Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d22cc49db918d10383d16f3a1f83aa1e2a5567b7.cer
File:                     d22cc49db918d10383d16f3a1f83aa1e2a5567b7.cer (raw, json)
Hash identifier:          Qaa8BvSfXzOiMHT6Zvv1y3r38ruKjhIql9Pmk+rogcE=
Subject key identifier:   CA:B2:DD:CB:EA:02:99:21:D9:53:0C:A6:A2:68:5C:12:F4:57:57:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010131E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/d22cc49db918d10383d16f3a1f83aa1e2a5567b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Sun 15 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 27882
                          IP: 131.0.196.0/22
                          IP: 143.137.228.0/22
                          IP: 177.222.32.0/19
                          IP: 177.222.96.0/19
                          IP: 181.114.96.0/19
                          IP: 181.188.128.0/18
                          IP: 190.104.0.0/19
                          IP: 200.73.96.0/21
                          IP: 2800:320::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16855520 (0x10131e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Dec 15 14:00:00 2024 GMT
        Subject: CN=d22cc49db918d10383d16f3a1f83aa1e2a5567b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:b4:63:87:10:84:19:2d:68:04:fa:7c:a8:
                    89:eb:ac:c1:bf:8a:a9:d8:98:81:0b:75:77:30:61:
                    66:a4:12:04:05:ce:e4:a4:ce:6b:1c:b9:1c:4d:bc:
                    4a:b8:79:b4:ae:d9:ba:d4:af:d0:e5:12:50:34:9e:
                    ee:12:f4:ef:0a:57:1c:9d:ad:18:57:c6:93:e5:48:
                    64:c2:77:56:cf:70:74:3c:a1:26:83:6b:87:07:88:
                    bf:7e:66:3a:25:65:0c:09:93:7c:4e:d8:90:e3:62:
                    3f:1c:d1:ee:e7:52:ef:3f:7f:cf:c0:c9:cb:0b:42:
                    aa:c6:76:ee:d8:f4:f4:9e:ee:73:f0:a9:6b:5b:63:
                    67:62:d4:b9:37:cb:0a:22:72:4a:3a:37:0f:51:16:
                    29:d3:e0:cc:74:c1:c9:ee:bd:0b:58:e2:22:e3:bf:
                    86:8c:d1:ea:af:fe:72:71:36:87:ce:df:db:77:92:
                    10:72:c4:96:2d:95:5a:eb:fc:63:1a:78:80:f5:bf:
                    ac:5d:13:fd:c6:f8:9a:a6:1a:13:52:d4:0a:09:48:
                    b6:ab:9d:5c:10:28:8d:1f:7b:59:b1:89:4c:74:79:
                    2c:9a:1e:65:41:a2:e9:c2:80:0b:62:7c:b1:87:b1:
                    51:28:a2:ef:69:2f:97:69:ed:39:b3:d8:b2:23:13:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:DD:CB:EA:02:99:21:D9:53:0C:A6:A2:68:5C:12:F4:57:57:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/d22cc49db918d10383d16f3a1f83aa1e2a5567b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.196.0/22
                  143.137.228.0/22
                  177.222.32.0/19
                  177.222.96.0/19
                  181.114.96.0/19
                  181.188.128.0/18
