Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer
File:                     a072744812c9d37a960b2eaee018f541354a6d6b.cer (raw, json)
Hash identifier:          Wc0yRe3SIzakII5UyvWdLM8TIN1R9j69qI3frqBb0PA=
Subject key identifier:   13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD582A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/a072744812c9d37a960b2eaee018f541354a6d6b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Apr 2019 18:46:17 +0000
Certificate not after:    Mon 18 Nov 2024 21:02:39 +0000
Subordinate resources:    IP: 45.169.192.0/22
                          IP: 2803:33a0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16603178 (0xfd582a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 30 18:46:17 2019 GMT
            Not After : Nov 18 21:02:39 2024 GMT
        Subject: CN=a072744812c9d37a960b2eaee018f541354a6d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:d9:f7:90:6e:2c:73:23:40:93:20:18:9a:
                    dd:e0:b2:27:21:5a:0e:d0:6e:69:f3:ca:0d:e5:da:
                    c2:57:c9:2f:80:63:fb:44:56:5d:eb:5e:3d:db:31:
                    b4:4c:47:e1:62:8c:4c:13:06:8e:18:ff:e8:85:b8:
                    cf:36:82:e6:cc:c1:1d:fa:f9:be:cd:59:58:eb:70:
                    48:fd:7d:81:6b:f4:16:c5:b0:8a:d5:4d:93:c4:6c:
                    37:0e:f7:73:48:93:f3:13:d8:b6:34:aa:82:d8:83:
                    bd:b3:0b:d5:45:59:e9:05:42:37:a1:fe:85:37:c1:
                    b9:1f:c5:36:88:78:22:75:53:63:45:95:8b:59:75:
                    86:1e:a2:ee:09:0a:49:b0:53:6e:23:82:bf:04:af:
                    3b:5a:8e:a4:f3:23:0d:9b:26:9e:6f:a0:cd:ac:72:
                    2e:11:b1:63:c4:de:c3:38:16:57:63:d4:93:be:14:
                    39:b0:36:65:4f:5d:49:5d:9b:9b:0c:48:7f:db:5e:
                    e3:68:3b:d1:d2:dd:a4:db:da:30:5f:b5:f6:9e:75:
                    77:d1:76:3f:86:18:c9:c3:c9:83:3f:7a:20:28:4a:
                    b3:52:52:2d:88:76:0b:13:3b:4d:63:e4:60:56:b5:
                    c8:06:aa:81:ee:a8:c4:b3:26:27:37:08:bb:0e:fb:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/a072744812c9d37a960b2eaee018f541354a6d6b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.192.0/22
                IPv6:
                  2803:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:01:31:74:dd:d1:9e:d0:e6:07:3b:5f:b3:8c:96:2a:99:
         ea:9d:a1:03:6d:e1:ae:8b:63:e3:a6:dc:5a:9f:e5:05:56:71:
         f5:b0:dc:3f:a6:47:b5:0d:03:e7:c9:ff:fd:41:c8:99:09:04:
         eb:00:83:85:b6:31:a5:b0:3f:e8:30:d3:55:6c:b8:90:99:4a:
         12:dc:77:47:47:44:63:a0:27:c6:f9:5a:eb:45:ca:20:5d:ab:
         3d:51:f0:dd:e8:25:1b:50:88:95:aa:8c:3c:80:ba:d8:c8:a4:
         d7:0a:d2:6c:6c:79:2e:de:cd:87:5e:45:1f:35:a7:f9:48:57:
         b7:35:93:51:2c:f9:3f:7a:ac:ec:90:4f:e7:cb:35:2c:f6:50:
         7e:5e:33:ac:c0:27:eb:20:dd:fa:9b:66:24:4c:1a:b0:bf:34:
         38:f4:95:13:07:6b:34:94:ea:e6:0a:a2:47:e7:78:1f:ef:df:
         d1:19:8c:e9:4d:e9:11:3b:8a:9c:75:0d:84:65:eb:b9:75:9e:
         0b:e8:b1:85:1b:0f:fa:10:05:34:a3:3d:15:ca:52:3a:7e:b2:
         c2:8a:66:aa:96:42:8c:fe:b7:54:59:62:65:ee:1b:40:50:b8:
         76:62:2c:00:88:10:b7:83:c9:d0:71:19:f3:af:e9:eb:fa:ad:
         3b:20:bf:77
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAP1YKjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDQzMDE4NDYxN1oXDTI0MTExODIxMDIz
OVowMzExMC8GA1UEAxMoYTA3Mjc0NDgxMmM5ZDM3YTk2MGIyZWFlZTAxOGY1NDEz
NTRhNmQ2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnz2feQbixz
I0CTIBia3eCyJyFaDtBuafPKDeXawlfJL4Bj+0RWXetePdsxtExH4WKMTBMGjhj/
6IW4zzaC5szBHfr5vs1ZWOtwSP19gWv0FsWwitVNk8RsNw73c0iT8xPYtjSqgtiD
vbML1UVZ6QVCN6H+hTfBuR/FNoh4InVTY0WVi1l1hh6i7gkKSbBTbiOCvwSvO1qO
pPMjDZsmnm+gzaxyLhGxY8TewzgWV2PUk74UObA2ZU9dSV2bmwxIf9te42g70dLd
pNvaMF+19p51d9F2P4YYycPJgz96IChKs1JSLYh2CxM7TWPkYFa1yAaqge6oxLMm
JzcIuw77dokCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBQTEm+g10KS1GfcGKpD14rt
Itbm5DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MzE1M2Y5Mi1hOGYx
LTQ3OTQtYmI3NS1kMTExY2RmNThjZmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDMxNTNmOTItYThmMS00
Nzk0LWJiNzUtZDExMWNkZjU4Y2ZmL2EwNzI3NDQ4MTJjOWQzN2E5NjBiMmVhZWUw
MThmNTQxMzU0YTZkNmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2pwDANBAIAAjAHAwUAKAMzoDAN
BgkqhkiG9w0BAQsFAAOCAQEAQk0BMXTd0Z7Q5gc7X7OMliqZ6p2hA23hrotj46bc
Wp/lBVZx9bDcP6ZHtQ0D58n//UHImQkE6wCDhbYxpbA/6DDTVWy4kJlKEtx3R0dE
Y6Anxvla60XKIF2rPVHw3eglG1CIlaqMPIC62Mik1wrSbGx5Lt7Nh15FHzWn+UhX
tzWTUSz5P3qs7JBP58s1LPZQfl4zrMAn6yDd+ptmJEwasL80OPSVEwdrNJTq5gqi
R+d4H+/f0RmM6U3pETuKnHUNhGXruXWeC+ixhRsP+hAFNKM9FcpSOn6ywopmqpZC
jP63VFliZe4bQFC4dmIsAIgQt4PJ0HEZ86/p6/qtOyC/dw==
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:14 2024 by rpki-client on console-ams.rpki-client.org