Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905377f2c89ca66131e9c301a5406e6e9fbb8bda.cer
File:                     905377f2c89ca66131e9c301a5406e6e9fbb8bda.cer (raw, json)
Hash identifier:          rleImi+D2TQIBQfuXh72zNDMqk1H8LJkmNYK+cs/TRI=
Subject key identifier:   25:87:C8:0F:16:E1:FE:BE:35:77:35:95:7B:C9:98:6D:30:83:55:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E76FE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/905377f2c89ca66131e9c301a5406e6e9fbb8bda.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 22:49:46 +0000
Certificate not after:    Sun 28 Jul 2024 01:03:56 +0000
Subordinate resources:    AS: 270174
                          IP: 2806:3ee::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15167463 (0xe76fe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 22:49:46 2023 GMT
            Not After : Jul 28 01:03:56 2024 GMT
        Subject: CN=905377f2c89ca66131e9c301a5406e6e9fbb8bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:95:2c:c2:76:9d:20:d6:76:58:0e:5f:40:
                    15:e3:aa:62:ab:f3:41:c4:08:02:d9:b7:dc:bc:3c:
                    00:6e:41:c8:69:52:a6:ad:7d:46:d5:03:15:f5:5e:
                    a7:f4:54:95:9c:54:61:9c:53:b5:a2:e6:8d:46:5d:
                    31:94:c4:e6:bd:88:dd:de:d9:31:25:71:6c:ae:ca:
                    ba:59:64:70:44:f4:69:9b:d5:3b:2b:53:97:15:b6:
                    e3:cd:54:78:d3:3e:78:91:28:c3:68:ae:24:75:4f:
                    39:a7:4d:2f:16:08:90:0d:0c:ee:fe:22:ad:f3:ab:
                    39:4f:86:48:8c:0f:0b:1e:12:61:bc:47:91:77:6a:
                    55:45:de:1e:ae:22:39:7e:1e:d7:fd:6f:ed:85:8b:
                    ef:ec:be:b5:63:0e:34:b8:18:86:cb:89:8a:86:e0:
                    41:bb:de:f4:3a:d4:54:6a:0d:c9:a2:7c:2a:17:31:
                    9a:8c:a1:89:66:51:9b:d9:0c:e7:56:7e:15:bf:93:
                    d8:a4:5d:d8:fa:7a:50:be:51:5a:15:c6:c3:7a:a4:
                    38:6e:42:f9:aa:f3:58:45:51:a4:0d:fc:f7:d3:52:
                    e8:fa:b8:b8:6a:bb:9e:07:41:c0:97:d2:f5:db:c3:
                    e3:a6:65:56:25:ec:fd:01:af:a6:4d:b4:a3:22:01:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:C8:0F:16:E1:FE:BE:35:77:35:95:7B:C9:98:6D:30:83:55:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/905377f2c89ca66131e9c301a5406e6e9fbb8bda.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ee::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270174

    Signature Algorithm: sha256WithRSAEncryption
         c4:30:d9:61:e7:43:06:c0:ac:00:c2:cb:56:08:8a:bc:62:71:
         43:19:8e:2c:0a:20:90:b2:0f:a7:9c:6f:83:dc:c0:11:72:23:
         c0:1f:0a:4a:1a:ab:6e:20:fb:2e:90:51:64:25:dc:58:2f:68:
         f6:5c:2a:d5:18:5a:f7:9d:84:8b:86:ac:3b:fb:cd:fe:23:38:
         6e:59:39:6c:61:e1:2b:77:c2:63:0c:0f:6f:67:14:94:b3:8c:
         99:38:64:38:b7:48:18:1d:e2:19:ea:fb:2d:43:59:c6:16:e3:
         3a:cb:61:b6:f2:0e:6d:42:2e:3f:fa:d7:b5:69:93:c6:35:7a:
         35:65:13:b9:63:18:b2:7c:81:d5:bb:45:c7:f8:38:a8:e6:44:
         31:50:7a:85:2a:5e:74:0f:4e:2c:fb:8d:1c:d7:41:4c:12:48:
         e0:f8:fe:cd:5e:7b:dc:1c:df:da:0c:e9:8e:8b:d2:fd:6d:b7:
         50:28:3c:ee:cd:1e:f9:15:88:b5:0b:1a:ec:29:45:97:d6:15:
         33:28:f9:37:bb:4d:a6:29:b8:1d:e3:4f:22:00:9a:0b:05:ea:
         11:58:7b:86:46:e3:1e:be:65:20:a3:3a:d7:b5:4e:b9:9b:2e:
         3a:87:4c:a3:9c:88:b0:02:b3:72:dc:d4:f4:a7:b9:87:74:2e:
         ad:66:01:aa
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOdv5zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQyNjIyNDk0NloXDTI0MDcyODAxMDM1
NlowMzExMC8GA1UEAxMoOTA1Mzc3ZjJjODljYTY2MTMxZTljMzAxYTU0MDZlNmU5
ZmJiOGJkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmolSzCdp0g
1nZYDl9AFeOqYqvzQcQIAtm33Lw8AG5ByGlSpq19RtUDFfVep/RUlZxUYZxTtaLm
jUZdMZTE5r2I3d7ZMSVxbK7KullkcET0aZvVOytTlxW2481UeNM+eJEow2iuJHVP
OadNLxYIkA0M7v4irfOrOU+GSIwPCx4SYbxHkXdqVUXeHq4iOX4e1/1v7YWL7+y+
tWMONLgYhsuJiobgQbve9DrUVGoNyaJ8KhcxmoyhiWZRm9kM51Z+Fb+T2KRd2Pp6
UL5RWhXGw3qkOG5C+arzWEVRpA3899NS6Pq4uGq7ngdBwJfS9dvD46ZlViXs/QGv
pk20oyIBJckCAwEAAaOCAvswggL3MB0GA1UdDgQWBBQlh8gPFuH+vjV3NZV7yZht
MINV/zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xMjI5YTU5Yy00MjQy
LTRkODYtYTFmMi1hMTQ0ZmYyYzI1NzgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTIyOWE1OWMtNDI0Mi00
ZDg2LWExZjItYTE0NGZmMmMyNTc4LzkwNTM3N2YyYzg5Y2E2NjEzMWU5YzMwMWE1
NDA2ZTZlOWZiYjhiZGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgGA+4wGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBB9eMA0GCSqGSIb3DQEBCwUAA4IBAQDEMNlh50MGwKwAwstWCIq8
YnFDGY4sCiCQsg+nnG+D3MARciPAHwpKGqtuIPsukFFkJdxYL2j2XCrVGFr3nYSL
hqw7+83+IzhuWTlsYeErd8JjDA9vZxSUs4yZOGQ4t0gYHeIZ6vstQ1nGFuM6y2G2
8g5tQi4/+te1aZPGNXo1ZRO5YxiyfIHVu0XH+Dio5kQxUHqFKl50D04s+40c10FM
Ekjg+P7NXnvcHN/aDOmOi9L9bbdQKDzuzR75FYi1CxrsKUWX1hUzKPk3u02mKbgd
408iAJoLBeoRWHuGRuMevmUgozrXtU65my46h0yjnIiwArNy3NT0p7mHdC6tZgGq
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:47 2024 by rpki-client on console-fra.rpki-client.org