Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer
File:                     ee16626b2effff95f451b4227e9e67721082c9aa.cer (raw, json)
Hash identifier:          EmJ/jf/IENnKoWPFaILnjOB9W9U3NMkjejNxZisLL54=
Subject key identifier:   8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF6BD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/ee16626b2effff95f451b4227e9e67721082c9aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2020 14:08:58 +0000
Certificate not after:    Fri 26 Jul 2024 18:55:05 +0000
Subordinate resources:    AS: 265829
                          IP: 45.71.204.0/22
                          IP: 2803:ac20::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15690712 (0xef6bd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 14:08:58 2020 GMT
            Not After : Jul 26 18:55:05 2024 GMT
        Subject: CN=ee16626b2effff95f451b4227e9e67721082c9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:75:48:17:4c:36:8c:3b:b0:a3:14:67:e4:
                    e1:6d:0f:b7:5a:7a:4c:8d:f5:c2:b3:83:a3:59:00:
                    df:61:e7:28:79:5b:2e:e8:6e:71:8d:dc:5f:00:35:
                    07:ea:60:88:a3:da:1a:0f:d5:e5:e3:41:44:c4:9a:
                    d5:ef:4c:5a:29:fa:f3:d0:9e:30:23:9b:68:a2:92:
                    f3:74:aa:bc:b3:03:37:06:4d:08:ed:95:79:02:ec:
                    41:7b:66:6d:07:03:d0:11:5a:6a:7b:53:dc:33:7d:
                    57:6f:a4:7b:b4:c9:66:d3:98:7b:80:c0:3d:a6:96:
                    43:40:ba:fe:3c:4f:97:2b:e7:55:6c:87:3a:2d:1f:
                    05:ee:85:96:82:d8:a6:6e:a5:89:a6:45:b2:4c:04:
                    33:83:88:ba:df:6a:26:a2:20:02:fb:ae:90:80:fe:
                    8d:dc:e2:fe:53:08:2b:eb:01:3e:85:51:74:f7:14:
                    9b:0d:3e:62:b8:33:6a:32:a7:a4:b9:fb:f8:cf:31:
                    25:74:46:ea:49:63:2c:37:46:68:98:58:da:3c:b9:
                    49:0f:34:91:b4:ee:a5:9f:95:bd:a7:5c:7a:ec:c7:
                    5e:6e:66:fd:b7:13:bc:00:6e:c9:79:a1:b9:3f:ae:
                    7c:51:8b:ba:df:30:37:db:f7:9b:d0:50:f6:22:93:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/ee16626b2effff95f451b4227e9e67721082c9aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.204.0/22
                IPv6:
                  2803:ac20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265829

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:46:55:fd:c2:59:50:34:fa:6a:e6:ae:da:58:ce:a9:81:
         57:fe:f7:cd:b4:f0:1d:a0:9d:08:57:44:2f:cb:e0:79:34:6f:
         bb:13:ae:35:47:c3:01:4a:cd:c0:0f:ab:9e:96:af:99:f0:fa:
         5a:06:c6:59:ea:e4:5f:d2:45:13:bd:d5:77:d7:a1:3b:c8:58:
         80:74:7d:a8:8a:d1:c7:1b:b9:f7:82:bc:1e:2a:93:40:7a:32:
         f1:99:5a:37:fe:a0:2e:23:aa:7e:1b:44:8d:7e:9a:e3:ad:21:
         6a:f8:0e:8b:fe:b6:ed:cd:ab:0a:c8:32:50:3d:b4:cb:41:d1:
         20:00:1f:fd:78:11:33:86:07:1e:77:5a:3f:49:ff:d1:93:6f:
         08:bc:45:c5:7e:c7:29:cc:2e:8e:eb:d6:93:35:59:a8:14:34:
         85:6b:79:71:f6:d6:70:b7:2a:78:57:d1:fa:49:30:84:25:3c:
         fd:35:3a:8b:72:ed:ff:16:f5:d3:d8:d3:2f:d6:d9:ea:20:36:
         d9:7a:7c:4e:81:b9:c1:01:78:b0:e2:14:10:bb:9a:3a:37:13:
         be:16:04:85:d7:ae:a6:dd:f4:23:4c:d3:41:bb:8e:64:f2:0e:
         0f:ec:77:d8:73:84:0c:86:2e:77:a4:75:fa:ec:66:a8:3c:21:
         3d:aa:96:48
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAO9r2DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDQxNzE0MDg1OFoXDTI0MDcyNjE4NTUw
NVowMzExMC8GA1UEAxMoZWUxNjYyNmIyZWZmZmY5NWY0NTFiNDIyN2U5ZTY3NzIx
MDgyYzlhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKCYdUgXTDaM
O7CjFGfk4W0Pt1p6TI31wrODo1kA32HnKHlbLuhucY3cXwA1B+pgiKPaGg/V5eNB
RMSa1e9MWin689CeMCObaKKS83SqvLMDNwZNCO2VeQLsQXtmbQcD0BFaantT3DN9
V2+ke7TJZtOYe4DAPaaWQ0C6/jxPlyvnVWyHOi0fBe6FloLYpm6liaZFskwEM4OI
ut9qJqIgAvuukID+jdzi/lMIK+sBPoVRdPcUmw0+YrgzajKnpLn7+M8xJXRG6klj
LDdGaJhY2jy5SQ80kbTupZ+VvadceuzHXm5m/bcTvABuyXmhuT+ufFGLut8wN9v3
m9BQ9iKTnWMCAwEAAaOCAwkwggMFMB0GA1UdDgQWBBSPj0vYLudQd7EyYvAYeUGa
zxMQKDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83OGE0NjAxNy1jMjU1
LTQ4NjktYmI0ZC0yNTZlM2JhNmJlMjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzhhNDYwMTctYzI1NS00
ODY5LWJiNGQtMjU2ZTNiYTZiZTIzL2VlMTY2MjZiMmVmZmZmOTVmNDUxYjQyMjdl
OWU2NzcyMTA4MmM5YWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi1HzDANBAIAAjAHAwUAKAOsIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDmUwDQYJKoZIhvcNAQELBQADggEBAGV7
RlX9wllQNPpq5q7aWM6pgVf+98208B2gnQhXRC/L4Hk0b7sTrjVHwwFKzcAPq56W
r5nw+loGxlnq5F/SRRO91XfXoTvIWIB0faiK0ccbufeCvB4qk0B6MvGZWjf+oC4j
qn4bRI1+muOtIWr4Dov+tu3NqwrIMlA9tMtB0SAAH/14ETOGBx53Wj9J/9GTbwi8
RcV+xynMLo7r1pM1WagUNIVreXH21nC3KnhX0fpJMIQlPP01Ooty7f8W9dPY0y/W
2eogNtl6fE6BucEBeLDiFBC7mjo3E74WBIXXrqbd9CNM00G7jmTyDg/sd9hzhAyG
LnekdfrsZqg8IT2qlkg=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:35 2024 by rpki-client on console-ams.rpki-client.org