                  190.104.0.0/19
                  200.73.96.0/21
                IPv6:
                  2800:320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27882

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:d4:b3:e2:2d:db:24:e2:f7:ab:f7:5d:70:66:56:bf:47:
         d7:8f:49:76:fe:ab:6d:41:d7:6e:4e:85:c0:3a:b0:0c:7b:d6:
         34:e7:78:9f:62:cc:1e:ff:69:0d:4e:c2:eb:55:53:4d:de:66:
         95:02:47:8a:b6:63:40:79:16:2b:80:5c:97:af:9d:09:f8:fb:
         28:e3:32:67:da:a5:e4:49:9f:a6:26:71:e1:38:30:96:f4:e2:
         61:10:e8:fb:2d:f2:e8:15:91:09:75:98:08:d0:52:9c:d8:41:
         04:24:4e:30:66:af:7f:1b:36:bf:e4:3f:03:c0:8e:cc:ff:ac:
         80:38:44:44:10:4d:ee:1a:9f:eb:7b:0b:cf:9d:9c:d7:0f:d5:
         53:a3:bf:80:9b:a6:7b:dd:70:09:95:3f:46:2e:43:d9:f1:9b:
         5b:3f:a6:1c:47:5f:fb:52:d3:e5:26:e9:17:04:30:ad:b2:aa:
         7c:8e:e3:a6:ca:7c:80:1c:86:e7:64:2c:b7:b3:af:25:f6:12:
         13:28:4b:d7:6d:23:96:f5:0c:f4:74:b2:de:79:c7:6a:86:71:
         4f:98:f8:c1:b3:14:40:22:cc:00:ed:b6:cf:54:3c:88:d5:62:
         ea:64:96:3f:c8:22:79:09:4b:fd:ef:7b:13:ec:f8:0c:72:ed:
         21:f4:a2:07
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIEAQEx4DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0M1oXDTI0MTIxNTE0MDAw
MFowMzExMC8GA1UEAxMoZDIyY2M0OWRiOTE4ZDEwMzgzZDE2ZjNhMWY4M2FhMWUy
YTU1NjdiNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALA1tGOHEIQZ
LWgE+nyoieuswb+KqdiYgQt1dzBhZqQSBAXO5KTOaxy5HE28Srh5tK7ZutSv0OUS
UDSe7hL07wpXHJ2tGFfGk+VIZMJ3Vs9wdDyhJoNrhweIv35mOiVlDAmTfE7YkONi
PxzR7udS7z9/z8DJywtCqsZ27tj09J7uc/Cpa1tjZ2LUuTfLCiJySjo3D1EWKdPg
zHTBye69C1jiIuO/hozR6q/+cnE2h87f23eSEHLEli2VWuv8Yxp4gPW/rF0T/cb4
mqYaE1LUCglItqudXBAojR97WbGJTHR5LJoeZUGi6cKAC2J8sYexUSii72kvl2nt
ObPYsiMTWYECAwEAAaOCAzIwggMuMB0GA1UdDgQWBBTKst3L6gKZIdlTDKaiaFwS
9FdXGjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85MWYwZmVkYS00ZTJh
LTQxYjctYmY1MS1lNjU3YTUyNjQwMzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTFmMGZlZGEtNGUyYS00
MWI3LWJmNTEtZTY1N2E1MjY0MDM1L2QyMmNjNDlkYjkxOGQxMDM4M2QxNmYzYTFm
ODNhYTFlMmE1NTY3YjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBY
BggrBgEFBQcBBwEB/wRJMEcwNgQCAAEwMAMEAoMAxAMEAo+J5AMEBbHeIAMEBbHe
YAMEBbVyYAMEBrW8gAMEBb5oAAMEA8hJYDANBAIAAjAHAwUAKAADIDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJs6jANBgkqhkiG9w0BAQsFAAOCAQEAgRrUs+It2yTi
96v3XXBmVr9H149Jdv6rbUHXbk6FwDqwDHvWNOd4n2LMHv9pDU7C61VTTd5mlQJH
irZjQHkWK4Bcl6+dCfj7KOMyZ9ql5EmfpiZx4TgwlvTiYRDo+y3y6BWRCXWYCNBS
nNhBBCROMGavfxs2v+Q/A8COzP+sgDhERBBN7hqf63sLz52c1w/VU6O/gJume91w
CZU/Ri5D2fGbWz+mHEdf+1LT5SbpFwQwrbKqfI7jpsp8gByG52Qst7OvJfYSEyhL
120jlvUM9HSy3nnHaoZxT5j4wbMUQCLMAO22z1Q8iNVi6mSWP8gieQlL/e97E+z4
DHLtIfSiBw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 23:48:45 2024 by rpki-client on console-ams.rpki-client.org