Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer
File:                     1821D3EAA1F96B6844A88CCD90D1BC327F454A72.cer (raw, json)
Hash identifier:          8GYjqlnrIIVLnXWWFIzd27oQDw85/cuF2AdDch66UCY=
Subject key identifier:   18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       4142D1D2A0EC8F713996CA800B005625E339694D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:59:42 +0000
Certificate not after:    Tue 04 Mar 2025 18:04:42 +0000
Subordinate resources:    AS: 272970
                          IP: 2803:a590::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:d1:d2:a0:ec:8f:71:39:96:ca:80:0b:00:56:25:e3:39:69:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:59:42 2024 GMT
            Not After : Mar  4 18:04:42 2025 GMT
        Subject: CN=1821D3EAA1F96B6844A88CCD90D1BC327F454A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:e5:03:6d:5f:64:5b:e5:11:63:2c:86:5f:
                    39:b8:95:31:d0:21:a6:45:d5:ba:a4:ac:fb:a9:82:
                    b2:3e:71:23:d3:7f:a0:57:a9:73:4a:96:69:40:fa:
                    76:f8:d4:09:e8:af:8d:81:db:9c:1b:37:a3:fb:bc:
                    02:bc:78:02:c3:22:80:52:cd:b0:4e:d1:f4:24:2e:
                    99:0b:60:77:ce:98:3c:12:47:9e:66:dc:f5:c5:d5:
                    85:f0:5e:0c:24:b8:a0:9d:b9:ca:7d:6e:24:ef:8f:
                    0e:4b:8f:08:a5:88:2d:9b:25:67:76:9e:5d:5d:74:
                    de:b1:93:e7:78:af:f9:a8:d6:ee:b7:0b:3f:e1:46:
                    e4:dc:9f:df:77:dc:4c:66:3e:13:68:d7:2e:e9:9e:
                    cd:4a:09:16:e5:c6:f5:f6:f9:1c:b5:be:c6:f3:82:
                    35:09:a8:59:0f:c6:82:6c:e1:fa:b6:a6:7b:41:56:
                    78:5b:7b:ac:a1:64:4b:57:fb:38:65:62:dd:29:ae:
                    a6:42:d9:44:44:1b:55:a0:f7:c3:27:d3:b2:fa:82:
                    69:c1:ac:73:55:b7:bb:8c:f6:ec:bb:f3:d5:b1:ca:
                    07:22:31:a6:bf:f3:04:ce:2d:c6:5b:26:65:30:64:
                    eb:a1:41:18:3f:b2:f4:1a:69:70:82:3b:19:2f:cc:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:21:D3:EA:A1:F9:6B:68:44:A8:8C:CD:90:D1:BC:32:7F:45:4A:72
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7D32AC0A6E29C38CCC9D5374EC6447FA98FDC0BFFEDF7673671A0BF6CAA226/0/1821D3EAA1F96B6844A88CCD90D1BC327F454A72.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272970

    Signature Algorithm: sha256WithRSAEncryption
         e1:b0:4f:a3:7a:88:30:41:41:68:8c:ed:61:58:24:56:d0:34:
         63:2f:16:fb:cb:d2:e3:bf:4b:65:86:c3:0e:c2:77:99:e4:6f:
         47:28:7d:32:c5:be:eb:45:67:93:46:c4:c4:f3:d4:cf:6e:1e:
         2b:41:1b:33:d5:81:3c:c1:b2:e7:5d:d6:7d:7e:33:5d:8d:db:
         d1:6a:89:12:ac:e9:75:78:be:c4:9b:b5:4e:cc:6d:7b:02:e6:
         b8:e0:03:b4:fe:8e:87:b4:a5:47:1b:7f:40:2d:1c:29:62:87:
         df:2b:46:cb:28:14:1b:cb:f8:a2:6d:9d:b6:fc:b2:b7:9c:67:
         c1:4e:e5:43:8a:0f:6e:40:87:77:d7:89:63:90:a1:7c:9a:30:
         ed:bb:0d:5a:4f:be:95:29:e8:99:b3:b7:6d:b1:1e:81:65:74:
         dd:dd:61:4e:d4:63:29:fb:18:34:8f:f3:df:da:3a:29:02:07:
         cf:0c:c6:cc:74:7b:2c:9e:c9:03:1f:d8:c8:ab:8e:d5:b8:38:
         96:fd:8a:bf:cf:21:fd:52:f8:ac:ce:fc:66:f3:47:63:bb:12:
         3b:fb:fc:f1:e2:5f:2d:e0:3a:fe:90:2a:45:6d:42:30:48:3e:
         c9:80:44:30:d1:89:14:84:ed:9b:b0:fb:ad:dc:1c:bb:eb:b2:
         a9:f5:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----