Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/914e675c54a1ab6380e307ff82f84420b9e0a726.cer
File:                     914e675c54a1ab6380e307ff82f84420b9e0a726.cer (raw, json)
Hash identifier:          n/AsaoakkSRhmpFOBsgdoiknTevMANgnX2xnhsPYxcU=
Subject key identifier:   BC:3A:B7:A3:CF:01:F7:AB:DA:F0:C7:3A:3D:DE:66:87:92:E1:1C:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67763
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9b017f8b-9727-4e39-bb19-e9fc21ed9f2e/914e675c54a1ab6380e307ff82f84420b9e0a726.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9b017f8b-9727-4e39-bb19-e9fc21ed9f2e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 Aug 2018 15:46:11 +0000
Certificate not after:    Sun 09 Jun 2024 21:06:32 +0000
Subordinate resources:    AS: 61484
                          IP: 168.195.52.0/22
                          IP: 2803:5f40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 15:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15103843 (0xe67763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 15:46:11 2018 GMT
            Not After : Jun  9 21:06:32 2024 GMT
        Subject: CN=914e675c54a1ab6380e307ff82f84420b9e0a726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:1b:3b:5c:5e:f9:f3:7d:ed:86:2c:64:06:
                    02:9e:6b:96:30:b4:16:a1:55:88:5d:13:fa:3a:66:
                    61:04:71:16:b1:cd:07:57:15:c6:d3:18:cd:00:f8:
                    55:b8:e4:de:c3:e7:96:7f:c5:9b:60:51:fd:51:ea:
                    58:22:ad:8f:9b:c7:5d:0f:a4:dd:ad:08:70:80:a9:
                    c1:f8:97:c0:1b:37:b6:e3:7e:99:0f:f9:4a:30:cd:
                    e6:53:ee:92:c7:cf:97:e9:3c:72:8b:33:cd:b8:26:
                    a0:7f:0e:2a:c2:03:b2:6c:54:4e:f4:75:69:25:97:
                    79:71:46:09:ad:9d:1c:7d:10:03:a5:a6:be:bb:74:
                    53:da:b3:e1:b3:ac:b7:77:a6:6b:cb:5a:b1:c5:28:
                    5e:04:fe:83:b0:9b:81:bc:ca:31:c6:fb:69:c7:32:
                    74:11:40:b6:60:7c:e3:70:5d:fc:75:3c:07:26:2c:
                    e0:71:c0:e9:5b:d1:e8:04:d3:7e:25:26:cb:08:79:
                    ab:87:8f:66:16:33:27:9e:43:ec:b6:1b:68:3c:ae:
                    21:76:95:d5:91:fd:ab:30:92:e1:30:c0:8d:f2:4d:
                    d0:89:2b:28:14:f1:54:10:40:37:a2:d7:04:14:9c:
                    08:46:e6:2a:b2:dc:e7:21:39:17:8c:3a:5b:4a:74:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:B7:A3:CF:01:F7:AB:DA:F0:C7:3A:3D:DE:66:87:92:E1:1C:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9b017f8b-9727-4e39-bb19-e9fc21ed9f2e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9b017f8b-9727-4e39-bb19-e9fc21ed9f2e/914e675c54a1ab6380e307ff82f84420b9e0a726.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.52.0/22
