Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.cer
File:                     a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.cer (raw, json)
Hash identifier:          sBM1REk4jRaw2R5hS7cwv+AXY5Kv3TaX7kh8IWksSvQ=
Subject key identifier:   67:30:E8:4C:10:93:C1:82:69:D7:51:6B:5A:DB:7D:48:EC:D9:0B:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01053778
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2019 11:18:31 +0000
Certificate not after:    Tue 28 Jan 2025 19:08:29 +0000
Subordinate resources:    AS: 267813
                          IP: 45.173.204.0/22
                          IP: 2803:d060::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17119096 (0x1053778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 11:18:31 2019 GMT
            Not After : Jan 28 19:08:29 2025 GMT
        Subject: CN=a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:43:5b:22:af:93:f5:3b:28:d7:ea:d1:b0:43:
                    19:6a:6d:9a:90:9f:02:6c:fc:ef:b7:70:93:e3:77:
                    4f:83:0a:f9:c3:15:f6:6c:b5:ef:f7:6b:a7:86:45:
                    a5:ea:a2:d1:18:9d:84:a3:7e:8f:77:6c:5c:88:54:
                    90:1d:c3:2d:34:63:81:58:db:86:8c:aa:c9:75:f8:
                    e8:5e:64:97:b7:ba:b2:69:3d:aa:41:b0:f9:e6:78:
                    0d:19:58:24:7b:07:b4:10:38:0a:c5:23:34:8a:8d:
                    c0:b5:8f:13:67:da:f6:71:32:87:1f:64:63:ea:60:
                    3a:a3:e4:1c:15:1f:aa:9b:7d:68:bc:bd:d8:cd:9b:
                    65:f9:0d:d8:e0:55:e8:59:6e:cc:14:f1:82:0b:89:
                    6d:88:7e:f5:73:84:f8:8a:c3:e1:80:46:b1:76:71:
                    d4:02:d6:46:20:76:23:5e:1f:90:6a:28:a7:40:26:
                    b7:b6:67:ff:88:35:13:49:2f:3b:49:81:5f:2c:4f:
                    f4:67:45:2f:59:b0:85:be:46:c6:31:8e:26:6b:f6:
                    f3:c2:70:ee:b5:25:5b:bc:fe:26:2a:4e:56:f4:90:
                    5a:91:39:9d:a2:d0:f9:f4:a0:63:be:63:ae:fb:64:
                    96:6c:2e:4f:25:d4:8e:27:5e:69:39:c4:d1:da:44:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:30:E8:4C:10:93:C1:82:69:D7:51:6B:5A:DB:7D:48:EC:D9:0B:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.204.0/22
                IPv6:
                  2803:d060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267813

    Signature Algorithm: sha256WithRSAEncryption
         42:78:5c:6f:84:0b:30:35:9c:95:21:45:cb:ff:7c:83:0d:e6:
         0c:a9:53:d7:dd:c6:34:e0:d6:cf:ed:5b:e6:a7:b4:01:64:6f:
         1b:e1:2c:e7:ec:9d:8f:af:17:03:69:77:51:4a:05:48:c1:03:
         99:67:e2:55:87:88:a0:4f:57:e3:5e:fa:a1:84:0f:27:96:0b:
         10:19:21:b0:d0:30:84:10:9f:7f:a1:42:35:44:7e:87:9b:98:
         ce:9e:5a:f1:6d:cf:58:05:3b:b9:16:c5:c8:2d:a9:e4:1d:2b:
         73:e1:03:de:74:e2:b0:9d:69:f1:d8:75:01:1d:89:43:2e:20:
         26:99:5f:87:bf:34:bf:df:c4:65:84:50:a4:82:0f:d4:75:f5:
         50:8c:38:d9:4d:c8:b9:26:49:7d:8d:39:f0:71:23:7a:d9:96:
         f9:29:9a:b1:19:c1:17:b6:ed:a5:71:f0:96:f2:bd:de:fc:50:
         da:8a:97:07:8f:ab:f5:0a:3d:fa:ca:45:8e:03:73:8d:c5:43:
         40:dd:65:14:99:0b:52:8e:51:24:67:70:f6:e3:49:6d:07:9f:
         5b:0e:7e:d4:35:5b:10:79:cd:39:07:fd:d2:61:20:f2:ef:a3:
         39:02:9e:fb:12:17:22:94:00:f4:c0:19:2f:08:a1:26:e9:67:
         68:10:0d:5f
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQU3eDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDMyOTExMTgzMVoXDTI1MDEyODE5MDgy
OVowMzExMC8GA1UEAxMoYTkyZjA1YzkxY2ExYmQ3MThiYTU1YWIwOGM0ZWE2MTJm
NGI2ZDZlNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIVDWyKvk/U7
KNfq0bBDGWptmpCfAmz877dwk+N3T4MK+cMV9my17/drp4ZFpeqi0RidhKN+j3ds
XIhUkB3DLTRjgVjbhoyqyXX46F5kl7e6smk9qkGw+eZ4DRlYJHsHtBA4CsUjNIqN
wLWPE2fa9nEyhx9kY+pgOqPkHBUfqpt9aLy92M2bZfkN2OBV6FluzBTxgguJbYh+
9XOE+IrD4YBGsXZx1ALWRiB2I14fkGoop0Amt7Zn/4g1E0kvO0mBXyxP9GdFL1mw
hb5GxjGOJmv288Jw7rUlW7z+JipOVvSQWpE5naLQ+fSgY75jrvtklmwuTyXUjide
aTnE0dpEPy0CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBRnMOhMEJPBgmnXUWta231I
7NkLjTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNTY2Y2I4MC0wY2M4
LTQ5MGItYjhkZi00OWJmYzI2YjU0OGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDU2NmNiODAtMGNjOC00
OTBiLWI4ZGYtNDliZmMyNmI1NDhlL2E5MmYwNWM5MWNhMWJkNzE4YmE1NWFiMDhj
NGVhNjEyZjRiNmQ2ZTQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2tzDANBAIAAjAHAwUAKAPQYDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFiUwDQYJKoZIhvcNAQELBQADggEBAEJ4
XG+ECzA1nJUhRcv/fIMN5gypU9fdxjTg1s/tW+antAFkbxvhLOfsnY+vFwNpd1FK
BUjBA5ln4lWHiKBPV+Ne+qGEDyeWCxAZIbDQMIQQn3+hQjVEfoebmM6eWvFtz1gF
O7kWxcgtqeQdK3PhA9504rCdafHYdQEdiUMuICaZX4e/NL/fxGWEUKSCD9R19VCM
ONlNyLkmSX2NOfBxI3rZlvkpmrEZwRe27aVx8Jbyvd78UNqKlwePq/UKPfrKRY4D
c43FQ0DdZRSZC1KOUSRncPbjSW0Hn1sOftQ1WxB5zTkH/dJhIPLvozkCnvsSFyKU
APTAGS8IoSbpZ2gQDV8=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:19 2024 by rpki-client on console-fra.rpki-client.org