Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1f199734e391a7789d29da958f43080e77b40df.cer
File:                     e1f199734e391a7789d29da958f43080e77b40df.cer (raw, json)
Hash identifier:          hH4JZN+nweHuCLIvhM66kpbsr3AtsS1RzoerxWULwyk=
Subject key identifier:   92:00:00:F7:49:F5:49:F5:1D:FE:24:26:4A:80:F3:ED:9E:EC:63:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01022A03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/e1f199734e391a7789d29da958f43080e77b40df.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:10 +0000
Certificate not after:    Wed 25 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 262154
                          IP: 200.55.248.0/21
                          IP: 2800:c10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Mar 2024 01:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16919043 (0x1022a03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:10 2017 GMT
            Not After : Dec 25 05:00:00 2024 GMT
        Subject: CN=e1f199734e391a7789d29da958f43080e77b40df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:8b:7b:0c:8c:5a:bb:11:19:a3:05:e7:5c:
                    85:78:05:d1:06:9f:dc:2c:85:50:6f:92:3a:b8:4a:
                    87:33:d5:a1:75:c7:a8:96:6e:82:d0:6e:f4:5c:5f:
                    c5:fd:19:53:f8:56:f8:81:29:a9:45:e7:0b:3d:6b:
                    08:47:62:6f:09:95:cc:2c:cd:6a:80:32:42:02:df:
                    9a:be:c1:7f:c3:4e:a5:eb:c8:50:73:68:72:3f:9f:
                    0c:15:97:88:25:44:1f:87:07:af:4f:11:16:15:43:
                    56:77:81:ca:58:c1:6b:c5:b6:1b:8b:5e:4a:73:52:
                    6c:0b:23:70:ef:08:0f:92:9f:de:e7:91:ab:49:29:
                    a8:f7:36:69:e5:70:2d:82:ce:6a:0a:ba:70:aa:0a:
                    02:a3:9c:bc:60:6f:ac:f3:ff:a5:30:ae:35:9c:5f:
                    11:79:ed:e2:6e:a2:0d:b2:ab:a7:f1:67:ab:68:86:
                    ca:ff:ca:db:7b:51:dc:90:30:8c:6a:c3:2f:ca:1e:
                    7a:b4:03:de:59:36:0c:9c:a5:75:d3:78:95:03:d6:
                    00:c6:f4:6a:27:b3:c4:ba:9e:9b:fc:8f:99:44:af:
                    0a:e7:e9:e3:77:6d:00:9f:42:5e:95:0e:b3:58:63:
                    d5:e0:04:01:04:e9:1c:65:53:bd:d2:c4:b0:d9:12:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:00:F7:49:F5:49:F5:1D:FE:24:26:4A:80:F3:ED:9E:EC:63:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c4c7c0d-ed6f-42ff-a47d-f7ae0d7c09a2/e1f199734e391a7789d29da958f43080e77b40df.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.248.0/21
                IPv6:
                  2800:c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262154

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:72:39:dc:3f:b9:24:ae:14:62:80:76:78:2f:5a:45:e9:
         8f:bf:c9:78:de:6f:60:f5:80:21:ce:02:53:09:4b:8b:45:91:
         54:4b:8a:81:b5:97:26:77:9d:98:74:f2:17:f9:c7:27:15:c8:
         0a:bd:8d:59:f5:70:7a:5c:9a:b3:8f:14:13:3e:05:4e:6f:79:
         b1:e9:f3:ff:20:fb:37:8b:03:76:6c:09:b4:ee:13:76:04:4e:
         f9:55:55:57:f6:d0:75:5a:8e:d7:f4:24:86:a1:70:dd:b3:b1:
         d9:f1:01:4f:3c:f1:e6:a3:6c:09:75:14:6d:d0:f9:6e:0a:ed:
         21:74:46:d5:76:cc:8e:73:67:d3:1c:07:dc:a4:7a:6d:8f:52:
         fe:b6:6a:33:87:6e:1e:70:6f:80:d0:83:65:d7:b1:f5:2b:78:
         e3:d3:08:b9:83:7e:51:6a:76:49:00:e7:79:54:05:d7:92:25:
         82:a5:98:db:e8:a0:18:17:15:96:df:83:82:ca:92:2b:17:79:
         7a:33:2b:c1:23:95:f6:89:60:cf:64:98:0a:3b:99:74:6c:dc:
         b6:e4:1a:34:08:eb:b6:f8:5e:a9:e8:5d:6a:38:13:ba:95:8f:
         98:31:71:13:5a:74:6a:45:62:c1:2b:54:1f:00:a2:b4:54:7d:
         84:60:5c:3b
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQIqAzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxMFoXDTI0MTIyNTA1MDAw
MFowMzExMC8GA1UEAxMoZTFmMTk5NzM0ZTM5MWE3Nzg5ZDI5ZGE5NThmNDMwODBl
NzdiNDBkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKV9i3sMjFq7
ERmjBedchXgF0Qaf3CyFUG+SOrhKhzPVoXXHqJZugtBu9Fxfxf0ZU/hW+IEpqUXn
Cz1rCEdibwmVzCzNaoAyQgLfmr7Bf8NOpevIUHNocj+fDBWXiCVEH4cHr08RFhVD
VneByljBa8W2G4teSnNSbAsjcO8ID5Kf3ueRq0kpqPc2aeVwLYLOagq6cKoKAqOc
vGBvrPP/pTCuNZxfEXnt4m6iDbKrp/Fnq2iGyv/K23tR3JAwjGrDL8oeerQD3lk2
DJylddN4lQPWAMb0aiezxLqem/yPmUSvCufp43dtAJ9CXpUOs1hj1eAEAQTpHGVT
vdLEsNkSBM8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSSAAD3SfVJ9R3+JCZKgPPt
nuxjnTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85YzRjN2MwZC1lZDZm
LTQyZmYtYTQ3ZC1mN2FlMGQ3YzA5YTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOWM0YzdjMGQtZWQ2Zi00
MmZmLWE0N2QtZjdhZTBkN2MwOWEyL2UxZjE5OTczNGUzOTFhNzc4OWQyOWRhOTU4
ZjQzMDgwZTc3YjQwZGYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA8g3+DANBAIAAjAHAwUAKAAMEDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAAowDQYJKoZIhvcNAQELBQADggEBAJ1o
cjncP7kkrhRigHZ4L1pF6Y+/yXjeb2D1gCHOAlMJS4tFkVRLioG1lyZ3nZh08hf5
xycVyAq9jVn1cHpcmrOPFBM+BU5vebHp8/8g+zeLA3ZsCbTuE3YETvlVVVf20HVa
jtf0JIahcN2zsdnxAU888eajbAl1FG3Q+W4K7SF0RtV2zI5zZ9McB9ykem2PUv62
ajOHbh5wb4DQg2XXsfUreOPTCLmDflFqdkkA53lUBdeSJYKlmNvooBgXFZbfg4LK
kisXeXozK8EjlfaJYM9kmAo7mXRs3LbkGjQI67b4XqnoXWo4E7qVj5gxcRNadGpF
YsErVB8AorRUfYRgXDs=
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:44:32 2024 by rpki-client on console-ams.rpki-client.org