Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer
File:                     a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.cer (raw, json)
Hash identifier:          rZvzI5YIPBEZ95cVjbO0UIhxpU9mW19Ftale1gVVrWQ=
Subject key identifier:   13:B4:B0:35:1C:F2:60:E5:CF:98:AC:BF:77:5D:04:A3:D5:8B:98:41
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E673F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Aug 2020 10:54:44 +0000
Certificate not after:    Thu 27 Jun 2024 23:17:25 +0000
Subordinate resources:    AS: 270105
                          IP: 177.73.156.0/22
                          IP: 2801:17a::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15102965 (0xe673f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 10:54:44 2020 GMT
            Not After : Jun 27 23:17:25 2024 GMT
        Subject: CN=a05ae00c04ca47c24a21d30b0dd9eeac75d31f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:ae:0b:4a:dc:58:1f:d5:9c:4a:8e:b1:81:
                    ed:c2:12:f3:3f:54:58:1d:5f:cb:8b:3a:60:7b:23:
                    54:e5:6c:de:a1:9f:f6:98:ac:84:4f:43:11:92:0f:
                    69:c9:a5:a2:e6:fa:50:e9:33:83:8e:bf:6b:26:18:
                    36:d7:66:92:75:10:1a:11:81:5c:1a:4a:ce:bb:69:
                    85:23:92:31:88:bc:b9:25:72:71:e9:90:0e:d0:0d:
                    fc:98:9c:8b:d7:ed:55:42:1f:7f:1f:57:ab:83:7e:
                    0d:28:17:49:57:1e:62:ed:4b:6e:f5:df:ec:23:87:
                    58:40:4d:b0:08:51:d5:d6:69:76:2e:0e:93:13:29:
                    4c:fc:ce:b8:b4:c5:b9:06:9b:a4:0c:90:87:07:42:
                    47:9b:cf:d7:53:88:2f:5b:cc:6d:e1:2f:84:4d:f7:
                    f6:e0:24:de:b9:c6:7b:47:a4:7d:e4:f3:4c:cf:f2:
                    19:04:dd:7c:62:d6:8f:f3:e4:f1:ff:78:ea:8a:52:
                    86:4a:80:21:90:57:e3:31:48:e9:d4:ea:5e:be:ca:
                    c2:f7:69:1b:9d:e3:ed:df:75:78:68:60:43:af:fa:
                    96:d6:e8:b3:4e:85:29:2b:fe:be:cd:97:78:c0:c3:
                    46:94:72:17:e6:59:01:fb:2d:9d:d1:e4:97:12:60:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B4:B0:35:1C:F2:60:E5:CF:98:AC:BF:77:5D:04:A3:D5:8B:98:41
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4f1c3825-3c13-428b-ae48-9b5bd3124731/a05ae00c04ca47c24a21d30b0dd9eeac75d31f58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.156.0/22
                IPv6:
                  2801:17a::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270105

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:79:7f:48:7b:ea:ae:28:78:a4:01:cd:6e:c6:cd:95:8e:
         6a:af:57:87:46:36:6c:9e:ce:84:82:5e:d0:ef:93:59:1c:c4:
         73:f3:e9:87:aa:04:fa:20:4d:fe:a6:8e:60:22:3b:95:88:9f:
         01:ed:7f:a6:23:28:40:1c:b0:4d:0e:5c:10:21:c7:bd:e1:f0:
         52:fd:cb:63:c2:2d:8f:17:8a:b2:25:63:bf:0c:17:62:1c:97:
         f5:53:bb:b5:34:67:67:5f:25:1a:e7:12:da:54:f4:b9:f9:33:
         37:31:fa:29:47:b8:7c:7f:b8:fb:b4:37:0c:38:43:c1:fe:1a:
         d7:6b:80:17:72:b1:19:f4:38:bf:ff:ae:e3:f4:44:80:02:76:
         c2:33:e5:4b:1d:5f:e1:01:2a:94:e3:0e:05:d7:5c:a6:60:01:
         6c:5c:31:1c:c3:94:56:17:ad:6f:b8:69:e4:67:fd:26:62:c6:
         c5:ce:0f:be:d3:61:5a:6a:22:4d:e3:f0:2f:b7:b9:b2:8a:f5:
         e5:70:9d:35:3c:22:1b:72:25:8e:8a:b5:47:b4:9b:a3:14:ad:
         d7:d5:9d:c9:19:38:cc:ed:c7:c0:53:02:a5:ca:c3:64:1f:b7:
         f8:a7:90:03:eb:5f:6f:9d:f4:d4:c3:dc:e7:ad:f6:f3:68:91:
         61:53:40:3f
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOZz9TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDgyODEwNTQ0NFoXDTI0MDYyNzIzMTcy
NVowMzExMC8GA1UEAxMoYTA1YWUwMGMwNGNhNDdjMjRhMjFkMzBiMGRkOWVlYWM3
NWQzMWY1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtRrgtK3Fgf
1ZxKjrGB7cIS8z9UWB1fy4s6YHsjVOVs3qGf9pishE9DEZIPacmloub6UOkzg46/
ayYYNtdmknUQGhGBXBpKzrtphSOSMYi8uSVycemQDtAN/Jici9ftVUIffx9Xq4N+
DSgXSVceYu1LbvXf7COHWEBNsAhR1dZpdi4OkxMpTPzOuLTFuQabpAyQhwdCR5vP
11OIL1vMbeEvhE339uAk3rnGe0ekfeTzTM/yGQTdfGLWj/Pk8f946opShkqAIZBX
4zFI6dTqXr7KwvdpG53j7d91eGhgQ6/6ltbos06FKSv+vs2XeMDDRpRyF+ZZAfst
ndHklxJgcq0CAwEAAaOCAwswggMHMB0GA1UdDgQWBBQTtLA1HPJg5c+YrL93XQSj
1YuYQTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ZjFjMzgyNS0zYzEz
LTQyOGItYWU0OC05YjViZDMxMjQ3MzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGYxYzM4MjUtM2MxMy00
MjhiLWFlNDgtOWI1YmQzMTI0NzMxL2EwNWFlMDBjMDRjYTQ3YzI0YTIxZDMwYjBk
ZDllZWFjNzVkMzFmNTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEArFJnDAPBAIAAjAJAwcEKAEBegAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfGTANBgkqhkiG9w0BAQsFAAOCAQEA
YvZ5f0h76q4oeKQBzW7GzZWOaq9Xh0Y2bJ7OhIJe0O+TWRzEc/Pph6oE+iBN/qaO
YCI7lYifAe1/piMoQBywTQ5cECHHveHwUv3LY8ItjxeKsiVjvwwXYhyX9VO7tTRn
Z18lGucS2lT0ufkzNzH6KUe4fH+4+7Q3DDhDwf4a12uAF3KxGfQ4v/+u4/REgAJ2
wjPlSx1f4QEqlOMOBddcpmABbFwxHMOUVhetb7hp5Gf9JmLGxc4PvtNhWmoiTePw
L7e5sor15XCdNTwiG3Iljoq1R7SboxSt19WdyRk4zO3HwFMCpcrDZB+3+KeQA+tf
b5301MPc563282iRYVNAPw==
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:14 2024 by rpki-client on console-ams.rpki-client.org