Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
File:                     AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer (raw, json)
Hash identifier:          RnzyHba1Bil/UXKeO6mm5lhI9eq9YjUcFuB238vxxgc=
Subject key identifier:   AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       06B2AFBEA090365A03BE9AA7E5A77B835D81F67B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 14:15:00 +0000
Certificate not after:    Mon 17 Mar 2025 14:20:00 +0000
Subordinate resources:    AS: 262172
                          IP: 186.26.112.0/20
                          IP: 186.151.94.0/24
                          IP: 186.151.96.0/20
                          IP: 190.110.228.0/24
                          IP: 190.148.85.0/24
                          IP: 190.149.134.0/24
                          IP: 190.149.152.0/24
                          IP: 200.119.151.0 -- 200.119.153.255
                          IP: 2803:f340::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Jun 2024 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b2:af:be:a0:90:36:5a:03:be:9a:a7:e5:a7:7b:83:5d:81:f6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar 18 14:15:00 2024 GMT
            Not After : Mar 17 14:20:00 2025 GMT
        Subject: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:3d:06:e0:a5:dd:99:59:77:8a:2e:a2:d1:
                    e0:ea:d8:b6:b5:4a:0c:1f:e4:48:a7:f5:1b:89:7f:
                    0c:05:57:e0:4d:db:a6:ce:80:a4:9d:4f:fe:c6:ca:
                    dd:b7:9c:6d:bf:ef:5c:2e:a2:87:57:e2:35:51:c6:
                    99:4d:84:f6:05:96:4b:a7:73:bd:fb:2c:ca:8c:a0:
                    57:f9:a5:80:cc:84:87:e6:81:b5:12:c8:24:2b:35:
                    3a:0e:82:7e:ee:4c:9c:74:ef:51:0d:d1:f9:7d:ca:
                    50:f6:29:fa:e6:e4:e8:55:27:bd:af:6e:f1:75:fd:
                    e7:1d:6b:2c:f2:a9:2f:aa:c4:8c:24:d4:20:73:d6:
                    e7:d6:85:24:b9:1f:1e:62:e3:1c:17:25:cb:d5:bd:
                    78:28:3d:41:0d:0a:76:8b:b5:35:ff:ba:71:fa:78:
                    7d:df:29:96:0e:ea:27:96:86:85:4e:70:06:dc:0c:
                    3a:03:dd:08:74:38:aa:d9:a9:dd:ec:25:95:de:4e:
                    ae:3b:05:46:ae:65:b9:03:c5:a2:26:87:17:34:c9:
                    f4:12:dd:56:4a:6f:83:5e:e1:9d:a4:5f:4a:03:5e:
                    fc:5d:d2:bb:44:11:e6:42:3f:83:30:9a:63:52:fd:
                    00:c2:41:c6:84:1e:d2:c0:76:6d:04:f0:aa:f6:95:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.112.0/20
                  186.151.94.0/24
                  186.151.96.0/20
                  190.110.228.0/24
                  190.148.85.0/24
                  190.149.134.0/24
                  190.149.152.0/24
                  200.119.151.0-200.119.153.255
                IPv6:
