Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
File:                     c376ce9732a7f8438a8728863d42624058e18390.cer (raw, json)
Hash identifier:          aJ26gTfxDsGL8HmzLu2FRBBzOKrXLq/XgCSdxUMj/I4=
Subject key identifier:   D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4F6C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:55 +0000
Certificate not after:    Fri 13 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 10502
                          AS: 14664
                          IP: 190.60.0.0 -- 190.61.31.255
                          IP: 190.61.64.0 -- 190.61.255.255
                          IP: 200.61.128.0/19
                          IP: 200.73.0.0 -- 200.73.95.255
                          IP: 200.80.0.0/18
                          IP: 200.91.192.0/18
                          IP: 200.110.128.0/19
                          IP: 201.217.192.0/19
                          IP: 216.241.0.0/19
                          IP: 2802::/30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Aug 2023 15:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16053956 (0xf4f6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:55 2017 GMT
            Not After : Sep 13 15:00:00 2024 GMT
        Subject: CN=c376ce9732a7f8438a8728863d42624058e18390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:b0:d6:af:49:4e:94:d7:ab:59:e2:cf:06:
                    11:04:46:88:23:2d:6a:76:36:8e:f6:42:50:a8:01:
                    da:7d:2c:19:e2:38:79:91:5b:04:44:48:e2:5d:82:
                    83:1f:dd:92:2f:17:bf:a3:ff:6f:35:cf:c7:cd:37:
                    4a:f1:ea:3b:b0:a2:54:eb:08:97:ae:90:e9:9d:38:
                    63:7b:6e:91:1d:63:88:bf:9a:a4:fb:67:76:df:a3:
                    8f:5f:04:ce:a2:f4:9e:79:78:87:25:65:3a:0b:d3:
                    9a:8b:a4:52:55:1b:78:01:7d:94:23:fa:0f:28:ed:
                    9d:b0:05:bf:e6:a0:04:f7:0c:02:4b:1e:57:ff:00:
                    2d:a2:79:df:cf:55:9f:b3:d4:03:74:9a:23:a0:68:
                    ca:49:d0:81:61:00:ee:97:45:28:6f:07:84:5b:65:
                    8a:de:db:b9:c7:08:8e:fc:e1:28:d3:3b:a9:b1:bd:
                    d4:5a:cc:3f:f4:28:04:47:f2:4b:a1:8b:2e:5e:66:
                    39:b6:ce:5a:45:53:28:3d:31:8c:38:ed:32:ae:f5:
                    dd:95:29:0e:84:ff:21:30:fa:bb:71:ab:17:48:67:
                    23:3c:b7:2d:13:5e:df:47:a8:7c:06:d0:0a:c4:9d:
                    f8:08:3e:76:b5:b6:b2:a5:c7:41:9b:ac:5b:56:92:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.0.0-190.61.31.255
                  190.61.64.0-190.61.255.255
                  200.61.128.0/19
                  200.73.0.0-200.73.95.255
                  200.80.0.0/18
                  200.91.192.0/18
                  200.110.128.0/19
                  201.217.192.0/19
                  216.241.0.0/19