                IPv6:
                  2803:5f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61484

    Signature Algorithm: sha256WithRSAEncryption
         72:78:00:04:1a:cc:8b:aa:d2:a2:93:16:68:b4:47:5f:b2:9f:
         e9:a9:98:49:73:38:26:16:6f:8f:3e:25:31:d3:09:9e:1f:fc:
         79:d1:7d:ec:f7:2d:84:09:92:6f:32:25:8e:f3:65:77:16:bf:
         38:84:3f:a0:47:55:5a:65:3e:71:de:63:8e:48:5f:39:bb:82:
         14:2c:d6:26:8a:07:05:86:7b:02:fe:35:80:c8:9c:74:5c:95:
         f6:db:89:97:bb:95:9b:25:88:2f:8b:10:98:c8:d5:1a:97:f9:
         e4:28:1d:e3:96:38:08:3a:a3:c9:4d:b5:60:d5:90:29:e2:a4:
         30:ee:83:48:77:59:e9:d4:cb:0c:73:27:9c:31:95:8b:db:9b:
         21:21:38:9e:d5:5d:85:0a:96:bb:35:c3:c6:d9:9c:0a:f2:ce:
         ee:41:da:9c:1b:a6:0b:8f:92:bb:78:fb:f9:ca:23:ec:a4:26:
         d7:83:5b:f6:ca:fe:dd:9c:3c:54:e8:b5:8e:21:87:6a:d6:d7:
         06:cb:95:c3:9d:9c:5e:b1:67:a2:a2:4e:18:9b:a4:4f:36:74:
         1d:10:87:70:f4:b0:a4:0a:66:e0:b5:41:fb:91:f2:df:88:1b:
         9e:af:55:34:7a:86:52:4c:22:01:16:b1:34:bb:df:64:70:2e:
         a1:6f:fd:17
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOZ3YzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDgwNjE1NDYxMVoXDTI0MDYwOTIxMDYz
MlowMzExMC8GA1UEAxMoOTE0ZTY3NWM1NGExYWI2MzgwZTMwN2ZmODJmODQ0MjBi
OWUwYTcyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIZ+GztcXvnz
fe2GLGQGAp5rljC0FqFViF0T+jpmYQRxFrHNB1cVxtMYzQD4Vbjk3sPnln/Fm2BR
/VHqWCKtj5vHXQ+k3a0IcICpwfiXwBs3tuN+mQ/5SjDN5lPuksfPl+k8coszzbgm
oH8OKsIDsmxUTvR1aSWXeXFGCa2dHH0QA6Wmvrt0U9qz4bOst3ema8tascUoXgT+
g7CbgbzKMcb7accydBFAtmB843Bd/HU8ByYs4HHA6VvR6ATTfiUmywh5q4ePZhYz
J55D7LYbaDyuIXaV1ZH9qzCS4TDAjfJN0IkrKBTxVBBAN6LXBBScCEbmKrLc5yE5
F4w6W0p0vd8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS8OrejzwH3q9rwxzo93maH
kuEcZzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85YjAxN2Y4Yi05NzI3
LTRlMzktYmIxOS1lOWZjMjFlZDlmMmUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWIwMTdmOGItOTcyNy00
ZTM5LWJiMTktZTlmYzIxZWQ5ZjJlLzkxNGU2NzVjNTRhMWFiNjM4MGUzMDdmZjgy
Zjg0NDIwYjllMGE3MjYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjDNDANBAIAAjAHAwUAKANfQDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8CwwDQYJKoZIhvcNAQELBQADggEBAHJ4
AAQazIuq0qKTFmi0R1+yn+mpmElzOCYWb48+JTHTCZ4f/HnRfez3LYQJkm8yJY7z
ZXcWvziEP6BHVVplPnHeY45IXzm7ghQs1iaKBwWGewL+NYDInHRclfbbiZe7lZsl
iC+LEJjI1RqX+eQoHeOWOAg6o8lNtWDVkCnipDDug0h3WenUywxzJ5wxlYvbmyEh
OJ7VXYUKlrs1w8bZnAryzu5B2pwbpguPkrt4+/nKI+ykJteDW/bK/t2cPFTotY4h
h2rW1wbLlcOdnF6xZ6KiThibpE82dB0Qh3D0sKQKZuC1QfuR8t+IG56vVTR6hlJM
IgEWsTS732RwLqFv/Rc=
-----END CERTIFICATE-----
Generated at Fri Mar 29 15:31:07 2024 by rpki-client on console-fra.rpki-client.org