Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
File:                     f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer (raw, json)
Hash identifier:          ZvdIJcTeKs4O2VfEx9WCs/ohb8TbP1+1cDgCOLxNRFs=
Subject key identifier:   87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01084333
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:52 +0000
Certificate not after:    Tue 25 Feb 2025 06:00:00 +0000
Subordinate resources:    AS: 14187
                          IP: 190.1.64.0/19
                          IP: 200.47.172.0/22
                          IP: 200.47.216.0/22
                          IP: 200.85.224.0/19
                          IP: 201.220.32.0/19
                          IP: 2800:1d0::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17318707 (0x1084333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:52 2017 GMT
            Not After : Feb 25 06:00:00 2025 GMT
        Subject: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:76:e8:8b:df:46:6f:a9:81:46:b2:61:95:
                    70:82:c6:e4:9e:90:35:72:b8:42:ad:7f:0f:99:4f:
                    25:2e:e2:72:00:f5:44:d7:f9:a4:b5:e4:b3:3e:20:
                    c0:8b:52:f3:05:30:07:12:e3:f5:e6:15:c4:eb:b1:
                    86:90:50:8e:6e:0b:cd:85:16:e0:d5:59:60:b6:76:
                    a0:c4:78:26:f6:d9:ff:25:54:1e:c4:77:88:01:20:
                    b6:7b:81:30:56:09:9f:42:e4:d1:58:cb:8c:e5:67:
                    b2:ed:c6:e5:ab:63:cc:b4:2d:b5:b3:bb:3f:f1:ba:
                    d5:56:fe:1b:45:eb:cf:17:b2:d4:e6:21:47:cd:7e:
                    8b:4f:c8:76:db:10:7a:f0:de:08:d0:49:34:34:bc:
                    9b:60:e9:6b:4f:60:ee:63:af:28:17:9b:e9:c9:69:
                    0b:b7:0d:a9:25:e7:e6:76:e9:fd:d1:5b:b8:e5:75:
                    e2:97:b8:09:35:79:7c:ec:44:2c:35:c2:44:03:c9:
                    05:4a:b5:68:3c:0d:cc:7e:5f:1f:66:99:4c:7d:af:
                    f5:99:ce:ba:78:90:63:a7:22:7c:ab:15:f1:84:23:
                    5f:67:8d:27:63:80:89:67:b1:6e:fa:f8:98:1b:0e:
                    c2:4a:ce:8c:7a:6f:75:9c:1c:ea:1f:28:50:e1:12:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.64.0/19
                  200.47.172.0/22
                  200.47.216.0/22
                  200.85.224.0/19
                  201.220.32.0/19
                IPv6:
                  2800:1d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14187

    Signature Algorithm: sha256WithRSAEncryption
         6c:a7:29:ac:00:7c:64:b7:49:25:62:96:b7:83:e5:df:29:c6:
         14:64:3e:ad:99:d9:c0:cf:0c:5f:73:2c:46:7d:c2:12:23:bc:
         fa:46:4d:8d:a9:20:44:61:c9:54:ad:0c:fe:79:b0:ad:f5:67:
         41:b5:f2:b8:ca:83:b7:ba:cb:9d:fa:18:60:f9:40:af:8d:21:
         db:11:bd:4e:a6:66:ca:f8:c8:96:fb:1b:0d:0a:a3:8c:44:17:
         f5:af:cc:80:d4:f3:cb:0c:02:b6:49:01:2b:d9:27:c6:87:f4:
         4c:c9:d4:73:82:bb:88:5e:39:bc:5d:51:2e:7a:a6:b8:9b:34:
         f5:48:e8:14:aa:84:ae:68:80:04:d1:4b:b5:06:d3:d2:bd:b0:
         48:a9:af:b3:9d:d5:f1:62:0f:fa:89:fd:29:15:c6:10:bc:68:
         d7:03:a2:63:65:50:7d:b7:ae:13:b0:9e:7c:cd:76:12:21:84:
         82:cf:9b:2c:75:2c:78:c0:cd:de:55:44:39:ac:fa:7d:e1:f7:
         35:39:97:d8:d9:8a:63:17:e2:58:88:80:c4:f9:20:7f:3f:23:
         b0:e7:4e:13:61:1a:44:09:96:90:e2:29:ee:e8:43:a2:99:b4:
         10:94:ee:12:ef:70:e3:48:bd:88:1d:17:7a:2d:9f:4f:a9:98:
         32:da:8b:06
-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIEAQhDMzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1MloXDTI1MDIyNTA2MDAw
MFowMzExMC8GA1UEAxMoZjBiMGZjYzE4MGJiYTg0YmY1MzE5ZjEyMjNhNWUxY2Zl
MWIxYTQ3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALUnduiL30Zv
qYFGsmGVcILG5J6QNXK4Qq1/D5lPJS7icgD1RNf5pLXksz4gwItS8wUwBxLj9eYV
xOuxhpBQjm4LzYUW4NVZYLZ2oMR4JvbZ/yVUHsR3iAEgtnuBMFYJn0Lk0VjLjOVn
su3G5atjzLQttbO7P/G61Vb+G0Xrzxey1OYhR81+i0/IdtsQevDeCNBJNDS8m2Dp
a09g7mOvKBeb6clpC7cNqSXn5nbp/dFbuOV14pe4CTV5fOxELDXCRAPJBUq1aDwN
zH5fH2aZTH2v9ZnOuniQY6cifKsV8YQjX2eNJ2OAiWexbvr4mBsOwkrOjHpvdZwc
6h8oUOES1i0CAwEAAaOCAyAwggMcMB0GA1UdDgQWBBSH+NQ1diBWaxAnjJLcNsAZ
UTb0HDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hN2NhYTRiMS0xYzZk
LTQ4YWItOTQwNS05NmI1YzE4Mjg0YzUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTdjYWE0YjEtMWM2ZC00
OGFiLTk0MDUtOTZiNWMxODI4NGM1L2YwYjBmY2MxODBiYmE4NGJmNTMxOWYxMjIz
YTVlMWNmZTFiMWE0N2UubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBb4BQAMEAsgvrAMEAsgv2AMEBchV
4AMEBcncIDANBAIAAjAHAwUAKAAB0DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI3
azANBgkqhkiG9w0BAQsFAAOCAQEAbKcprAB8ZLdJJWKWt4Pl3ynGFGQ+rZnZwM8M
X3MsRn3CEiO8+kZNjakgRGHJVK0M/nmwrfVnQbXyuMqDt7rLnfoYYPlAr40h2xG9
TqZmyvjIlvsbDQqjjEQX9a/MgNTzywwCtkkBK9knxof0TMnUc4K7iF45vF1RLnqm
uJs09UjoFKqErmiABNFLtQbT0r2wSKmvs53V8WIP+on9KRXGELxo1wOiY2VQfbeu
E7CefM12EiGEgs+bLHUseMDN3lVEOaz6feH3NTmX2NmKYxfiWIiAxPkgfz8jsOdO
E2EaRAmWkOIp7uhDopm0EJTuEu9w40i9iB0Xei2fT6mYMtqLBg==
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:35:48 2024 by rpki-client on console-fra.rpki-client.org