Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd49ffbffceb593e48cbb0300514f204591edf75.cer
File:                     cd49ffbffceb593e48cbb0300514f204591edf75.cer (raw, json)
Hash identifier:          mlfygu4EIemp1/PTAX1UwEEb5/Gl/Wb+/cPAYfxh2vg=
Subject key identifier:   80:A8:5F:50:8A:BE:35:25:5F:29:77:2B:41:88:82:85:B2:EA:EF:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC7FE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/cd49ffbffceb593e48cbb0300514f204591edf75.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Fri 05 Jul 2024 20:35:50 +0000
Subordinate resources:    AS: 265814
                          IP: 45.70.180.0/22
                          IP: 2803:3820::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15499238 (0xec7fe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Jul  5 20:35:50 2024 GMT
        Subject: CN=cd49ffbffceb593e48cbb0300514f204591edf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c2:cd:37:7d:1f:a8:19:2c:29:8f:e1:fd:71:
                    da:d2:1c:36:c4:60:77:81:3f:71:2c:ab:ef:b7:bf:
                    b8:66:51:69:7c:59:cb:c2:ff:b4:e5:35:e3:60:65:
                    19:c1:58:29:21:0d:f4:93:da:df:90:a3:af:1a:30:
                    19:ad:69:42:12:d4:d3:5b:10:4d:8d:2a:72:53:4b:
                    67:b5:00:9f:0e:59:c4:bb:e2:9c:74:3c:69:4b:ab:
                    a9:4b:f4:88:23:42:46:d6:3e:93:ae:55:8c:bd:a1:
                    af:c0:1c:dd:44:62:ba:3a:23:95:1d:41:7d:86:9e:
                    b3:3e:00:b0:d7:7b:d1:af:9d:a3:59:03:9c:c9:fd:
                    7b:47:98:ce:93:5c:1e:0a:6b:89:6b:9d:76:e2:18:
                    81:fe:15:e2:e1:97:ee:fa:a1:e9:f1:aa:49:33:46:
                    da:37:b4:b0:eb:47:46:65:2b:30:55:cd:49:6e:5a:
                    ee:0c:ff:cf:b2:f3:10:fd:f9:57:2a:f6:0f:2e:26:
                    4f:e7:3b:40:1b:e3:1a:be:3a:73:6a:1f:b2:5a:32:
                    1c:9d:ec:68:0e:b3:ef:92:77:ac:a2:88:e4:dc:38:
                    18:63:bf:be:b3:1c:e7:53:8e:1a:6a:97:63:7a:e4:
                    ee:fa:2f:28:4a:c1:57:cc:da:36:46:82:6f:20:33:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A8:5F:50:8A:BE:35:25:5F:29:77:2B:41:88:82:85:B2:EA:EF:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3339a613-0af8-49ed-b7d6-818edb6d0cc3/cd49ffbffceb593e48cbb0300514f204591edf75.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.180.0/22
                IPv6:
                  2803:3820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265814

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:d6:ec:46:4c:53:ad:ae:6e:e2:df:94:88:c2:30:1e:4d:
         71:ee:6b:3b:74:bb:dd:49:95:c6:ad:ed:78:a0:24:2c:d6:65:
         f1:3c:8d:9e:ba:a5:17:0a:e2:68:dd:6d:f7:7e:50:1e:35:89:
         e4:c6:9b:09:c6:0d:32:b1:8c:57:04:7a:68:0c:43:49:23:15:
         72:69:b2:20:ff:3f:e6:da:20:8f:4b:de:9b:b7:65:81:4b:4f:
         47:7e:bb:58:01:9c:a1:b9:2d:c7:72:d0:c8:6a:e9:8b:55:a0:
         d4:1b:ce:83:bd:77:f5:b2:c8:07:57:78:2f:77:f6:e0:73:bc:
         3d:03:35:33:b1:db:43:66:87:e5:1f:93:70:1c:9d:cd:3c:14:
         5b:9e:33:41:82:a0:b2:b9:eb:0c:35:e9:f3:11:5f:55:52:43:
         c6:86:74:17:f0:c0:90:04:c3:d0:89:03:e0:e7:2f:83:a7:0e:
         d2:99:58:20:3a:7f:c8:fb:8e:46:10:7d:98:3f:da:21:84:1a:
         a8:d3:c9:8c:56:29:e0:5f:c5:ab:c5:b7:e1:09:56:ce:98:52:
         54:b7:10:11:f4:f2:79:bc:63:09:7e:ac:cc:36:6d:92:0a:15:
         be:9b:58:fa:6a:b5:c5:ce:f8:95:52:42:f1:f2:fb:c6:57:76:
         51:64:ba:aa
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOx/5jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0MloXDTI0MDcwNTIwMzU1
MFowMzExMC8GA1UEAxMoY2Q0OWZmYmZmY2ViNTkzZTQ4Y2JiMDMwMDUxNGYyMDQ1
OTFlZGY3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAITCzTd9H6gZ
LCmP4f1x2tIcNsRgd4E/cSyr77e/uGZRaXxZy8L/tOU142BlGcFYKSEN9JPa35Cj
rxowGa1pQhLU01sQTY0qclNLZ7UAnw5ZxLvinHQ8aUurqUv0iCNCRtY+k65VjL2h
r8Ac3URiujojlR1BfYaesz4AsNd70a+do1kDnMn9e0eYzpNcHgpriWudduIYgf4V
4uGX7vqh6fGqSTNG2je0sOtHRmUrMFXNSW5a7gz/z7LzEP35Vyr2Dy4mT+c7QBvj
Gr46c2ofsloyHJ3saA6z75J3rKKI5Nw4GGO/vrMc51OOGmqXY3rk7vovKErBV8za
NkaCbyAzdrECAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSAqF9Qir41JV8pdytBiIKF
survYDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zMzM5YTYxMy0wYWY4
LTQ5ZWQtYjdkNi04MThlZGI2ZDBjYzMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzMzOWE2MTMtMGFmOC00
OWVkLWI3ZDYtODE4ZWRiNmQwY2MzL2NkNDlmZmJmZmNlYjU5M2U0OGNiYjAzMDA1
MTRmMjA0NTkxZWRmNzUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1GtDANBAIAAjAHAwUAKAM4IDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDlYwDQYJKoZIhvcNAQELBQADggEBACsl
1uxGTFOtrm7i35SIwjAeTXHuazt0u91Jlcat7XigJCzWZfE8jZ66pRcK4mjdbfd+
UB41ieTGmwnGDTKxjFcEemgMQ0kjFXJpsiD/P+baII9L3pu3ZYFLT0d+u1gBnKG5
Lcdy0Mhq6YtVoNQbzoO9d/WyyAdXeC939uBzvD0DNTOx20Nmh+Ufk3Acnc08FFue
M0GCoLK56ww16fMRX1VSQ8aGdBfwwJAEw9CJA+DnL4OnDtKZWCA6f8j7jkYQfZg/
2iGEGqjTyYxWKeBfxavFt+EJVs6YUlS3EBH08nm8Ywl+rMw2bZIKFb6bWPpqtcXO
+JVSQvHy+8ZXdlFkuqo=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:26 2024 by rpki-client on console-ams.rpki-client.org