                  2803:f340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262172

    Signature Algorithm: sha256WithRSAEncryption
         40:54:c6:18:16:57:ae:4c:bd:0c:cb:c9:49:64:4c:e3:3e:d4:
         fb:43:3b:50:cb:95:37:ea:a6:9a:1a:72:2d:ae:9b:50:4b:a1:
         5b:08:c8:a7:f3:79:d7:17:9d:21:84:09:07:c1:7c:79:2c:0b:
         ea:cd:b8:df:e0:5b:96:2a:5d:df:9a:2a:bf:59:71:d3:56:48:
         26:e9:35:64:d4:fc:7d:a6:48:00:e8:1e:55:fb:50:e6:6d:1f:
         81:a6:5b:32:1d:ff:a3:d2:21:e2:c3:9b:5b:69:ea:1d:47:27:
         35:dd:84:1e:05:64:3c:a7:3e:8c:2a:50:9b:8e:ab:ad:38:34:
         d6:4e:2a:7d:64:2e:54:f9:71:56:cf:2f:69:6a:2e:d9:73:4a:
         ec:84:94:d3:7d:39:69:c6:ec:89:0e:c1:e6:3f:17:84:21:3d:
         4c:f0:2b:6d:f1:e1:ac:05:ef:fd:1e:79:57:3c:90:0b:67:c3:
         82:f7:cd:bc:7f:9d:e8:73:03:5e:58:8f:14:52:2e:08:c9:7c:
         c4:1b:6b:05:66:31:d0:4e:a5:e1:bd:c8:69:d4:a2:64:0b:4d:
         d3:4e:f4:18:0b:1e:08:7d:c2:d5:c6:61:35:05:55:6b:d5:50:
         37:0d:33:8e:c1:8a:32:2d:57:47:e5:15:cd:cd:11:1b:9a:cf:
         60:22:1d:bb
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgIUBrKvvqCQNloDvpqn5ad7g12B9nswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMTgxNDE1MDBaFw0yNTAzMTcxNDIwMDBaMDMxMTAvBgNV
BAMTKEFEMzE2QkM1MEUxODZCQzRENkVFRDhCMUE3MUUyRjdGQUE1Rjk1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJj0G4KXdmVl3ii6i0eDq2La1
Sgwf5Ein9RuJfwwFV+BN26bOgKSdT/7Gyt23nG2/71wuoodX4jVRxplNhPYFlkun
c737LMqMoFf5pYDMhIfmgbUSyCQrNToOgn7uTJx071EN0fl9ylD2Kfrm5OhVJ72v
bvF1/ecdayzyqS+qxIwk1CBz1ufWhSS5Hx5i4xwXJcvVvXgoPUENCnaLtTX/unH6
eH3fKZYO6ieWhoVOcAbcDDoD3Qh0OKrZqd3sJZXeTq47BUauZbkDxaImhxc0yfQS
3VZKb4Ne4Z2kX0oDXvxd0rtEEeZCP4MwmmNS/QDCQcaEHtLAdm0E8Kr2lY9jAgMB
AAGjggPhMIID3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStMWvFDhhrxNbu
2LGnHi9/ql+VPTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjQwQUFERDlDM0EyQ0I3QURCOTBBRkUy
MzVBNjA5MkIyMzgyNEQ1RUYwMDUwM0YzMEI2NTE4N0IyQjIyRjMyMS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9GNDBBQUREOUMzQTJDQjdBREI5MEFGRTIzNUE2MDkyQjIzODI0RDVFRjAw
NTAzRjMwQjY1MTg3QjJCMjJGMzIxLzAvQUQzMTZCQzUwRTE4NkJDNEQ2RUVEOEIx
QTcxRTJGN0ZBQTVGOTUzRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQEuhpwAwQAupde
AwQEupdgAwQAvm7kAwQAvpRVAwQAvpWGAwQAvpWYMAwDBADId5cDBAHId5gwDQQC
AAIwBwMFACgD80AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAAcMA0GCSqGSIb3
DQEBCwUAA4IBAQBAVMYYFleuTL0My8lJZEzjPtT7QztQy5U36qaaGnItrptQS6Fb
CMin83nXF50hhAkHwXx5LAvqzbjf4FuWKl3fmiq/WXHTVkgm6TVk1Px9pkgA6B5V
+1DmbR+BplsyHf+j0iHiw5tbaeodRyc13YQeBWQ8pz6MKlCbjqutODTWTip9ZC5U
+XFWzy9pai7Zc0rshJTTfTlpxuyJDsHmPxeEIT1M8Ctt8eGsBe/9HnlXPJALZ8OC
9828f53ocwNeWI8UUi4IyXzEG2sFZjHQTqXhvchp1KJkC03TTvQYCx4IfcLVxmE1
BVVr1VA3DTOOwYoyLVdH5RXNzREbms9gIh27
-----END CERTIFICATE-----
Generated at Sun Jun 2 11:53:57 2024 by rpki-client on console-fra.rpki-client.org