Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.cer
File:                     9cc6a73aafa68160f0cf809b15e30275ae5fa69e.cer (raw, json)
Hash identifier:          PKJxlwm+jnFY+f9w56YGzJZ9o0bs7ecqQvRUORimHKQ=
Subject key identifier:   66:86:FC:01:CD:8A:EE:8E:34:9C:2E:DF:68:90:85:FB:02:1F:5B:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8F6EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 Dec 2019 12:43:13 +0000
Certificate not after:    Fri 11 Oct 2024 06:38:20 +0000
Subordinate resources:    IP: 2801:112::/40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16316138 (0xf8f6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 12 12:43:13 2019 GMT
            Not After : Oct 11 06:38:20 2024 GMT
        Subject: CN=9cc6a73aafa68160f0cf809b15e30275ae5fa69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:7d:10:4b:2b:a8:83:4d:c7:f4:32:9b:4f:
                    02:a7:25:62:08:de:f6:4e:b5:08:33:a2:f5:2d:0a:
                    f2:8a:58:73:51:49:a6:df:a1:3d:eb:d0:84:35:81:
                    f5:01:89:84:ce:a7:60:a5:18:b2:d7:7e:e2:ec:af:
                    aa:40:07:3d:a5:2c:2e:de:d8:62:d6:2b:7f:3a:eb:
                    44:11:19:b4:23:27:42:2d:48:53:19:62:e6:e2:b3:
                    0c:55:ad:c1:4e:b0:b1:2e:df:cd:ce:7d:c6:a2:05:
                    d8:9b:f6:cd:62:a9:53:ec:25:94:c8:4f:a3:b9:99:
                    3b:a7:90:4b:bc:03:01:f1:22:2d:9d:ea:03:42:32:
                    97:f6:61:a6:75:13:45:40:e9:de:9f:40:8c:a4:0e:
                    f7:d3:6b:1a:33:02:28:e1:1c:a8:57:3b:01:47:72:
                    20:ce:ff:c7:c8:17:de:56:34:f0:19:4b:aa:10:d8:
                    26:5d:f9:d0:cd:41:56:9e:cf:d8:3a:eb:08:af:01:
                    06:f3:ec:d5:10:f8:97:9a:cc:d1:f2:e6:1f:69:d5:
                    66:12:e2:cd:c1:4c:2f:05:02:b9:2f:40:7e:5e:51:
                    63:95:ba:0c:b3:91:06:41:c8:69:d3:c2:6a:cb:b9:
                    8d:f4:ee:6d:bc:d4:6b:2a:4e:03:8e:b7:78:e6:a4:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:FC:01:CD:8A:EE:8E:34:9C:2E:DF:68:90:85:FB:02:1F:5B:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:112::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:59:87:ff:68:9f:b0:d8:01:b8:43:35:63:c2:3b:38:7f:9c:
         7e:84:a6:65:dd:0d:9c:c8:f4:ce:22:6c:3a:90:6c:eb:1e:9b:
         fd:d2:2e:af:a0:90:cd:bd:3b:bc:54:a6:64:51:73:82:03:21:
         7c:e7:f3:17:49:43:d6:a2:41:c9:9d:c8:e1:26:fc:18:34:c5:
         12:f5:e5:fe:0b:d5:5c:51:df:a6:8f:52:b1:a9:d2:e4:9a:53:
         de:cb:77:b0:ee:62:20:a1:17:53:f3:fc:99:47:8b:c5:b4:2f:
         43:0f:ae:cb:92:1b:19:b3:38:42:3b:6d:1f:7c:14:7d:bf:d0:
         99:a7:75:e0:61:55:88:14:cb:75:12:10:b9:a8:5b:b5:f0:f1:
         f1:a9:2b:ad:8c:0f:57:64:e8:16:f4:fb:f5:12:28:b5:a2:5c:
         2a:16:c1:ba:bf:e8:09:ae:40:e6:b1:8b:51:b0:7c:66:e1:58:
         55:5e:66:94:30:e2:a3:68:70:d5:48:3b:54:d8:d7:b9:2c:a7:
         fe:16:50:cb:a1:b0:57:b9:4e:6c:8b:42:bb:61:d7:3b:e7:d8:
         0e:ce:c7:d9:c4:16:16:31:a2:d5:60:05:fd:de:86:a9:05:37:
         88:c5:3e:a8:14:d7:50:c0:43:10:86:d1:24:b3:d5:66:b5:63:
         c3:4f:70:9b
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIEAPj26jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTIxMjEyNDMxM1oXDTI0MTAxMTA2Mzgy
MFowMzExMC8GA1UEAxMoOWNjNmE3M2FhZmE2ODE2MGYwY2Y4MDliMTVlMzAyNzVh
ZTVmYTY5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJK5fRBLK6iD
Tcf0MptPAqclYgje9k61CDOi9S0K8opYc1FJpt+hPevQhDWB9QGJhM6nYKUYstd+
4uyvqkAHPaUsLt7YYtYrfzrrRBEZtCMnQi1IUxli5uKzDFWtwU6wsS7fzc59xqIF
2Jv2zWKpU+wllMhPo7mZO6eQS7wDAfEiLZ3qA0Iyl/ZhpnUTRUDp3p9AjKQO99Nr
GjMCKOEcqFc7AUdyIM7/x8gX3lY08BlLqhDYJl350M1BVp7P2DrrCK8BBvPs1RD4
l5rM0fLmH2nVZhLizcFMLwUCuS9Afl5RY5W6DLORBkHIadPCasu5jfTubbzUaypO
A463eOaklYECAwEAAaOCAuAwggLcMB0GA1UdDgQWBBRmhvwBzYrujjScLt9okIX7
Ah9btTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MTM3ODA3Yy05ODc3
LTQ3OWItODY2MC0zMjlkYzE3ZmRmODAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODEzNzgwN2MtOTg3Ny00
NzliLTg2NjAtMzI5ZGMxN2ZkZjgwLzljYzZhNzNhYWZhNjgxNjBmMGNmODA5YjE1
ZTMwMjc1YWU1ZmE2OWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgBARIAMA0GCSqGSIb3DQEBCwUA
A4IBAQAkWYf/aJ+w2AG4QzVjwjs4f5x+hKZl3Q2cyPTOImw6kGzrHpv90i6voJDN
vTu8VKZkUXOCAyF85/MXSUPWokHJncjhJvwYNMUS9eX+C9VcUd+mj1KxqdLkmlPe
y3ew7mIgoRdT8/yZR4vFtC9DD67LkhsZszhCO20ffBR9v9CZp3XgYVWIFMt1EhC5
qFu18PHxqSutjA9XZOgW9Pv1Eii1olwqFsG6v+gJrkDmsYtRsHxm4VhVXmaUMOKj
aHDVSDtU2Ne5LKf+FlDLobBXuU5si0K7Ydc759gOzsfZxBYWMaLVYAX93oapBTeI
xT6oFNdQwEMQhtEks9VmtWPDT3Cb
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:50 2024 by rpki-client on console-fra.rpki-client.org