Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f8d39caed23376f107b16b16e22c05fa02572a6.cer
File:                     6f8d39caed23376f107b16b16e22c05fa02572a6.cer (raw, json)
Hash identifier:          vi1SUDQ8fpLvdCOQ0ykfD89n5YFdesYJ4Kw9Hs70Dlo=
Subject key identifier:   48:E6:3E:45:8C:CF:F5:D6:E0:F4:3E:A4:46:E3:EB:BE:24:58:82:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5F3B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1620f963-e060-44cd-aa15-f52e7191a723/6f8d39caed23376f107b16b16e22c05fa02572a6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1620f963-e060-44cd-aa15-f52e7191a723/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Nov 2020 13:50:27 +0000
Certificate not after:    Sat 21 Sep 2024 00:18:07 +0000
Subordinate resources:    AS: 271826
                          IP: 2801:1e6::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16118711 (0xf5f3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 23 13:50:27 2020 GMT
            Not After : Sep 21 00:18:07 2024 GMT
        Subject: CN=6f8d39caed23376f107b16b16e22c05fa02572a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:4f:d7:44:15:f9:58:49:84:71:cb:ee:0f:
                    9c:1f:16:55:ab:9a:90:dd:5f:7f:e8:dd:60:b4:9b:
                    c9:ac:b0:8b:47:40:d4:85:29:a8:1b:86:71:33:93:
                    5f:fc:e7:46:61:12:10:fa:bd:76:cb:32:fe:c1:63:
                    5e:29:38:68:48:2c:95:9e:b8:b1:df:22:91:7d:20:
                    5a:5e:c9:1b:51:b1:c0:54:d4:8d:6a:55:3d:84:0f:
                    c5:32:90:04:10:71:d8:2d:6b:fe:24:72:bd:24:4a:
                    a1:47:f4:bb:86:e3:71:f8:42:3b:55:04:10:ea:40:
                    ac:60:87:d3:25:29:22:7b:e3:51:fc:e1:f6:4b:85:
                    4f:68:87:12:86:ff:7b:e3:e8:81:69:c3:0a:ce:bb:
                    4c:5a:1d:ee:c4:2e:dc:2b:87:a9:05:fd:7a:ef:9a:
                    2e:91:66:97:6a:a7:00:6d:49:78:ca:cc:4d:11:7c:
                    2e:1a:6b:0b:1a:6e:c7:91:ad:6c:6d:72:5a:24:a8:
                    05:4d:df:03:ea:2f:85:8f:e1:60:0c:06:db:02:0b:
                    6c:0b:cf:31:b5:63:6c:c7:59:7a:e8:26:fa:52:19:
                    41:be:c1:0b:27:d8:5c:bb:20:a8:7b:97:0e:d8:21:
                    d1:04:48:e5:c9:46:ba:3f:b6:b5:e3:be:75:ac:ac:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:3E:45:8C:CF:F5:D6:E0:F4:3E:A4:46:E3:EB:BE:24:58:82:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1620f963-e060-44cd-aa15-f52e7191a723/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1620f963-e060-44cd-aa15-f52e7191a723/6f8d39caed23376f107b16b16e22c05fa02572a6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e6::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271826

    Signature Algorithm: sha256WithRSAEncryption
         5f:9f:c5:f8:3d:dc:0e:0f:99:ad:c5:14:5b:a5:97:34:c0:74:
         23:5f:62:66:fa:96:76:f2:36:15:5c:1c:af:30:93:c2:77:0f:
         3b:28:11:a1:01:b3:d2:50:72:f2:76:05:be:9d:48:12:65:9c:
         9a:b8:d3:b0:67:29:0c:e7:db:31:eb:6e:ff:49:e9:52:e3:0e:
         fb:c9:1b:b9:ca:db:87:94:e6:4d:03:8b:94:00:62:4b:f5:8c:
         7c:45:d0:06:8b:81:75:9e:5b:45:aa:a4:9a:65:aa:75:4e:e0:
         06:31:23:42:30:c6:91:e9:b4:8e:c1:a2:5d:a5:8a:48:ea:ea:
         64:73:de:70:c3:4c:c2:73:fe:a1:39:c6:cc:ff:4f:e5:9d:05:
         87:55:fe:5b:35:7b:35:fc:01:e7:3d:e1:d9:8a:c1:4f:1d:77:
         3e:08:60:fe:b3:1e:5c:b1:8c:3d:b8:f3:6f:ed:f7:95:12:7c:
         41:77:d0:54:30:7f:56:3d:93:34:92:3a:2e:e1:c5:cd:09:2e:
         fd:da:3c:31:79:5e:b8:21:77:6e:78:f5:4d:87:df:20:41:c2:
         25:ab:ed:84:e9:ba:1a:8e:89:8b:6a:2d:c6:82:31:63:ef:af:
         8e:59:af:dc:23:53:d4:00:10:a3:b2:6a:85:3a:f7:83:ce:51:
         62:eb:ba:d2
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEAPXztzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTEyMzEzNTAyN1oXDTI0MDkyMTAwMTgw
N1owMzExMC8GA1UEAxMoNmY4ZDM5Y2FlZDIzMzc2ZjEwN2IxNmIxNmUyMmMwNWZh
MDI1NzJhNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfNT9dEFflY
SYRxy+4PnB8WVauakN1ff+jdYLSbyaywi0dA1IUpqBuGcTOTX/znRmESEPq9dssy
/sFjXik4aEgslZ64sd8ikX0gWl7JG1GxwFTUjWpVPYQPxTKQBBBx2C1r/iRyvSRK
oUf0u4bjcfhCO1UEEOpArGCH0yUpInvjUfzh9kuFT2iHEob/e+PogWnDCs67TFod
7sQu3CuHqQX9eu+aLpFml2qnAG1JeMrMTRF8LhprCxpux5GtbG1yWiSoBU3fA+ov
hY/hYAwG2wILbAvPMbVjbMdZeugm+lIZQb7BCyfYXLsgqHuXDtgh0QRI5clGuj+2
teO+dayspM0CAwEAAaOCAv0wggL5MB0GA1UdDgQWBBRI5j5FjM/11uD0PqRG4+u+
JFiCLDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xNjIwZjk2My1lMDYw
LTQ0Y2QtYWExNS1mNTJlNzE5MWE3MjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTYyMGY5NjMtZTA2MC00
NGNkLWFhMTUtZjUyZTcxOTFhNzIzLzZmOGQzOWNhZWQyMzM3NmYxMDdiMTZiMTZl
MjJjMDVmYTAyNTcyYTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAeYAADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEJdIwDQYJKoZIhvcNAQELBQADggEBAF+fxfg93A4Pma3FFFul
lzTAdCNfYmb6lnbyNhVcHK8wk8J3DzsoEaEBs9JQcvJ2Bb6dSBJlnJq407BnKQzn
2zHrbv9J6VLjDvvJG7nK24eU5k0Di5QAYkv1jHxF0AaLgXWeW0WqpJplqnVO4AYx
I0IwxpHptI7Bol2likjq6mRz3nDDTMJz/qE5xsz/T+WdBYdV/ls1ezX8Aec94dmK
wU8ddz4IYP6zHlyxjD2482/t95USfEF30FQwf1Y9kzSSOi7hxc0JLv3aPDF5Xrgh
d2549U2H3yBBwiWr7YTpuhqOiYtqLcaCMWPvr45Zr9wjU9QAEKOyaoU694POUWLr
utI=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:01 2024 by rpki-client on console-ams.rpki-client.org