZ1EcOL0pK42dqUJDQ6/3j1tUMKJeIRUklzoTv2SVUrweMY6a20RF
CZSVdNaRohEHchpDH/OrSlLQbkzZAVgFyyplJx6nG5C+/g0oJd+suX1tBVSOR9Rw
6hsi5h/S4mc6GzjKRNl1A+zefGUevU74F+5qgjqsDMtcQh4f2dsN8jSFkNvCBG31
s+KW/5gxFv6dkL7CpPI=
-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:21 2024 by rpki-client on console-ams.rpki-client.org