Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
File:                     9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer (raw, json)
Hash identifier:          ETB3LzO7RrlB70qeJcqs5Wi4HNDiUGjIHYOhilYo6g4=
Subject key identifier:   C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010EE958
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 26 Sep 2020 04:55:33 +0000
Certificate not after:    Tue 22 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 270036
                          IP: 179.60.224.0/22
                          IP: 2803:95e0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17754456 (0x10ee958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 26 04:55:33 2020 GMT
            Not After : Apr 22 06:00:00 2025 GMT
        Subject: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:3c:fa:9f:20:ee:81:ae:09:80:56:6f:18:
                    03:61:ed:04:98:04:82:23:76:92:97:3e:af:b9:70:
                    bc:11:82:bb:3b:98:03:cc:62:02:fa:ad:5e:98:81:
                    9d:38:d5:53:57:64:41:9e:a1:88:cb:95:28:75:da:
                    e9:93:86:b8:6a:7f:37:aa:7f:ff:cf:1c:e9:b9:68:
                    24:4d:5e:dd:47:5a:fe:88:12:c1:9e:0e:fc:b7:61:
                    f8:3c:45:e0:b2:70:6a:9b:00:10:09:98:c2:8d:0f:
                    3c:5f:63:e3:f1:38:3f:9f:84:e1:4c:e8:93:30:eb:
                    35:a2:7f:80:51:f9:89:6e:b9:4b:a2:c8:7d:de:3f:
                    8f:5e:3a:a7:a7:4a:b7:07:da:94:2a:72:e5:86:08:
                    a4:f2:2f:24:f8:6f:dd:35:bd:8b:80:f8:15:17:51:
                    6c:da:91:5c:7e:23:90:10:f1:8f:0e:bc:26:9f:bf:
                    0b:92:6e:4e:fa:ae:40:9c:42:a7:0a:9e:8b:ee:60:
                    2c:da:35:1e:2c:89:83:4d:93:2b:0e:28:a3:c9:68:
                    76:c6:9b:78:8d:3d:e7:2b:be:77:59:55:4b:20:83:
                    cf:5d:77:46:0a:08:fa:c5:52:58:61:1a:b2:cc:7e:
                    aa:d6:00:4e:53:73:69:c1:3f:25:af:fe:74:5a:96:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.224.0/22
                IPv6:
                  2803:95e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270036

    Signature Algorithm: sha256WithRSAEncryption
         c5:2b:b8:c5:87:3a:84:35:6c:74:31:52:90:ed:bc:90:da:b0:
         46:1a:4d:20:b6:4f:62:85:6f:99:28:2f:5e:98:f0:02:35:7a:
         6d:7a:b6:65:f2:a1:f8:ee:b5:fd:d4:8a:88:b7:ed:e5:b7:eb:
         fc:ee:28:3e:45:25:02:6e:c6:61:ed:82:85:34:36:19:4c:8f:
         c3:a5:dd:73:98:a3:d5:4b:63:9f:15:f1:42:ca:d1:69:5f:75:
         a2:3e:e4:0f:0f:47:dc:04:40:aa:e2:fc:4b:b1:f3:2f:22:b1:
         3a:97:b6:01:81:f6:b1:8e:01:c1:47:e8:8d:c8:38:58:67:f7:
         7a:11:59:9d:ae:33:5b:02:67:59:81:ad:62:bf:46:cd:78:9e:
         82:17:24:82:f3:38:5f:f0:bb:4d:6c:b2:47:43:c1:a1:94:dc:
         ad:e5:c7:f1:74:9d:5b:13:77:2e:65:a6:fa:53:6d:ec:4e:1e:
         25:1c:18:e6:f0:22:35:2e:4f:d2:5f:13:2c:69:2a:c5:72:2c:
         51:64:81:48:d6:1d:38:65:d6:d4:2c:9c:6c:28:a0:73:3f:89:
         14:e6:63:65:00:3d:1a:89:70:3d:c1:93:f8:61:d1:36:4f:c4:
         06:2f:ff:17:c0:de:29:3e:bb:ab:d7:6c:0e:9b:ea:cc:19:20:
         ee:21:62:ca
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQ7pWDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDkyNjA0NTUzM1oXDTI1MDQyMjA2MDAw
MFowMzExMC8GA1UEAxMoOWFhNmYwZmFmMDZiMGU4MjA1NDNmZmIwN2NhZTBlODhj
NjgxMGZlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJXnPPqfIO6B
rgmAVm8YA2HtBJgEgiN2kpc+r7lwvBGCuzuYA8xiAvqtXpiBnTjVU1dkQZ6hiMuV
KHXa6ZOGuGp/N6p//88c6bloJE1e3Uda/ogSwZ4O/Ldh+DxF4LJwapsAEAmYwo0P
PF9j4/E4P5+E4UzokzDrNaJ/gFH5iW65S6LIfd4/j146p6dKtwfalCpy5YYIpPIv
JPhv3TW9i4D4FRdRbNqRXH4jkBDxjw68Jp+/C5JuTvquQJxCpwqei+5gLNo1HiyJ
g02TKw4oo8lodsabeI095yu+d1lVSyCDz113RgoI+sVSWGEassx+qtYATlNzacE/
Ja/+dFqWTKcCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBTGztGgMDn9qSc7rTtTTfJr
17XExjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZDc5MzUzNS1jZGJh
LTRiMGMtOTg2Yy1kNDlkOGNhNjU3ZWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2Q3OTM1MzUtY2RiYS00
YjBjLTk4NmMtZDQ5ZDhjYTY1N2VhLzlhYTZmMGZhZjA2YjBlODIwNTQzZmZiMDdj
YWUwZTg4YzY4MTBmZWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArM84DANBAIAAjAHAwUAKAOV4DAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHtQwDQYJKoZIhvcNAQELBQADggEBAMUr
uMWHOoQ1bHQxUpDtvJDasEYaTSC2T2KFb5koL16Y8AI1em16tmXyofjutf3Uioi3
7eW36/zuKD5FJQJuxmHtgoU0NhlMj8Ol3XOYo9VLY58V8ULK0WlfdaI+5A8PR9wE
QKri/Eux8y8isTqXtgGB9rGOAcFH6I3IOFhn93oRWZ2uM1sCZ1mBrWK/Rs14noIX
JILzOF/wu01sskdDwaGU3K3lx/F0nVsTdy5lpvpTbexOHiUcGObwIjUuT9JfEyxp
KsVyLFFkgUjWHThl1tQsnGwooHM/iRTmY2UAPRqJcD3Bk/hh0TZPxAYv/xfA3ik+
u6vXbA6b6swZIO4hYso=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:12 2024 by rpki-client on console-ams.rpki-client.org