Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8376e0c0962757e44ca6c3bedc880f9f24398416.cer
File:                     8376e0c0962757e44ca6c3bedc880f9f24398416.cer (raw, json)
Hash identifier:          n8Or0ZczClg/HhI+IfkI71cyMQUUxvrBp7shrgGB2uM=
Subject key identifier:   24:2E:F9:73:63:9E:E2:27:DF:B0:8C:DD:9F:B0:2A:BE:40:59:B2:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01015991
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/817186bd-5556-4e29-a2f4-4961a6f94897/8376e0c0962757e44ca6c3bedc880f9f24398416.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/817186bd-5556-4e29-a2f4-4961a6f94897/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 Aug 2022 01:41:19 +0000
Certificate not after:    Mon 16 Dec 2024 19:42:31 +0000
Subordinate resources:    AS: 272073
                          IP: 2803:8b10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16865681 (0x1015991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 01:41:19 2022 GMT
            Not After : Dec 16 19:42:31 2024 GMT
        Subject: CN=8376e0c0962757e44ca6c3bedc880f9f24398416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:26:38:dd:77:c2:c9:ac:c3:f3:c5:4b:a2:
                    99:19:a0:bc:63:3e:45:7a:6f:51:64:3d:a0:13:20:
                    57:55:d9:36:07:fb:fa:c1:ee:3b:31:c8:78:b8:6d:
                    85:d5:7e:3e:a3:50:f5:1b:51:f1:a2:c6:48:b5:84:
                    11:4a:d9:eb:f2:15:81:cf:13:34:28:6f:4f:c9:e8:
                    22:a6:1c:d8:a6:de:c3:6c:89:5d:3b:77:f7:71:ae:
                    18:4d:c3:c1:8d:96:47:f3:86:6e:94:f7:25:4b:34:
                    c7:f6:61:b9:32:92:12:e4:da:d9:76:bd:dd:5e:e2:
                    de:01:0e:ba:b5:d0:7b:78:0e:db:ed:0b:94:e8:e1:
                    07:f8:e8:96:2f:27:92:99:54:0b:12:7d:e4:48:d0:
                    70:cf:d5:02:ea:f6:f0:eb:dd:5f:8f:cc:00:dd:51:
                    0f:25:dc:f2:44:99:92:31:84:58:54:5a:1f:19:83:
                    e1:8c:21:97:7d:db:68:ae:4b:10:5f:e9:a6:e0:28:
                    fa:44:13:fa:18:4c:4e:52:27:b7:9a:cc:17:97:f4:
                    1f:71:50:bd:0e:af:37:4b:38:44:5d:7b:0c:ac:05:
                    1c:28:06:39:04:e2:d6:bc:86:6e:9a:02:57:37:74:
                    79:c9:1a:6e:8f:38:62:36:5c:bf:7e:07:91:12:32:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2E:F9:73:63:9E:E2:27:DF:B0:8C:DD:9F:B0:2A:BE:40:59:B2:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/817186bd-5556-4e29-a2f4-4961a6f94897/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/817186bd-5556-4e29-a2f4-4961a6f94897/8376e0c0962757e44ca6c3bedc880f9f24398416.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272073

    Signature Algorithm: sha256WithRSAEncryption
         29:dc:39:59:75:9a:b0:48:c9:ec:f9:39:7c:f5:16:3d:1d:2e:
         38:bf:18:b0:7b:9f:d5:ec:32:bd:ea:e0:78:b4:26:30:7f:d2:
         40:87:86:b9:96:18:2f:c7:0d:b3:28:bd:dc:f2:89:14:4b:df:
         59:4a:e6:e9:7c:f0:7f:04:6d:da:1e:78:53:be:48:98:69:fe:
         da:82:1c:29:c6:ca:02:58:de:1a:e8:ea:6c:3e:8a:40:8c:b3:
         88:70:7f:49:19:f6:41:8f:9e:0d:ad:44:25:01:de:93:e6:37:
         da:83:fe:da:1d:6c:20:14:74:15:08:d5:9d:6c:7b:92:00:80:
         31:55:b1:d4:99:85:32:f7:fb:d5:61:c4:6d:9e:05:ab:d2:68:
         6b:39:46:e1:9e:2b:c4:c3:10:39:de:6b:89:d6:0d:30:c6:5c:
         67:4f:c1:46:ed:8b:93:01:e7:bf:34:41:a1:e1:41:93:88:0f:
         1b:18:b7:0e:0a:3f:45:f7:f1:66:45:34:27:52:95:11:70:54:
         7a:f7:ef:18:46:ad:1f:a1:ea:e5:b0:c1:36:e5:fe:20:8c:35:
         04:9d:b1:6b:fd:29:a7:5c:45:21:0e:70:9e:d6:cd:34:08:52:
         0d:5a:5d:ff:2f:13:08:48:94:53:6e:20:4a:93:f8:61:c8:89:
         76:8a:8f:2a
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQFZkTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDgyNDAxNDExOVoXDTI0MTIxNjE5NDIz
MVowMzExMC8GA1UEAxMoODM3NmUwYzA5NjI3NTdlNDRjYTZjM2JlZGM4ODBmOWYy
NDM5ODQxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIUuJjjdd8LJ
rMPzxUuimRmgvGM+RXpvUWQ9oBMgV1XZNgf7+sHuOzHIeLhthdV+PqNQ9RtR8aLG
SLWEEUrZ6/IVgc8TNChvT8noIqYc2Kbew2yJXTt393GuGE3DwY2WR/OGbpT3JUs0
x/ZhuTKSEuTa2Xa93V7i3gEOurXQe3gO2+0LlOjhB/joli8nkplUCxJ95EjQcM/V
Aur28OvdX4/MAN1RDyXc8kSZkjGEWFRaHxmD4Ywhl33baK5LEF/ppuAo+kQT+hhM
TlInt5rMF5f0H3FQvQ6vN0s4RF17DKwFHCgGOQTi1ryGbpoCVzd0eckabo84YjZc
v34HkRIyNssCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQkLvlzY57iJ9+wjN2fsCq+
QFmyaDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MTcxODZiZC01NTU2
LTRlMjktYTJmNC00OTYxYTZmOTQ4OTcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODE3MTg2YmQtNTU1Ni00
ZTI5LWEyZjQtNDk2MWE2Zjk0ODk3LzgzNzZlMGMwOTYyNzU3ZTQ0Y2E2YzNiZWRj
ODgwZjlmMjQzOTg0MTYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDixAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCbJMA0GCSqGSIb3DQEBCwUAA4IBAQAp3DlZdZqwSMns+Tl89RY9
HS44vxiwe5/V7DK96uB4tCYwf9JAh4a5lhgvxw2zKL3c8okUS99ZSubpfPB/BG3a
HnhTvkiYaf7aghwpxsoCWN4a6OpsPopAjLOIcH9JGfZBj54NrUQlAd6T5jfag/7a
HWwgFHQVCNWdbHuSAIAxVbHUmYUy9/vVYcRtngWr0mhrOUbhnivEwxA53muJ1g0w
xlxnT8FG7YuTAee/NEGh4UGTiA8bGLcOCj9F9/FmRTQnUpURcFR69+8YRq0foerl
sME25f4gjDUEnbFr/SmnXEUhDnCe1s00CFINWl3/LxMISJRTbiBKk/hhyIl2io8q
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:43 2024 by rpki-client on console-fra.rpki-client.org