Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
File:                     e8fffda6ca924f9f16686182b1a4d40171f239c1.cer (raw, json)
Hash identifier:          VM0sv2UWSqzWWxuBkNGhPgL2jwZCuRAUkTIyklysZcQ=
Subject key identifier:   B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E51E0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 May 2021 15:09:18 +0000
Certificate not after:    Mon 13 May 2024 14:36:18 +0000
Subordinate resources:    AS: 265772
                          IP: 131.196.80.0/22
                          IP: 2803:37c0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15015436 (0xe51e0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 15:09:18 2021 GMT
            Not After : May 13 14:36:18 2024 GMT
        Subject: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:33:3a:f7:28:40:60:3a:ab:bc:55:99:d9:
                    65:f8:34:99:e6:b6:15:bc:bf:f2:cb:58:b0:e9:c6:
                    3a:34:96:18:00:1c:b6:a5:5c:e4:6a:ba:58:c7:3b:
                    76:b8:51:14:16:72:75:aa:d8:f7:f7:58:73:ac:17:
                    76:20:1a:20:e7:ed:8c:4b:be:79:af:cc:fb:3c:32:
                    42:22:37:54:b3:82:c1:44:b5:c0:49:20:05:66:53:
                    3d:be:4d:72:0a:e4:88:b8:e8:56:c5:0c:3a:7b:65:
                    5b:71:60:e6:45:e2:04:87:6e:58:bc:77:8f:5b:fb:
                    d9:c3:68:15:a5:09:89:5f:3f:97:1b:ad:e9:cf:8d:
                    f1:1a:51:c6:a8:8b:a8:62:0c:af:43:11:32:d7:22:
                    b5:12:f0:12:1e:57:8e:c5:a3:14:86:ad:71:03:50:
                    52:20:74:3b:03:cf:83:f9:4e:06:81:93:5e:ad:5c:
                    2c:b5:45:03:c5:b4:a8:e1:d6:42:9d:61:4f:22:a4:
                    1b:54:e7:90:ed:b2:f7:21:fe:62:83:cc:69:52:63:
                    17:9d:88:e1:dd:01:64:fe:07:30:29:ca:ed:84:77:
                    91:50:b7:c5:9b:f7:f9:8a:47:f4:33:2e:80:74:b3:
                    9f:29:eb:fa:b1:57:05:d4:d5:98:81:73:7f:2f:f0:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.80.0/22
                IPv6:
                  2803:37c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265772

    Signature Algorithm: sha256WithRSAEncryption
         41:40:2e:3a:c8:1a:1b:0a:ec:95:de:11:0f:5e:9c:c3:aa:3d:
         dd:d2:53:69:68:6e:9d:cf:67:01:b3:fb:f9:c5:e0:55:9a:6b:
         2e:42:4a:b7:0d:8e:92:8c:db:fb:32:8f:60:7e:df:80:1d:89:
         37:c0:36:d9:50:ba:02:3e:73:fd:ef:16:19:7f:a1:5a:c7:20:
         e6:11:c7:fc:96:12:b9:94:9d:5d:8a:65:3c:c5:c7:5d:01:7f:
         b1:19:28:72:e5:b2:57:dc:a7:8e:05:cc:67:eb:16:43:31:c6:
         c9:a9:16:a6:62:ab:48:b8:04:dd:5d:ef:f9:52:41:b4:dd:99:
         c4:af:24:00:83:65:dd:61:10:a7:49:fd:0b:12:0b:b7:64:93:
         bd:03:19:8f:9a:f5:6d:56:72:fd:45:b0:a1:4c:40:91:35:f4:
         83:c9:62:7d:85:a8:12:da:cd:7f:1a:ee:f7:3e:3c:8a:3d:c0:
         74:1e:81:fc:01:3e:a9:1e:95:41:e1:68:2d:ca:bf:7b:0a:47:
         27:64:4d:8d:a8:0d:09:84:3a:44:3e:90:f7:ca:d2:af:4e:20:
         da:b3:30:bc:cd:c2:dd:a1:34:22:b2:d7:5c:1f:d8:a6:85:a1:
         3f:1c:2c:ab:42:3f:bf:14:c8:90:cc:24:ba:a5:6d:c2:5f:7a:
         d6:4c:5f:c0
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAOUeDDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDUxMDE1MDkxOFoXDTI0MDUxMzE0MzYx
OFowMzExMC8GA1UEAxMoZThmZmZkYTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3
MWYyMzljMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKx1Mzr3KEBg
Oqu8VZnZZfg0mea2Fby/8stYsOnGOjSWGAActqVc5Gq6WMc7drhRFBZydarY9/dY
c6wXdiAaIOftjEu+ea/M+zwyQiI3VLOCwUS1wEkgBWZTPb5NcgrkiLjoVsUMOntl
W3Fg5kXiBIduWLx3j1v72cNoFaUJiV8/lxut6c+N8RpRxqiLqGIMr0MRMtcitRLw
Eh5XjsWjFIatcQNQUiB0OwPPg/lOBoGTXq1cLLVFA8W0qOHWQp1hTyKkG1TnkO2y
9yH+YoPMaVJjF52I4d0BZP4HMCnK7YR3kVC3xZv3+YpH9DMugHSznynr+rFXBdTV
mIFzfy/wpnsCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS4giec2mEb34IFfAXcIspn
FtU94jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83OTZjZTNlYi1iNzIx
LTQ2ZDAtYjE1NC1kM2Q0N2RmMjY5NTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzk2Y2UzZWItYjcyMS00
NmQwLWIxNTQtZDNkNDdkZjI2OTUwL2U4ZmZmZGE2Y2E5MjRmOWYxNjY4NjE4MmIx
YTRkNDAxNzFmMjM5YzEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoPEUDANBAIAAjAHAwUAKAM3wDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDiwwDQYJKoZIhvcNAQELBQADggEBAEFA
LjrIGhsK7JXeEQ9enMOqPd3SU2lobp3PZwGz+/nF4FWaay5CSrcNjpKM2/syj2B+
34AdiTfANtlQugI+c/3vFhl/oVrHIOYRx/yWErmUnV2KZTzFx10Bf7EZKHLlslfc
p44FzGfrFkMxxsmpFqZiq0i4BN1d7/lSQbTdmcSvJACDZd1hEKdJ/QsSC7dkk70D
GY+a9W1Wcv1FsKFMQJE19IPJYn2FqBLazX8a7vc+PIo9wHQegfwBPqkelUHhaC3K
v3sKRydkTY2oDQmEOkQ+kPfK0q9OINqzMLzNwt2hNCKy11wf2KaFoT8cLKtCP78U
yJDMJLqlbcJfetZMX8A=
-----END CERTIFICATE-----
Generated at Thu Mar 28 18:50:43 2024 by rpki-client on console-ams.rpki-client.org