Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b83c679daf7ddc29912c9ef1e1f26075ba1eaa4b.cer
File:                     b83c679daf7ddc29912c9ef1e1f26075ba1eaa4b.cer (raw, json)
Hash identifier:          6O1LlXPX4oF25pkng2jJheK7z1dq3IHvjpFQhra+SQE=
Subject key identifier:   48:D8:20:E1:78:EF:0D:6F:89:22:30:AF:E3:8B:CA:F2:E7:CE:1F:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010993CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f7bc91d4-4e57-4d3c-ba31-65d8005407e4/b83c679daf7ddc29912c9ef1e1f26075ba1eaa4b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f7bc91d4-4e57-4d3c-ba31-65d8005407e4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Sat 08 Mar 2025 18:15:34 +0000
Subordinate resources:    AS: 263719
                          IP: 2801:1b0::/40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17404878 (0x10993ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Mar  8 18:15:34 2025 GMT
        Subject: CN=b83c679daf7ddc29912c9ef1e1f26075ba1eaa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:28:46:09:82:1b:50:34:59:97:e0:80:31:
                    c0:49:ef:ba:8e:4f:9a:33:69:c2:ab:43:d3:91:51:
                    2c:89:43:ec:7c:2f:8e:93:2a:f6:86:bd:10:d0:cc:
                    74:fd:f7:e5:0d:84:61:5b:a0:03:d0:3b:23:ab:cd:
                    01:ed:0e:d2:81:bc:b5:95:7e:4a:16:2b:41:16:94:
                    26:62:94:90:8f:7d:f5:1d:9b:78:36:65:6f:d8:8b:
                    09:65:ea:ef:c1:32:88:7f:50:44:a2:66:41:84:dc:
                    c4:8c:ad:78:70:43:43:50:5b:ae:36:bb:c3:63:36:
                    0d:46:da:26:67:de:67:2c:35:8a:96:61:2a:0b:da:
                    b2:0c:a0:86:12:65:0c:93:26:ca:41:f6:0a:3e:e3:
                    f3:9e:52:a7:ef:cc:06:30:b8:b8:ad:a0:3d:2a:d0:
                    80:a3:05:09:80:27:50:81:d1:54:20:34:67:0f:03:
                    58:d4:70:8a:a7:8d:9b:77:f7:18:7f:4e:9e:3a:d8:
                    3f:6c:da:01:73:88:50:b6:cf:f2:bf:5b:01:3f:96:
                    48:d7:5c:61:11:0e:aa:99:6d:92:9d:bf:f1:4d:eb:
                    7f:f0:b4:a0:e7:7a:97:08:79:1d:d2:b8:86:1f:db:
                    b1:c8:64:52:09:e0:10:82:c7:fc:da:00:58:22:52:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:20:E1:78:EF:0D:6F:89:22:30:AF:E3:8B:CA:F2:E7:CE:1F:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f7bc91d4-4e57-4d3c-ba31-65d8005407e4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f7bc91d4-4e57-4d3c-ba31-65d8005407e4/b83c679daf7ddc29912c9ef1e1f26075ba1eaa4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b0::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263719

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:a7:98:a0:56:89:3b:0a:56:c1:e3:25:61:d9:d9:0a:b1:
         f2:87:d1:67:ac:7d:e3:15:c3:13:b2:bd:92:f9:68:ca:45:06:
         a6:a2:4f:99:34:82:00:7f:5d:f2:a2:d6:9b:1d:48:fa:85:cd:
         dc:11:56:28:52:68:7c:53:12:53:90:16:68:9a:20:9a:a5:fb:
         b5:95:bd:b1:31:5e:80:26:53:25:cc:08:5e:5b:1d:74:5e:91:
         2d:c1:92:02:05:e2:2c:48:e0:78:8f:1c:b8:ad:d5:f2:c5:3c:
         9a:a1:f2:da:0c:8b:54:9e:41:c8:21:67:7f:4a:51:8a:d7:0b:
         06:5e:d0:b2:77:ca:4c:8c:97:8e:90:77:9d:06:6b:08:7c:4d:
         4d:df:58:12:25:d9:3f:78:58:5b:58:42:89:6b:35:01:65:86:
         39:7c:78:35:36:23:64:25:e5:b4:ab:ab:15:1c:07:ae:3d:d8:
         f1:1c:15:9f:6e:16:26:13:d8:10:e4:12:3b:c8:94:b8:12:78:
         41:97:4a:24:d1:26:60:10:90:6b:50:e6:77:c2:63:92:47:3d:
         b8:2b:12:83:81:4e:86:2a:e0:58:0f:99:8c:68:76:8e:9a:f7:
         ea:f5:2a:3c:81:14:c9:f1:9e:52:a1:de:f8:a9:19:26:82:d2:
         94:55:1d:5a
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIEAQmTzjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NloXDTI1MDMwODE4MTUz
NFowMzExMC8GA1UEAxMoYjgzYzY3OWRhZjdkZGMyOTkxMmM5ZWYxZTFmMjYwNzVi
YTFlYWE0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfSKEYJghtQ
NFmX4IAxwEnvuo5PmjNpwqtD05FRLIlD7HwvjpMq9oa9ENDMdP335Q2EYVugA9A7
I6vNAe0O0oG8tZV+ShYrQRaUJmKUkI999R2beDZlb9iLCWXq78EyiH9QRKJmQYTc
xIyteHBDQ1Bbrja7w2M2DUbaJmfeZyw1ipZhKgvasgyghhJlDJMmykH2Cj7j855S
p+/MBjC4uK2gPSrQgKMFCYAnUIHRVCA0Zw8DWNRwiqeNm3f3GH9OnjrYP2zaAXOI
ULbP8r9bAT+WSNdcYREOqpltkp2/8U3rf/C0oOd6lwh5HdK4hh/bschkUgngEILH
/NoAWCJS66cCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBRI2CDheO8Nb4kiMK/ji8ry
584flDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mN2JjOTFkNC00ZTU3
LTRkM2MtYmEzMS02NWQ4MDA1NDA3ZTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjdiYzkxZDQtNGU1Ny00
ZDNjLWJhMzEtNjVkODAwNTQwN2U0L2I4M2M2NzlkYWY3ZGRjMjk5MTJjOWVmMWUx
ZjI2MDc1YmExZWFhNGIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgBAbAAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwQGJzANBgkqhkiG9w0BAQsFAAOCAQEANl6nmKBWiTsKVsHjJWHZ
2Qqx8ofRZ6x94xXDE7K9kvloykUGpqJPmTSCAH9d8qLWmx1I+oXN3BFWKFJofFMS
U5AWaJogmqX7tZW9sTFegCZTJcwIXlsddF6RLcGSAgXiLEjgeI8cuK3V8sU8mqHy
2gyLVJ5ByCFnf0pRitcLBl7QsnfKTIyXjpB3nQZrCHxNTd9YEiXZP3hYW1hCiWs1
AWWGOXx4NTYjZCXltKurFRwHrj3Y8RwVn24WJhPYEOQSO8iUuBJ4QZdKJNEmYBCQ
a1Dmd8Jjkkc9uCsSg4FOhirgWA+ZjGh2jpr36vUqPIEUyfGeUqHe+KkZJoLSlFUd
Wg==
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:53 2024 by rpki-client on console-ams.rpki-client.org