                IPv6:
                  2802::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10502
                  14664

    Signature Algorithm: sha256WithRSAEncryption
         af:b0:33:e8:cf:c5:90:f4:f4:3e:9b:93:28:4b:64:0b:17:c9:
         0c:fa:c1:2e:37:28:79:d9:37:8f:29:b7:e9:6b:8c:df:45:f1:
         80:51:be:de:35:65:74:5d:ce:0e:a1:bd:ce:e7:99:67:3d:d7:
         10:e3:95:b2:b9:57:2e:fb:06:6c:73:31:99:da:30:1c:15:2c:
         32:93:cb:28:84:35:24:38:d8:00:23:48:f7:32:fc:6c:f4:1e:
         11:24:d3:ad:e5:21:7b:32:8c:6e:8c:7e:81:ae:50:bb:d3:60:
         8b:37:be:33:c7:1b:e6:af:52:63:4b:dc:86:64:6e:c3:9f:a9:
         1d:1c:74:12:9c:1c:76:bd:1c:ef:ae:ba:17:75:fe:8c:4a:10:
         75:84:34:8b:ae:d3:86:ba:01:87:a7:c4:37:6a:f3:f6:7b:cb:
         e7:4a:36:84:c4:97:17:d5:5b:ae:9a:f1:4a:ab:18:b1:6a:44:
         ff:fe:ba:36:7c:18:ab:a6:97:9c:07:f0:71:de:71:45:eb:fe:
         46:bb:2e:6c:96:53:95:a4:99:ca:da:69:28:80:79:b8:98:61:
         9f:d8:7b:b9:cc:0a:66:3c:f2:57:c1:d2:bc:43:25:c6:82:5b:
         4e:5a:04:2d:97:b7:39:12:f0:a2:d9:75:d3:95:93:44:36:dc:
         3c:43:bc:dd
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIEAPT2xDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NVoXDTI0MDkxMzE1MDAw
MFowMzExMC8GA1UEAxMoYzM3NmNlOTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1
OGUxODM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPFzsNavSU6U
16tZ4s8GEQRGiCMtanY2jvZCUKgB2n0sGeI4eZFbBERI4l2Cgx/dki8Xv6P/bzXP
x803SvHqO7CiVOsIl66Q6Z04Y3tukR1jiL+apPtndt+jj18EzqL0nnl4hyVlOgvT
moukUlUbeAF9lCP6DyjtnbAFv+agBPcMAkseV/8ALaJ5389Vn7PUA3SaI6BoyknQ
gWEA7pdFKG8HhFtlit7buccIjvzhKNM7qbG91FrMP/QoBEfyS6GLLl5mObbOWkVT
KD0xjDjtMq713ZUpDoT/ITD6u3GrF0hnIzy3LRNe30eofAbQCsSd+Ag+drW2sqXH
QZusW1aSagsCAwEAAaOCA1EwggNNMB0GA1UdDgQWBBTRpiLpMRqJN073Qp626yzU
FqJUkjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iN2UyY2JjYi00ZTFl
LTQ0NTEtYmE5Zi1iODM5YWNiNWE3NWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjdlMmNiY2ItNGUxZS00
NDUxLWJhOWYtYjgzOWFjYjVhNzVmL2MzNzZjZTk3MzJhN2Y4NDM4YTg3Mjg4NjNk
NDI2MjQwNThlMTgzOTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBz
BggrBgEFBQcBBwEB/wRkMGIwUQQCAAEwSzALAwMCvjwDBAW+PQAwCwMEBr49QAMD
Ab48AwQFyD2AMAsDAwDISQMEBchJQAMEBshQAAMEBshbwAMEBchugAMEBcnZwAME
BdjxADANBAIAAjAHAwUCKAIAADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIpBgIC
OUgwDQYJKoZIhvcNAQELBQADggEBAK+wM+jPxZD09D6bkyhLZAsXyQz6wS43KHnZ
N48pt+lrjN9F8YBRvt41ZXRdzg6hvc7nmWc91xDjlbK5Vy77BmxzMZnaMBwVLDKT
yyiENSQ42AAjSPcy/Gz0HhEk063lIXsyjG6MfoGuULvTYIs3vjPHG+avUmNL3IZk
bsOfqR0cdBKcHHa9HO+uuhd1/oxKEHWENIuu04a6AYenxDdq8/Z7y+dKNoTElxfV
W66a8UqrGLFqRP/+ujZ8GKuml5wH8HHecUXr/ka7LmyWU5WkmcraaSiAebiYYZ/Y
e7nMCmY88lfB0rxDJcaCW05aBC2XtzkS8KLZddOVk0Q23DxDvN0=
-----END CERTIFICATE-----
Generated at Sun Aug 13 15:19:17 2023 by rpki-client on console-fra.rpki-client.org