Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
File:                     D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer (raw, json)
Hash identifier:          jUJpQGR+SRuK1LVP+GlXRE99B0p4LcwG2eW4cSF/gG4=
Subject key identifier:   D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       257B8A6C9DC1FA025EF22E90EE3370861F38776F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:12:41 +0000
Certificate not after:    Tue 04 Mar 2025 18:17:41 +0000
Subordinate resources:    AS: 272115
                          IP: 2801:171::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Jun 2024 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7b:8a:6c:9d:c1:fa:02:5e:f2:2e:90:ee:33:70:86:1f:38:77:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:12:41 2024 GMT
            Not After : Mar  4 18:17:41 2025 GMT
        Subject: CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:5e:aa:00:04:1b:3e:ec:69:b7:16:84:b8:
                    7f:5f:45:a3:76:56:13:4e:f4:43:d9:4f:11:aa:55:
                    4e:75:f2:3e:c3:ec:14:03:a8:e0:e2:db:42:da:60:
                    66:7a:e0:9c:65:7c:bd:77:aa:5d:cb:7b:b7:23:82:
                    5f:c9:da:c5:cf:63:88:81:47:7c:fd:8c:f9:e8:48:
                    6f:38:c6:e4:c6:a1:08:ed:33:19:40:9a:b3:37:f9:
                    e1:fc:10:dd:90:65:4f:40:54:66:8f:ae:72:e0:e8:
                    56:06:02:e5:ae:40:a3:7b:4a:08:7e:e7:27:ed:96:
                    66:7d:68:cc:75:ff:68:b3:5a:5b:c4:a6:b2:fb:31:
                    ef:bf:36:ef:61:8e:ee:11:78:d5:bb:e5:60:72:33:
                    b4:90:0a:4c:29:46:42:c8:c8:9c:0a:ea:e9:dc:01:
                    13:30:2a:4e:4d:c0:a3:78:24:82:40:71:76:4c:34:
                    ab:aa:20:41:ff:11:61:32:a3:14:34:7e:f9:6e:75:
                    a9:ad:de:9f:21:b4:52:05:2f:4b:07:ef:47:62:59:
                    d3:bd:8e:83:f0:48:51:62:bd:1a:5d:59:b1:4d:65:
                    70:0a:55:b1:0b:14:e1:72:5c:41:32:b4:5b:1d:d5:
                    0e:07:32:0e:e2:0b:1f:f1:f2:6a:5b:21:ce:4f:c1:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272115

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:0b:22:64:b4:93:1f:3d:d5:bc:2e:e6:09:06:59:a6:45:
         b3:e1:c1:06:b4:be:30:94:40:4c:09:48:96:15:31:90:82:4f:
         00:07:e5:e4:33:5c:f0:6e:26:20:f7:32:11:22:e4:1d:97:94:
         fe:71:31:37:cb:02:e4:7e:75:4a:d7:f2:36:31:48:70:fd:ca:
         96:c0:95:57:12:34:55:35:30:af:bc:a4:83:2e:db:26:91:ad:
         d2:c2:78:ed:89:2a:e7:9c:eb:0a:62:94:0c:e9:45:a5:2e:e3:
         3c:85:86:29:28:7b:4c:05:e2:95:be:03:12:e3:f9:69:5d:80:
         18:b4:8a:dc:32:54:b9:dc:13:a1:8e:0f:9d:2d:5e:08:b2:48:
         4e:41:e0:95:97:b3:7a:6e:65:e6:05:e4:dd:06:3a:0f:69:d2:
         99:1d:ea:b1:ed:d5:05:d3:8e:ca:23:34:03:af:1c:38:0f:6d:
         4d:99:58:53:a6:1e:57:c8:58:32:c3:30:6b:8d:88:de:c4:e0:
         ee:b2:bd:a2:2b:e5:5d:94:37:81:05:9d:b3:20:ab:5c:e7:ab:
         e5:80:61:17:dc:34:36:7e:56:4e:1c:29:34:08:b8:2c:10:8b:
         52:0a:88:71:a1:5f:f9:c1:4a:51:43:99:f6:da:28:c7:f0:32:
         00:32:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----