Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.cer
File:                     78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.cer (raw, json)
Hash identifier:          HLpHeb0BfoLIVpxJiDmvTvfQitEi7OSWF6r1jh562jM=
Subject key identifier:   14:32:CA:88:14:B6:3F:47:8F:83:A7:5B:FA:26:44:5B:3E:7A:8B:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102D13A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 04 Mar 2020 16:23:48 +0000
Certificate not after:    Fri 03 Jan 2025 14:09:41 +0000
Subordinate resources:    AS: 272039
                          IP: 190.89.172.0/22
                          IP: 2803:66e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16961850 (0x102d13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  4 16:23:48 2020 GMT
            Not After : Jan  3 14:09:41 2025 GMT
        Subject: CN=78246fae0a86c18d3d92d3bab27319c2ee7fb5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:c9:d8:a7:aa:f1:ff:65:00:f5:c6:94:ea:
                    86:5a:7c:e9:20:d5:58:ff:d8:3e:cd:1c:b5:d8:ae:
                    38:5f:3d:31:e9:9f:3e:a9:f7:38:09:6d:be:f0:72:
                    c3:4e:29:9c:3c:fe:a1:07:fc:ef:a4:74:f4:85:c0:
                    39:a1:b4:9f:ef:24:16:77:21:d4:8e:45:3e:8b:14:
                    be:1d:6e:38:d0:ea:bb:ed:a3:46:ea:a5:4d:9e:da:
                    fa:16:31:2d:b7:71:4c:94:52:21:90:cf:52:6b:4b:
                    59:7e:17:de:47:c2:a3:02:fa:48:fd:a2:60:d4:53:
                    f4:ba:1a:c0:89:54:f7:84:80:69:aa:23:e9:62:1c:
                    45:ac:f6:57:87:39:02:5a:79:19:cf:63:47:25:d0:
                    c8:c4:2b:01:36:65:b9:36:a2:77:56:e9:0c:37:35:
                    25:3e:ac:8c:d2:dc:5d:cf:34:92:9a:75:3d:da:01:
                    50:af:f8:72:e3:b4:cf:00:26:d9:19:d6:10:b2:07:
                    a2:45:3e:70:11:00:e8:cb:29:f6:3c:10:0a:d1:5b:
                    09:e7:77:2a:56:46:e6:5a:4f:da:5c:0a:9d:67:fa:
                    17:12:fb:6f:81:a0:cb:93:2c:cd:28:1b:c1:84:2b:
                    e9:a8:63:ac:39:ec:16:71:75:ef:23:78:af:9a:0d:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:32:CA:88:14:B6:3F:47:8F:83:A7:5B:FA:26:44:5B:3E:7A:8B:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.172.0/22
                IPv6:
                  2803:66e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272039

    Signature Algorithm: sha256WithRSAEncryption
         33:1e:6d:8b:c9:ff:e7:7d:96:23:d0:97:53:41:85:a5:9e:56:
         42:97:fa:06:7c:db:a2:8c:ed:c8:38:8a:05:ce:67:7e:8c:3c:
         ff:99:9d:e8:7f:b5:fb:24:3e:fc:b3:3d:b8:b2:16:b2:a7:ad:
         6c:4d:7a:32:e4:58:da:64:29:d7:03:ce:0d:b3:67:d3:94:d6:
         22:49:36:4b:89:63:51:42:81:23:fe:fa:c5:44:d1:49:82:9f:
         67:ed:83:da:60:18:c7:02:8d:c2:0f:dd:f9:cc:fa:5a:8d:92:
         32:55:86:eb:2e:b2:8b:36:c4:9b:0b:ff:e1:85:c4:ae:4d:0d:
         32:8b:97:71:0a:7d:50:a8:29:2c:ef:d9:87:0f:43:10:f9:bf:
         1c:82:98:54:a2:fb:5f:b3:57:df:da:12:78:37:de:31:5c:9d:
         f4:5b:e5:b1:9e:62:25:8e:de:f2:70:ae:7e:48:84:1b:34:f9:
         76:01:7f:d7:4f:54:d2:33:d4:51:eb:f3:3c:80:d7:ac:3b:69:
         7f:d0:49:db:6a:cc:8a:56:28:a5:16:91:94:8f:8d:c8:57:c4:
         b9:32:be:8f:c3:ed:0d:7f:40:1a:4e:a7:be:dc:40:4d:66:e5:
         1b:d8:3a:da:32:7d:fa:56:5d:65:73:7a:9a:7d:c2:75:8a:89:
         95:01:ba:4f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQLROjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDMwNDE2MjM0OFoXDTI1MDEwMzE0MDk0
MVowMzExMC8GA1UEAxMoNzgyNDZmYWUwYTg2YzE4ZDNkOTJkM2JhYjI3MzE5YzJl
ZTdmYjVhZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcYydinqvH/
ZQD1xpTqhlp86SDVWP/YPs0ctdiuOF89MemfPqn3OAltvvByw04pnDz+oQf876R0
9IXAOaG0n+8kFnch1I5FPosUvh1uONDqu+2jRuqlTZ7a+hYxLbdxTJRSIZDPUmtL
WX4X3kfCowL6SP2iYNRT9LoawIlU94SAaaoj6WIcRaz2V4c5Alp5Gc9jRyXQyMQr
ATZluTaid1bpDDc1JT6sjNLcXc80kpp1PdoBUK/4cuO0zwAm2RnWELIHokU+cBEA
6Msp9jwQCtFbCed3KlZG5lpP2lwKnWf6FxL7b4Ggy5MszSgbwYQr6ahjrDnsFnF1
7yN4r5oNdGsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBQUMsqIFLY/R4+Dp1v6JkRb
PnqLBjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kZGYzYjFkYS1lMTkw
LTQ1OTUtYTBjYi1jZDFkMmI5OThlMWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZGRmM2IxZGEtZTE5MC00
NTk1LWEwY2ItY2QxZDJiOTk4ZTFlLzc4MjQ2ZmFlMGE4NmMxOGQzZDkyZDNiYWIy
NzMxOWMyZWU3ZmI1YWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5ZrDANBAIAAjAHAwUAKANm4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJqcwDQYJKoZIhvcNAQELBQADggEBADMe
bYvJ/+d9liPQl1NBhaWeVkKX+gZ826KM7cg4igXOZ36MPP+Zneh/tfskPvyzPbiy
FrKnrWxNejLkWNpkKdcDzg2zZ9OU1iJJNkuJY1FCgSP++sVE0UmCn2ftg9pgGMcC
jcIP3fnM+lqNkjJVhususos2xJsL/+GFxK5NDTKLl3EKfVCoKSzv2YcPQxD5vxyC
mFSi+1+zV9/aEng33jFcnfRb5bGeYiWO3vJwrn5IhBs0+XYBf9dPVNIz1FHr8zyA
16w7aX/QSdtqzIpWKKUWkZSPjchXxLkyvo/D7Q1/QBpOp77cQE1m5RvYOtoyffpW
XWVzepp9wnWKiZUBuk8=
-----END CERTIFICATE-----
Generated at Fri Feb 23 22:54:23 2024 by rpki-client on console-fra.rpki-client.org