Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/956f8953f1d3dc1051b4d99ce55948bdd781d440.cer
File:                     956f8953f1d3dc1051b4d99ce55948bdd781d440.cer (raw, json)
Hash identifier:          Cobf+49bK7i+SN1+r9R5DJWR8wodInnyVU/jgl9TOfE=
Subject key identifier:   B1:25:10:A8:77:55:2B:F5:5A:4A:06:C3:89:C1:BB:58:CC:CE:C7:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010885B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/956f8953f1d3dc1051b4d99ce55948bdd781d440.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Oct 2021 16:21:48 +0000
Certificate not after:    Fri 28 Feb 2025 14:27:46 +0000
Subordinate resources:    AS: 265738
                          IP: 45.7.248.0/22
                          IP: 138.99.220.0/22
                          IP: 164.163.128.0/22
                          IP: 2803:63c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17335734 (0x10885b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 16:21:48 2021 GMT
            Not After : Feb 28 14:27:46 2025 GMT
        Subject: CN=956f8953f1d3dc1051b4d99ce55948bdd781d440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:e2:d2:97:29:f2:98:2f:39:6e:31:73:88:
                    db:f3:b1:97:15:a4:7a:c2:5d:d0:06:4d:4f:bd:ec:
                    73:cb:a5:b3:ed:f7:14:2a:1c:2c:ed:7e:4d:f7:05:
                    a4:d6:04:04:62:fd:9b:9f:a1:53:17:6d:dc:28:ac:
                    84:17:2d:fe:4e:99:68:c3:2c:26:0c:a6:93:97:ba:
                    30:eb:34:c2:18:c6:53:94:c2:b9:32:46:ee:ba:40:
                    18:40:32:91:2a:fa:b7:0f:df:78:eb:1f:c7:2f:6f:
                    85:ae:df:b2:ba:be:f1:d7:79:de:68:c5:80:6c:3d:
                    66:8e:68:72:18:e1:46:4d:0b:8a:b9:1d:c8:34:f5:
                    32:a1:68:e5:27:36:32:45:9a:cb:20:7b:68:22:71:
                    df:6c:66:d5:ac:3c:e0:10:15:41:e5:85:5e:3d:6d:
                    df:ed:06:c8:93:47:a9:4e:d1:15:28:d3:ca:19:a0:
                    f8:ea:47:ca:8e:5e:eb:77:8d:d4:ba:e1:d5:c1:e2:
                    a5:e6:ba:cd:4a:5a:6b:b3:d6:1d:1d:02:6a:aa:e8:
                    f4:22:30:99:da:eb:03:28:04:ab:0e:d4:c3:65:5e:
                    cf:0c:05:18:fe:ac:ab:ea:9e:6e:3d:2f:fb:81:1b:
                    4e:c0:22:95:f1:8c:4b:81:a4:3e:e1:4e:52:8c:32:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:25:10:A8:77:55:2B:F5:5A:4A:06:C3:89:C1:BB:58:CC:CE:C7:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/956f8953f1d3dc1051b4d99ce55948bdd781d440.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.248.0/22
                  138.99.220.0/22
                  164.163.128.0/22
                IPv6:
                  2803:63c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265738

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:76:eb:cb:29:c3:e9:53:4f:4a:d6:cb:93:03:41:b2:e9:
         06:5e:f5:d8:24:e0:97:04:7f:e8:8b:ba:55:48:46:68:04:c1:
         79:fe:40:05:5d:25:b9:06:f3:54:30:8b:ca:d7:33:52:2a:0b:
         b6:91:6f:cb:aa:99:68:51:6d:9f:bf:62:1b:f7:95:c5:a5:24:
         12:96:bb:ff:4c:8d:64:10:6e:7b:69:9e:20:2f:af:97:7c:2c:
         99:86:46:30:4e:ea:d9:ec:70:f5:f1:80:a2:11:68:86:41:ac:
         e4:cb:ea:04:b9:58:81:ff:0a:46:32:bc:2e:a4:12:81:38:a1:
         64:ba:ba:bc:b4:81:9f:df:4f:01:77:94:50:30:d2:47:7d:6c:
         bb:ef:de:ce:15:25:e4:51:3e:32:38:5d:0b:68:5e:cf:1d:0e:
         08:98:db:39:c5:74:2c:f0:56:1c:c7:7f:fe:24:d8:ac:9c:92:
         5c:84:0b:12:86:fb:a7:86:d9:0a:41:d1:91:8f:74:98:bf:47:
         2c:ac:e3:f8:b9:51:4d:04:a6:7b:00:67:43:6d:0e:6e:01:8d:
         fd:53:3b:87:ce:19:01:d8:c2:49:c3:39:29:d7:c9:b2:b1:dc:
         6e:90:03:04:65:40:97:a3:b4:a4:b9:70:84:a2:7c:f2:53:21:
         67:66:e6:70
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIEAQiFtjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAwNzE2MjE0OFoXDTI1MDIyODE0Mjc0
NlowMzExMC8GA1UEAxMoOTU2Zjg5NTNmMWQzZGMxMDUxYjRkOTljZTU1OTQ4YmRk
NzgxZDQ0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJJE4tKXKfKY
LzluMXOI2/OxlxWkesJd0AZNT73sc8uls+33FCocLO1+TfcFpNYEBGL9m5+hUxdt
3CishBct/k6ZaMMsJgymk5e6MOs0whjGU5TCuTJG7rpAGEAykSr6tw/feOsfxy9v
ha7fsrq+8dd53mjFgGw9Zo5ochjhRk0LirkdyDT1MqFo5Sc2MkWayyB7aCJx32xm
1aw84BAVQeWFXj1t3+0GyJNHqU7RFSjTyhmg+OpHyo5e63eN1Lrh1cHipea6zUpa
a7PWHR0Caqro9CIwmdrrAygEqw7Uw2VezwwFGP6sq+qebj0v+4EbTsAilfGMS4Gk
PuFOUowyh60CAwEAAaOCAxUwggMRMB0GA1UdDgQWBBSxJRCod1Ur9VpKBsOJwbtY
zM7HmzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81MmZmMTNmNS0yOGU2
LTRmMzQtOWI0ZS02NzA0ZGE1ZGY1MjcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTJmZjEzZjUtMjhlNi00
ZjM0LTliNGUtNjcwNGRhNWRmNTI3Lzk1NmY4OTUzZjFkM2RjMTA1MWI0ZDk5Y2U1
NTk0OGJkZDc4MWQ0NDAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAi0H+AMEAopj3AMEAqSjgDANBAIA
AjAHAwUAKANjwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDgowDQYJKoZIhvcN
AQELBQADggEBAIq1duvLKcPpU09K1suTA0Gy6QZe9dgk4JcEf+iLulVIRmgEwXn+
QAVdJbkG81Qwi8rXM1IqC7aRb8uqmWhRbZ+/Yhv3lcWlJBKWu/9MjWQQbntpniAv
r5d8LJmGRjBO6tnscPXxgKIRaIZBrOTL6gS5WIH/CkYyvC6kEoE4oWS6ury0gZ/f
TwF3lFAw0kd9bLvv3s4VJeRRPjI4XQtoXs8dDgiY2znFdCzwVhzHf/4k2KycklyE
CxKG+6eG2QpB0ZGPdJi/Ryys4/i5UU0EpnsAZ0NtDm4Bjf1TO4fOGQHYwknDOSnX
ybKx3G6QAwRlQJejtKS5cISifPJTIWdm5nA=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:11 2024 by rpki-client on console-ams.rpki-client.org