Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
File:                     af916a8098c48f9f0fefd791512ee124a99ce09d.cer (raw, json)
Hash identifier:          09BS0ovaPdSTR8nziTWxI4NZBq+ijjIN/wNb8mWDzSU=
Subject key identifier:   72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105C806
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Aug 2021 16:47:17 +0000
Certificate not after:    Tue 04 Feb 2025 14:00:00 +0000
Subordinate resources:    AS: 20191
                          IP: 146.155.0.0/16
                          IP: 2800:1b0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17156102 (0x105c806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 10 16:47:17 2021 GMT
            Not After : Feb  4 14:00:00 2025 GMT
        Subject: CN=af916a8098c48f9f0fefd791512ee124a99ce09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:f0:7f:fc:47:9d:5c:67:6f:ca:b5:72:ec:
                    e0:de:7e:f2:5c:77:8d:da:f0:a4:4a:a7:2f:7e:1e:
                    65:a6:49:2c:a6:93:13:b2:a4:01:e9:4c:ad:fd:ea:
                    82:ca:8f:d5:91:91:c6:cd:3a:db:d6:45:a3:b0:1b:
                    bf:4d:f0:9b:8a:84:23:b9:72:35:e5:03:e6:62:7f:
                    3f:2e:34:d6:a4:a5:da:19:25:ed:11:60:8f:cd:f4:
                    72:4d:04:b9:38:44:38:85:98:7d:5a:cd:7e:a4:a8:
                    d9:f0:ea:ac:d6:13:42:ad:61:03:05:71:f2:80:8e:
                    a6:18:c9:21:87:21:3e:e9:d5:09:b4:e2:dd:e1:94:
                    cb:4e:fb:97:46:34:64:6e:bb:f6:e1:fd:77:58:cc:
                    4d:29:d9:97:cb:dc:51:72:d9:40:ba:40:9b:64:e4:
                    71:3d:aa:c3:74:4d:d3:2d:c9:66:95:7c:d1:bf:1d:
                    96:5e:ad:aa:a2:d5:a4:8c:53:0c:98:99:d9:b7:88:
                    3c:48:00:5a:f2:a6:8b:e0:24:9a:42:4f:62:61:e5:
                    f5:ed:82:3d:95:51:c0:8d:61:1f:f2:81:3c:ef:75:
                    1f:ea:9a:06:16:74:5f:7f:56:e3:6d:cb:a8:48:76:
                    ab:e1:5a:23:ad:c3:1d:e9:c4:35:25:98:c1:4f:e5:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.0.0/16
                IPv6:
                  2800:1b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20191

    Signature Algorithm: sha256WithRSAEncryption
         b0:3a:43:70:55:79:db:84:ee:9d:47:b5:ad:44:5e:c0:4b:e7:
         8b:f9:06:cf:bb:0e:32:30:c7:a1:a1:a5:c7:5b:9c:0c:f2:23:
         cf:89:83:de:ac:e2:93:b8:56:a8:7b:d2:15:f2:88:29:34:8a:
         8d:f1:3b:1c:b8:19:ab:5c:24:f3:32:09:36:2d:29:d7:12:45:
         3f:cc:aa:2f:7f:d7:68:12:9e:25:6a:93:c4:c5:d5:30:3e:00:
         79:3f:d5:0f:dc:6a:e2:c0:18:72:43:49:b7:bf:1d:1d:03:a4:
         ec:67:86:8c:72:e0:7a:2b:3c:5c:6d:9b:69:b3:b1:43:f5:8d:
         e9:e0:51:21:c5:c8:8a:8c:c9:28:0d:6f:c2:6d:1f:8c:7f:5e:
         6f:2d:20:6b:c7:6e:41:12:0a:b8:1f:27:8b:61:95:b9:35:62:
         9d:ad:77:9c:ea:c9:21:f5:d0:ff:e5:7c:ad:14:8c:fc:83:81:
         09:ec:42:c5:1f:d7:7b:61:3d:34:bb:17:61:a5:4b:da:63:02:
         d4:15:7b:1f:fe:ae:37:e1:ac:3a:d2:25:7f:34:d0:fc:eb:81:
         0b:37:89:da:e4:23:a0:f6:3b:46:57:89:4e:e8:ac:28:2b:93:
         01:f8:1d:31:91:dc:8a:67:fd:37:9a:c1:b1:ef:7c:d1:8e:a4:
         ce:a4:06:38
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIEAQXIBjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgxMDE2NDcxN1oXDTI1MDIwNDE0MDAw
MFowMzExMC8GA1UEAxMoYWY5MTZhODA5OGM0OGY5ZjBmZWZkNzkxNTEyZWUxMjRh
OTljZTA5ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/h8H/8R51c
Z2/KtXLs4N5+8lx3jdrwpEqnL34eZaZJLKaTE7KkAelMrf3qgsqP1ZGRxs0629ZF
o7Abv03wm4qEI7lyNeUD5mJ/Py401qSl2hkl7RFgj830ck0EuThEOIWYfVrNfqSo
2fDqrNYTQq1hAwVx8oCOphjJIYchPunVCbTi3eGUy077l0Y0ZG679uH9d1jMTSnZ
l8vcUXLZQLpAm2TkcT2qw3RN0y3JZpV80b8dll6tqqLVpIxTDJiZ2beIPEgAWvKm
i+AkmkJPYmHl9e2CPZVRwI1hH/KBPO91H+qaBhZ0X39W423LqEh2q+FaI63DHenE
NSWYwU/lFKUCAwEAAaOCAwcwggMDMB0GA1UdDgQWBBRyUe5Oty3o6yEFEFwTVCjS
G2VuIDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMTAyZmE4OC1hMGMz
LTQzOGItYjYyZi02YzRhZDNkN2FlNWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzEwMmZhODgtYTBjMy00
MzhiLWI2MmYtNmM0YWQzZDdhZTVlL2FmOTE2YTgwOThjNDhmOWYwZmVmZDc5MTUx
MmVlMTI0YTk5Y2UwOWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwCwQCAAEwBQMDAJKbMA0EAgACMAcDBQAoAAGwMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAk7fMA0GCSqGSIb3DQEBCwUAA4IBAQCwOkNw
VXnbhO6dR7WtRF7AS+eL+QbPuw4yMMehoaXHW5wM8iPPiYPerOKTuFaoe9IV8ogp
NIqN8TscuBmrXCTzMgk2LSnXEkU/zKovf9doEp4lapPExdUwPgB5P9UP3GriwBhy
Q0m3vx0dA6TsZ4aMcuB6KzxcbZtps7FD9Y3p4FEhxciKjMkoDW/CbR+Mf15vLSBr
x25BEgq4HyeLYZW5NWKdrXec6skh9dD/5XytFIz8g4EJ7ELFH9d7YT00uxdhpUva
YwLUFXsf/q434aw60iV/NND864ELN4na5COg9jtGV4lO6KwoK5MB+B0xkdyKZ/03
msGx73zRjqTOpAY4
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:18 2024 by rpki-client on console-ams.rpki-client.org