Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
File:                     e10299c1af81d7fbd554ad8da2099da215779551.cer (raw, json)
Hash identifier:          2/wRmqwDNmHPQItEkO1DcB86Piny/3a+/BvlSRWp5Lg=
Subject key identifier:   F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01033020
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Wed 08 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 22869
                          AS: 27884
                          AS: 267739
                          IP: 45.4.136.0/22
                          IP: 131.72.208.0/22
                          IP: 138.94.120.0/22
                          IP: 143.0.236.0/22
                          IP: 143.208.16.0/22
                          IP: 190.6.192.0/20
                          IP: 190.92.0.0 -- 190.92.95.255
                          IP: 190.211.136.0/22
                          IP: 201.158.48.0/22
                          IP: 2800:b10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16986144 (0x1033020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Jan  8 14:00:00 2025 GMT
        Subject: CN=e10299c1af81d7fbd554ad8da2099da215779551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:84:22:e4:ef:e2:e1:f3:7e:65:ef:e4:a6:
                    70:a6:ca:5f:4c:b6:b3:86:11:f0:06:2f:04:b5:b4:
                    ab:c3:64:91:39:d3:1c:79:4f:ba:13:30:f1:b3:fd:
                    bf:4b:c0:15:ca:b9:eb:bd:e1:a4:28:46:c9:85:60:
                    7b:38:61:cd:d9:63:1e:8e:44:0b:c4:0d:7d:74:4c:
                    40:ba:88:7b:fe:a5:e9:b1:02:02:f4:0c:fe:a1:3b:
                    4e:2f:17:ef:65:56:39:38:91:f4:15:e4:cb:eb:1c:
                    29:aa:b1:75:f4:bb:67:13:8d:c6:a6:f7:ce:03:bf:
                    4e:f0:c7:cb:c5:42:53:72:df:26:21:19:5a:be:aa:
                    5b:a3:2c:df:4d:65:25:53:63:54:ee:48:f5:7b:8c:
                    ec:d7:c9:70:55:a7:f1:e1:cb:b4:1a:37:3d:cc:dc:
                    d0:8f:44:b4:35:06:a8:a8:04:25:db:32:77:c2:c3:
                    0d:2d:4b:f4:9b:e7:9a:28:da:f2:c0:53:a7:4c:73:
                    81:ad:3e:91:94:6e:27:8a:32:36:d1:3b:2f:1d:41:
                    17:90:96:5c:82:11:e4:d1:7e:54:2a:60:1a:83:c1:
                    22:3f:c9:4b:3d:d3:91:23:b3:f6:e6:b7:ae:f7:35:
                    ff:b2:3e:e5:f2:76:57:5c:72:56:97:85:e7:15:8e:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.136.0/22
                  131.72.208.0/22
                  138.94.120.0/22
                  143.0.236.0/22
                  143.208.16.0/22
                  190.6.192.0/20
                  190.92.0.0-190.92.95.255
                  190.211.136.0/22
                  201.158.48.0/22
                IPv6:
                  2800:b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22869
