Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff069f48ff5a244a8c53c292f078f86ec4ec155f.cer
File:                     ff069f48ff5a244a8c53c292f078f86ec4ec155f.cer (raw, json)
Hash identifier:          jRNG/Weyl3Nd9lUBukC5tffmSzyAoR8VsO0WdgiVPvs=
Subject key identifier:   4E:80:62:09:B8:7A:6D:7E:93:D8:AE:9E:87:3B:D0:06:F3:9A:7B:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DE4A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d4fd3f04-d747-4de4-b879-11c43a089136/ff069f48ff5a244a8c53c292f078f86ec4ec155f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d4fd3f04-d747-4de4-b879-11c43a089136/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 13 May 2023 17:35:22 +0000
Certificate not after:    Sun 13 Apr 2025 16:51:30 +0000
Subordinate resources:    AS: 267898
                          IP: 45.178.196.0/22
                          IP: 2801:1c:8800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17687716 (0x10de4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 13 17:35:22 2023 GMT
            Not After : Apr 13 16:51:30 2025 GMT
        Subject: CN=ff069f48ff5a244a8c53c292f078f86ec4ec155f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:bd:f6:00:d4:fa:d1:8d:01:4d:a3:cd:ec:
                    03:1f:ec:3c:65:2c:79:de:b1:0a:a3:39:df:e6:c7:
                    dd:e7:53:21:a6:d1:28:24:3b:b7:1c:9d:9b:9c:23:
                    5d:76:72:60:aa:13:82:15:b7:f8:af:ec:72:cd:89:
                    09:c2:03:31:27:60:8c:61:26:be:0f:26:31:97:17:
                    7a:66:a9:83:c0:50:b2:6d:d7:d1:f7:42:e0:66:1b:
                    64:cd:b0:4e:52:08:18:53:09:29:65:df:54:99:16:
                    e8:db:d6:0e:93:5b:9e:0b:01:41:f5:61:f9:18:87:
                    80:72:ec:b8:87:e0:3f:70:5a:49:ee:ce:df:e7:93:
                    75:17:4e:7c:3e:39:63:c4:2b:40:a7:5f:c7:fc:d4:
                    fb:b5:57:9a:d5:df:e0:46:16:1b:86:61:0d:98:62:
                    ed:d8:ea:51:b1:8b:a8:52:b2:b8:e9:46:f7:0b:63:
                    6b:3c:10:4b:e0:61:f5:d6:54:77:87:07:dc:1b:83:
                    72:d4:90:d0:2d:fa:37:79:e6:1f:57:f8:35:a2:a1:
                    7c:69:a0:88:fc:86:4e:3d:1e:56:2c:22:3a:03:bc:
                    ea:e9:26:7e:e1:43:2e:e0:54:d3:eb:3d:f5:98:5a:
                    f3:a6:c5:93:33:56:20:68:da:a5:0b:a4:5d:5d:2f:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:80:62:09:B8:7A:6D:7E:93:D8:AE:9E:87:3B:D0:06:F3:9A:7B:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d4fd3f04-d747-4de4-b879-11c43a089136/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d4fd3f04-d747-4de4-b879-11c43a089136/ff069f48ff5a244a8c53c292f078f86ec4ec155f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.196.0/22
                IPv6:
                  2801:1c:8800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267898

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:08:25:07:fa:99:f8:94:d3:a9:27:36:e2:d7:44:c4:7b:
         a2:1f:33:dd:3e:3c:76:9a:0c:ee:0a:ca:08:58:dc:20:be:9f:
         25:6b:fe:cc:c1:3e:a8:fc:f6:59:4f:ea:6e:e7:08:11:67:0e:
         f0:62:39:fd:da:bd:f5:7b:78:45:1f:c9:24:15:7e:3b:7e:a8:
         50:1a:dd:46:74:26:23:0b:8c:13:72:1c:9e:cf:b5:b6:30:30:
         53:18:0c:71:49:04:1d:08:7c:a7:ef:59:37:9c:2b:f8:49:15:
         70:84:15:6d:29:e9:ed:26:07:4b:cd:d1:38:78:f9:b3:98:cf:
         8f:20:1d:fa:d6:87:a7:1e:0b:51:bb:a8:0d:61:f5:bf:f3:9d:
         a4:a4:ab:71:23:b3:57:05:26:6d:6f:ae:ef:2b:a0:a7:4f:c2:
         f3:f0:b3:10:e8:6f:ca:5d:88:58:1b:f8:5a:b1:e1:58:07:90:
         cb:49:0d:60:5d:b7:20:31:3b:aa:48:f6:ab:e0:a4:fb:c0:00:
         8e:e9:bb:f0:bc:7c:19:3e:e8:93:ec:82:d2:0c:54:de:81:1a:
         58:20:0c:5e:04:55:84:d3:86:9f:0e:9b:65:07:c0:dd:61:ff:
         95:28:18:84:b4:7e:90:a2:69:7b:df:08:f4:16:90:c1:67:71:
         f4:92:30:a8
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAQ3kpDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxMzE3MzUyMloXDTI1MDQxMzE2NTEz
MFowMzExMC8GA1UEAxMoZmYwNjlmNDhmZjVhMjQ0YThjNTNjMjkyZjA3OGY4NmVj
NGVjMTU1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJGQvfYA1PrR
jQFNo83sAx/sPGUsed6xCqM53+bH3edTIabRKCQ7txydm5wjXXZyYKoTghW3+K/s
cs2JCcIDMSdgjGEmvg8mMZcXemapg8BQsm3X0fdC4GYbZM2wTlIIGFMJKWXfVJkW
6NvWDpNbngsBQfVh+RiHgHLsuIfgP3BaSe7O3+eTdRdOfD45Y8QrQKdfx/zU+7VX
mtXf4EYWG4ZhDZhi7djqUbGLqFKyuOlG9wtjazwQS+Bh9dZUd4cH3BuDctSQ0C36
N3nmH1f4NaKhfGmgiPyGTj0eViwiOgO86ukmfuFDLuBU0+s99Zha86bFkzNWIGja
pQukXV0vbfECAwEAAaOCAwswggMHMB0GA1UdDgQWBBROgGIJuHptfpPYrp6HO9AG
85p7hDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kNGZkM2YwNC1kNzQ3
LTRkZTQtYjg3OS0xMWM0M2EwODkxMzYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZDRmZDNmMDQtZDc0Ny00
ZGU0LWI4NzktMTFjNDNhMDg5MTM2L2ZmMDY5ZjQ4ZmY1YTI0NGE4YzUzYzI5MmYw
NzhmODZlYzRlYzE1NWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAi2yxDAPBAIAAjAJAwcAKAEAHIgA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWejANBgkqhkiG9w0BAQsFAAOCAQEA
aNQIJQf6mfiU06knNuLXRMR7oh8z3T48dpoM7grKCFjcIL6fJWv+zME+qPz2WU/q
bucIEWcO8GI5/dq99Xt4RR/JJBV+O36oUBrdRnQmIwuME3Icns+1tjAwUxgMcUkE
HQh8p+9ZN5wr+EkVcIQVbSnp7SYHS83ROHj5s5jPjyAd+taHpx4LUbuoDWH1v/Od
pKSrcSOzVwUmbW+u7yugp0/C8/CzEOhvyl2IWBv4WrHhWAeQy0kNYF23IDE7qkj2
q+Ck+8AAjum78Lx8GT7ok+yC0gxU3oEaWCAMXgRVhNOGnw6bZQfA3WH/lSgYhLR+
kKJpe98I9BaQwWdx9JIwqA==
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:46 2024 by rpki-client on console-fra.rpki-client.org