Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer
File:                     9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer (raw, json)
Hash identifier:          scWs5EU+EdCk9TJgQ7YjsISvSH/3RIfGWqcXKiDlGsg=
Subject key identifier:   98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01063C02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Apr 2022 11:30:24 +0000
Certificate not after:    Fri 07 Feb 2025 22:57:12 +0000
Subordinate resources:    AS: 272117
                          IP: 2803:8f10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17185794 (0x1063c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 11:30:24 2022 GMT
            Not After : Feb  7 22:57:12 2025 GMT
        Subject: CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:af:80:db:d8:41:99:cc:30:38:50:43:cd:5f:
                    dd:04:66:f9:73:bc:b1:b5:00:38:d0:44:0f:69:5a:
                    c9:45:1c:78:e6:d2:d6:20:44:ed:4e:2a:0e:cd:e2:
                    79:bb:fd:a3:3a:24:71:a1:78:32:79:a7:4d:a1:1d:
                    b5:c0:e8:15:d2:4a:b6:90:50:ba:2e:93:c4:ce:8c:
                    d9:ed:7f:a0:6f:28:43:0c:b2:31:fa:6b:0b:f3:f0:
                    a6:27:e9:b7:df:b1:ff:28:52:8d:5b:e2:2b:d9:f4:
                    e7:b6:34:8f:93:b3:26:4e:b1:48:7c:26:0c:d4:52:
                    fb:04:bd:cb:81:13:d6:fc:f9:b5:f5:b7:c0:04:16:
                    ec:53:9c:7f:44:0d:cc:a9:13:4c:cd:83:75:63:ed:
                    34:cf:dd:2d:f3:e1:1c:9d:42:74:3d:84:95:be:a3:
                    7d:7e:16:f9:92:d2:e2:ce:65:94:e0:64:4e:e7:b3:
                    53:4f:52:54:81:28:b7:f8:da:62:8e:3d:13:c7:bd:
                    7f:96:da:81:4c:d7:87:aa:bc:0c:4a:e9:fe:f3:bb:
                    bd:81:2d:9a:50:e1:80:ac:19:14:67:43:f5:a2:3f:
                    21:4d:56:e1:37:12:b3:cb:97:e3:ef:5b:45:8e:34:
                    2a:b6:43:30:cd:c5:1d:cb:85:b8:29:02:5f:d5:07:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272117

    Signature Algorithm: sha256WithRSAEncryption
         68:74:cb:e5:5c:6b:00:50:c1:56:54:eb:92:88:9d:d2:5a:9a:
         b0:08:f5:2f:3c:4a:29:d8:5a:a8:28:0c:11:4d:34:01:ff:4b:
         b0:10:7e:fd:78:ac:18:5d:5e:08:a9:63:56:e8:cd:59:ae:e3:
         c0:48:d8:dc:b6:7c:aa:9c:af:2b:e5:e0:76:99:84:14:d6:d1:
         e6:48:42:29:44:2c:96:5e:5d:aa:b2:fe:04:70:04:52:bb:26:
         04:a1:37:6c:01:7f:9d:a2:6c:d2:d7:eb:9f:51:b5:65:7b:bc:
         64:b1:27:29:d6:19:90:03:43:d8:40:52:0f:04:b7:b4:94:25:
         c6:04:38:74:f1:23:8c:08:43:ab:dd:02:7c:ee:96:f5:6a:00:
         f9:30:4b:9b:f1:39:5a:c2:21:39:03:d4:92:75:a0:20:4b:b1:
         d1:f5:03:2e:21:39:e9:25:f7:12:60:7b:60:02:63:ba:3a:b9:
         53:b5:66:6f:60:0b:b6:10:99:4e:ca:e7:a3:0e:bc:e0:15:b0:
         87:7e:b4:fa:90:e6:02:bc:17:b3:67:9d:32:09:d9:7f:a9:80:
         1f:4b:59:22:20:ff:b9:0f:de:8f:df:66:54:51:a6:63:7b:bc:
         4b:11:e5:7e:b1:ca:75:fc:40:25:12:9a:18:bd:b2:7f:85:2b:
         be:20:a4:83
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQY8AjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIyMDQwODExMzAyNFoXDTI1MDIwNzIyNTcx
MlowMzExMC8GA1UEAxMoOTAxNmRiYmIzMGY2ODEwNzZlODVjNWFhZTA1ZTdhMmUz
OGUyNzRlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIuvgNvYQZnM
MDhQQ81f3QRm+XO8sbUAONBED2layUUceObS1iBE7U4qDs3iebv9ozokcaF4Mnmn
TaEdtcDoFdJKtpBQui6TxM6M2e1/oG8oQwyyMfprC/Pwpifpt9+x/yhSjVviK9n0
57Y0j5OzJk6xSHwmDNRS+wS9y4ET1vz5tfW3wAQW7FOcf0QNzKkTTM2DdWPtNM/d
LfPhHJ1CdD2Elb6jfX4W+ZLS4s5llOBkTuezU09SVIEot/jaYo49E8e9f5bagUzX
h6q8DErp/vO7vYEtmlDhgKwZFGdD9aI/IU1W4TcSs8uX4+9bRY40KrZDMM3FHcuF
uCkCX9UH/8kCAwEAAaOCAvswggL3MB0GA1UdDgQWBBSYfQPalFcpu4ZtNMuE+62i
Aaq8+zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMzc0OTRhYi04YWRm
LTQwMjctOTc1YS05N2E5NjA5MzUwMmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDM3NDk0YWItOGFkZi00
MDI3LTk3NWEtOTdhOTYwOTM1MDJmLzkwMTZkYmJiMzBmNjgxMDc2ZTg1YzVhYWUw
NWU3YTJlMzhlMjc0ZTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDjxAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCb1MA0GCSqGSIb3DQEBCwUAA4IBAQBodMvlXGsAUMFWVOuSiJ3S
WpqwCPUvPEop2FqoKAwRTTQB/0uwEH79eKwYXV4IqWNW6M1ZruPASNjctnyqnK8r
5eB2mYQU1tHmSEIpRCyWXl2qsv4EcARSuyYEoTdsAX+domzS1+ufUbVle7xksScp
1hmQA0PYQFIPBLe0lCXGBDh08SOMCEOr3QJ87pb1agD5MEub8TlawiE5A9SSdaAg
S7HR9QMuITnpJfcSYHtgAmO6OrlTtWZvYAu2EJlOyuejDrzgFbCHfrT6kOYCvBez
Z50yCdl/qYAfS1kiIP+5D96P32ZUUaZje7xLEeV+scp1/EAlEpoYvbJ/hSu+IKSD
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:10 2024 by rpki-client on console-fra.rpki-client.org