                  27884
                  267739

    Signature Algorithm: sha256WithRSAEncryption
         b3:16:b3:1a:87:76:01:c9:0b:98:04:0d:6a:b7:c1:9d:86:ad:
         15:d7:a3:67:2d:a4:b4:35:43:9b:74:53:16:61:55:14:a1:9d:
         9b:2a:95:1a:fd:e6:30:dc:89:4d:7e:4f:3b:5a:d4:44:55:56:
         11:13:1f:30:0f:1d:c6:36:df:bb:e0:a1:87:f6:a8:e4:65:58:
         4e:00:77:bd:75:f0:1b:24:61:1a:1f:07:ad:e0:30:d5:99:8f:
         3b:df:40:ae:cf:52:0a:9c:65:b6:5f:91:7d:32:09:fd:d8:f2:
         2b:bf:92:16:6f:e7:c3:ef:aa:4b:da:49:51:b7:45:35:21:59:
         87:ae:ba:5c:2a:a2:7a:73:09:85:82:c3:b0:58:cd:f0:1a:1a:
         bf:9b:65:2d:17:dd:4e:0e:6e:52:84:66:4a:b2:e6:c2:23:3a:
         fb:37:c0:a7:fe:ec:84:3f:be:80:68:34:9f:f8:bb:10:92:eb:
         60:71:c5:27:93:71:1e:fc:ea:1e:66:20:5d:f6:6a:64:b5:77:
         b4:13:ae:fb:44:a2:17:17:c6:99:07:2e:0a:c7:15:63:2d:1b:
         54:8d:ef:f4:b7:1d:a3:7d:52:87:d6:80:da:99:d0:ce:e9:5e:
         a8:d7:78:58:c4:15:4a:b1:3e:ee:f3:9e:61:a6:f3:1d:16:39:
         82:b0:a0:f6
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIEAQMwIDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyMVoXDTI1MDEwODE0MDAw
MFowMzExMC8GA1UEAxMoZTEwMjk5YzFhZjgxZDdmYmQ1NTRhZDhkYTIwOTlkYTIx
NTc3OTU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJDVhCLk7+Lh
835l7+SmcKbKX0y2s4YR8AYvBLW0q8NkkTnTHHlPuhMw8bP9v0vAFcq5673hpChG
yYVgezhhzdljHo5EC8QNfXRMQLqIe/6l6bECAvQM/qE7Ti8X72VWOTiR9BXky+sc
KaqxdfS7ZxONxqb3zgO/TvDHy8VCU3LfJiEZWr6qW6Ms301lJVNjVO5I9XuM7NfJ
cFWn8eHLtBo3Pczc0I9EtDUGqKgEJdsyd8LDDS1L9Jvnmija8sBTp0xzga0+kZRu
J4oyNtE7Lx1BF5CWXIIR5NF+VCpgGoPBIj/JSz3TkSOz9ua3rvc1/7I+5fJ2V1xy
VpeF5xWO4AMCAwEAAaOCA0gwggNEMB0GA1UdDgQWBBT03tYN5EtuqZoFfnZAbQR+
gZ3QMDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZGMxOGYwNy1iYTIw
LTQzODAtOGFmZC04Y2FmYWRlNDA1OGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWRjMThmMDctYmEyMC00
MzgwLThhZmQtOGNhZmFkZTQwNThmL2UxMDI5OWMxYWY4MWQ3ZmJkNTU0YWQ4ZGEy
MDk5ZGEyMTU3Nzk1NTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBl
BggrBgEFBQcBBwEB/wRWMFQwQwQCAAEwPQMEAi0EiAMEAoNI0AMEAopeeAMEAo8A
7AMEAo/QEAMEBL4GwDALAwMCvlwDBAW+XEADBAK+04gDBALJnjAwDQQCAAIwBwMF
ACgACxAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICWVUCAmzsAgMEFdswDQYJKoZI
hvcNAQELBQADggEBALMWsxqHdgHJC5gEDWq3wZ2GrRXXo2ctpLQ1Q5t0UxZhVRSh
nZsqlRr95jDciU1+Tzta1ERVVhETHzAPHcY237vgoYf2qORlWE4Ad7118BskYRof
B63gMNWZjzvfQK7PUgqcZbZfkX0yCf3Y8iu/khZv58PvqkvaSVG3RTUhWYeuulwq
onpzCYWCw7BYzfAaGr+bZS0X3U4OblKEZkqy5sIjOvs3wKf+7IQ/voBoNJ/4uxCS
62BxxSeTcR786h5mIF32amS1d7QTrvtEohcXxpkHLgrHFWMtG1SN7/S3HaN9UofW
gNqZ0M7pXqjXeFjEFUqxPu7znmGm8x0WOYKwoPY=
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:12:06 2024 by rpki-client on console-ams.rpki-client.org