Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
File:                     c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer (raw, json)
Hash identifier:          xgNKMQfY1t/CTv5ktPh8GMDnUJIdUMo7jgXUPmeKvcM=
Subject key identifier:   DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E37BF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:09 +0000
Certificate not after:    Sun 05 May 2024 06:00:00 +0000
Subordinate resources:    AS: 27784
                          IP: 179.0.204.0/24
                          IP: 200.0.63.0/24
                          IP: 200.10.209.0/24
                          IP: 2801:0:4d0::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14908408 (0xe37bf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:09 2017 GMT
            Not After : May  5 06:00:00 2024 GMT
        Subject: CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:ec:e4:6e:51:e9:00:15:e0:e5:04:e5:22:
                    ce:e0:10:ca:9f:64:36:0a:65:bf:74:83:be:e0:be:
                    a7:63:0d:12:74:36:02:0b:ab:14:ca:5f:11:64:6b:
                    aa:54:e9:2d:a0:b5:cc:a9:98:d8:32:3b:0d:0a:25:
                    a8:48:91:29:44:3d:cd:99:ca:bd:1b:d3:dc:ae:f5:
                    2a:ac:5a:aa:64:70:b0:5f:a9:87:9a:90:d6:9a:d2:
                    3e:93:6e:8d:d1:31:3a:60:ae:29:cf:53:40:ee:5e:
                    c2:a5:28:4f:31:9a:6c:9b:e7:7f:c3:d7:10:96:b1:
                    a8:18:ba:4f:08:3b:07:ee:60:04:2f:c2:3b:b9:34:
                    ae:d4:0d:49:da:1e:a3:d7:18:eb:8a:e6:31:6e:2a:
                    8f:2f:df:ba:da:11:45:de:59:0a:3f:69:ab:de:0c:
                    d1:32:77:b2:2c:97:46:9e:a6:a2:d5:c9:0d:3b:ff:
                    fb:73:fb:ff:6e:e8:75:0f:f5:32:cc:d7:f0:f0:61:
                    44:22:21:41:86:c4:c8:dc:79:12:2b:fd:b6:cf:f4:
                    52:b2:2f:df:f4:dd:be:d2:27:13:a4:04:f8:40:93:
                    6d:60:db:79:89:9a:5b:69:c2:5a:8f:35:3d:b7:15:
                    40:66:9e:cd:8a:6a:88:95:d0:09:d9:a4:9a:b9:1e:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24
                  200.0.63.0/24
                  200.10.209.0/24
                IPv6:
                  2801:0:4d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27784

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:0a:7b:03:fc:52:09:f6:e6:cd:5f:f2:69:f3:08:02:87:
         5c:fa:35:b8:4d:13:e1:da:86:8b:19:89:fb:1e:a6:de:59:0e:
         0b:42:94:e1:48:9c:cf:f3:b8:5e:f0:b0:a8:48:c3:2e:81:45:
         a9:97:b0:b4:69:bc:be:69:86:5d:5a:69:86:11:db:b5:66:61:
         9c:c5:e1:bb:d0:2b:98:ed:f7:24:2d:53:6b:63:8c:ea:6d:28:
         93:ee:9a:cc:db:90:67:45:07:c7:5c:34:a9:71:69:f1:b9:0f:
         33:e1:46:65:ee:ff:8b:fb:4a:e8:18:5d:ca:59:03:ae:3e:da:
         17:0a:18:3b:08:7f:55:13:c7:27:6c:73:65:10:a5:53:6f:14:
         68:20:74:ed:45:c2:e9:62:c1:92:b2:48:55:a2:56:e1:28:0b:
         c3:18:28:6d:ba:b9:15:2a:f6:a4:1d:8a:bb:ce:ea:91:7b:f4:
         2a:40:f5:7f:9b:e2:45:f3:1b:59:cd:97:fb:4d:e2:ce:44:d3:
         b8:92:8f:3e:0b:a4:ed:be:4f:b1:70:ac:a9:c1:7d:91:6a:09:
         50:6d:48:fc:a1:dd:fb:30:9c:04:42:a5:3c:35:ff:b3:35:bb:
         00:cb:ed:c7:d6:9f:87:33:0f:68:5f:e6:2c:d2:2d:d1:52:8f:
         01:0e:46:1f
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIEAON7+DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwOVoXDTI0MDUwNTA2MDAw
MFowMzExMC8GA1UEAxMoYzFiMTBmZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEw
OTM2MWIzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJz7ORuUekA
FeDlBOUizuAQyp9kNgplv3SDvuC+p2MNEnQ2AgurFMpfEWRrqlTpLaC1zKmY2DI7
DQolqEiRKUQ9zZnKvRvT3K71KqxaqmRwsF+ph5qQ1prSPpNujdExOmCuKc9TQO5e
wqUoTzGabJvnf8PXEJaxqBi6Twg7B+5gBC/CO7k0rtQNSdoeo9cY64rmMW4qjy/f
utoRRd5ZCj9pq94M0TJ3siyXRp6motXJDTv/+3P7/27odQ/1MszX8PBhRCIhQYbE
yNx5Eiv9ts/0UrIv3/TdvtInE6QE+ECTbWDbeYmaW2nCWo81PbcVQGaezYpqiJXQ
CdmkmrkemNECAwEAAaOCAxYwggMSMB0GA1UdDgQWBBTaPMd5ERJJ8E1DUstgvCOk
S592uTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82YzhlYTdhZS02YjIz
LTRiNzktYWQ3OC1iNjE5MjQ3NTA2NmYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmM4ZWE3YWUtNmIyMy00
Yjc5LWFkNzgtYjYxOTI0NzUwNjZmL2MxYjEwZmVkOGQ3M2JjNmZjYTIyN2MyMDZi
MTEyZjlhMDkzNjFiM2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEALMAzAMEAMgAPwMEAMgK0TAPBAIA
AjAJAwcAKAEAAATQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmyIMA0GCSqGSIb3
DQEBCwUAA4IBAQCggAp7A/xSCfbmzV/yafMIAodc+jW4TRPh2oaLGYn7HqbeWQ4L
QpThSJzP87he8LCoSMMugUWpl7C0aby+aYZdWmmGEdu1ZmGcxeG70CuY7fckLVNr
Y4zqbSiT7prM25BnRQfHXDSpcWnxuQ8z4UZl7v+L+0roGF3KWQOuPtoXChg7CH9V
E8cnbHNlEKVTbxRoIHTtRcLpYsGSskhVolbhKAvDGChturkVKvakHYq7zuqRe/Qq
QPV/m+JF8xtZzZf7TeLORNO4ko8+C6Ttvk+xcKypwX2RaglQbUj8od37MJwEQqU8
Nf+zNbsAy+3H1p+HMw9oX+Ys0i3RUo8BDkYf
-----END CERTIFICATE-----
Generated at Thu Mar 28 14:02:17 2024 by rpki-client on console-fra.rpki-client.org