Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer
File:                     6e6c24239084f733054ec407015e5331b5b41b77.cer (raw, json)
Hash identifier:          kJrVznNcoZMhJDoC5YzKbXxKihwQ6Zo/5njMMm/hYpQ=
Subject key identifier:   F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D1477
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/6e6c24239084f733054ec407015e5331b5b41b77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Feb 2021 18:21:57 +0000
Certificate not after:    Mon 07 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 52255
                          IP: 186.0.160.0/20
                          IP: 201.159.56.0/21
                          IP: 2803:f100::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17634423 (0x10d1477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 18:21:57 2021 GMT
            Not After : Apr  7 06:00:00 2025 GMT
        Subject: CN=6e6c24239084f733054ec407015e5331b5b41b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:f3:4f:56:f7:d5:5e:1b:97:54:d8:c9:9d:
                    9f:fb:be:ff:41:b7:df:99:a5:7a:c3:3b:71:c5:5c:
                    29:e2:4e:61:32:fb:58:30:0e:01:1d:d9:df:7c:e5:
                    df:ae:7e:05:40:6c:58:3e:d0:1f:7b:f2:bf:1b:c9:
                    4a:5c:06:a8:e9:79:b7:4d:08:59:7e:41:af:e0:82:
                    1b:c9:a6:cf:d0:43:ee:13:7d:ef:01:c0:52:f7:33:
                    72:b8:07:1d:f4:aa:ed:c3:e4:4f:b5:0a:fb:03:a0:
                    28:a4:6d:5c:5f:8d:e0:6d:f2:f1:fb:2b:cd:92:6a:
                    86:45:36:77:20:f1:1b:9e:54:a3:e3:98:a5:0a:bb:
                    4c:a7:d5:4e:34:13:89:d7:32:15:84:6f:ec:00:96:
                    76:68:3b:9d:82:d4:77:b3:17:87:a7:88:8d:08:3c:
                    17:f9:79:87:e5:1e:c8:f1:02:93:cf:3a:13:8e:d3:
                    99:ad:9d:8f:ee:f5:38:ae:c4:06:8f:02:66:62:fd:
                    a8:fc:c3:0a:7e:39:5b:38:f4:cf:c3:ec:42:b0:b7:
                    28:55:ee:54:1e:e2:f9:82:33:73:4c:e3:87:4c:e4:
                    83:13:c2:20:7a:63:8a:b0:01:50:a8:d3:20:8f:30:
                    fe:b4:78:8e:ca:d1:46:28:7d:83:4c:d0:5a:fa:c8:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/6e6c24239084f733054ec407015e5331b5b41b77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.160.0/20
                  201.159.56.0/21
                IPv6:
                  2803:f100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52255

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:15:ed:57:3d:46:53:4f:06:a0:6c:74:8a:c5:92:bb:e6:
         fc:06:d5:d2:0a:64:31:30:0c:bb:53:45:9d:9b:1d:50:03:29:
         de:76:8f:35:54:04:54:2a:61:ac:a7:87:e7:24:f0:9d:82:61:
         9a:48:7b:d4:99:bd:0d:54:b4:9a:3a:ed:97:63:ce:8b:d7:d5:
         06:ef:e4:49:f2:49:76:47:66:a8:67:3a:48:67:18:c6:e6:e4:
         bb:40:5c:ae:50:56:75:83:c3:c1:ea:a4:76:96:da:e2:08:77:
         7d:93:f9:48:74:1f:cb:34:f8:eb:01:05:8d:1d:f6:95:81:bd:
         59:27:51:b4:22:e6:7d:ee:60:60:3b:92:67:cf:7d:7d:03:fb:
         18:7c:c7:54:b7:c6:58:31:1d:7d:a4:ff:d1:74:7f:39:6c:34:
         f9:03:f2:37:18:69:f5:da:be:0f:03:bf:b8:07:1d:7d:3b:84:
         6b:c6:a2:1e:cf:14:f7:5b:be:db:9e:39:a2:d6:3a:26:1b:10:
         8d:af:1d:92:db:fe:56:b3:21:e9:b8:7e:8d:ef:49:6f:a3:74:
         72:b7:43:b4:c7:1a:8d:70:72:7f:6f:0f:be:fe:d1:ba:fa:57:
         54:31:33:53:aa:52:96:8f:65:9f:02:1f:e2:08:2f:1c:ef:d9:
         8f:2c:d7:b2
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIEAQ0UdzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDIyNjE4MjE1N1oXDTI1MDQwNzA2MDAw
MFowMzExMC8GA1UEAxMoNmU2YzI0MjM5MDg0ZjczMzA1NGVjNDA3MDE1ZTUzMzFi
NWI0MWI3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALwa809W99Ve
G5dU2Mmdn/u+/0G335mlesM7ccVcKeJOYTL7WDAOAR3Z33zl365+BUBsWD7QH3vy
vxvJSlwGqOl5t00IWX5Br+CCG8mmz9BD7hN97wHAUvczcrgHHfSq7cPkT7UK+wOg
KKRtXF+N4G3y8fsrzZJqhkU2dyDxG55Uo+OYpQq7TKfVTjQTidcyFYRv7ACWdmg7
nYLUd7MXh6eIjQg8F/l5h+UeyPECk886E47Tma2dj+71OK7EBo8CZmL9qPzDCn45
Wzj0z8PsQrC3KFXuVB7i+YIzc0zjh0zkgxPCIHpjirABUKjTII8w/rR4jsrRRih9
g0zQWvrIWKsCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBTwvRpmlJOQyHmuUCIsTGwa
ykx32zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MTk3NDgwZi1hNGIz
LTRlMDgtOTg0ZC1jNDUyMWFjNDUwOTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTE5NzQ4MGYtYTRiMy00
ZTA4LTk4NGQtYzQ1MjFhYzQ1MDk0LzZlNmMyNDIzOTA4NGY3MzMwNTRlYzQwNzAx
NWU1MzMxYjViNDFiNzcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLoAoAMEA8mfODANBAIAAjAHAwUA
KAPxADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzB8wDQYJKoZIhvcNAQELBQAD
ggEBACM7Fe1XPUZTTwagbHSKxZK75vwG1dIKZDEwDLtTRZ2bHVADKd52jzVUBFQq
Yaynh+ck8J2CYZpIe9SZvQ1UtJo67ZdjzovX1Qbv5EnySXZHZqhnOkhnGMbm5LtA
XK5QVnWDw8HqpHaW2uIId32T+Uh0H8s0+OsBBY0d9pWBvVknUbQi5n3uYGA7kmfP
fX0D+xh8x1S3xlgxHX2k/9F0fzlsNPkD8jcYafXavg8Dv7gHHX07hGvGoh7PFPdb
vtueOaLWOiYbEI2vHZLb/lazIem4fo3vSW+jdHK3Q7THGo1wcn9vD77+0br6V1Qx
M1OqUpaPZZ8CH+IILxzv2Y8s17I=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:01 2024 by rpki-client on console-ams.rpki-client.org