Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer
File:                     0883966BE5B6856A564CAC730936B0CC5143EE6A.cer (raw, json)
Hash identifier:          fiHyKR9NzbdCDnudkkMaokH7pd68NqzJ/MVRA4RyTqQ=
Subject key identifier:   08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       52CEA04C043F5E7D47B823B6D557C89A5401DD18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Sep 2024 15:00:01 +0000
Certificate not after:    Tue 02 Sep 2025 15:05:01 +0000
Subordinate resources:    AS: 273870
                          IP: 2803:1d50::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ce:a0:4c:04:3f:5e:7d:47:b8:23:b6:d5:57:c8:9a:54:01:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Sep  3 15:00:01 2024 GMT
            Not After : Sep  2 15:05:01 2025 GMT
        Subject: CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:42:66:89:3b:06:d5:42:ed:ab:27:d1:14:
                    36:80:65:c5:6f:ad:0e:5d:33:5b:14:0a:6f:1d:f8:
                    78:9f:ec:9f:e0:37:40:68:09:da:4b:ee:2d:02:32:
                    70:75:a5:53:1d:78:5a:63:96:3c:80:9c:3b:fa:0c:
                    7e:9b:39:2e:38:dc:46:75:50:86:45:f9:2e:16:89:
                    be:dd:b4:eb:90:06:f1:3f:c1:57:a5:6a:a6:0c:a0:
                    29:39:34:22:bf:08:36:2f:38:b7:48:15:20:68:63:
                    9f:1a:03:4e:bd:0f:72:2a:9d:ab:1f:6a:bd:f4:4d:
                    83:fe:b7:d9:df:af:0a:11:8c:28:3a:1a:73:18:45:
                    57:36:5d:ba:19:bd:d5:fe:c4:c1:4c:d2:88:f6:5b:
                    aa:d5:30:0f:61:e9:e6:3a:54:17:4c:48:e2:c2:e3:
                    ca:33:8e:f5:f5:3b:40:b6:fe:a5:56:40:1f:fd:01:
                    55:e8:81:c5:ec:c5:c4:da:0b:11:0b:17:fb:0e:23:
                    e9:b9:f7:94:68:68:83:ba:6b:82:e3:49:ab:11:38:
                    b4:09:7f:17:ed:09:f3:0f:d0:1d:e6:fe:be:79:4d:
                    82:7c:33:40:9b:52:ec:42:9e:d8:96:8b:a4:8a:5f:
                    5e:29:1e:25:4b:fc:09:6c:b8:42:e6:45:09:0a:24:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273870

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:7f:1e:c5:a7:47:35:0d:c4:1b:24:ae:ab:c5:3b:c5:9f:
         b5:b2:a9:db:10:7f:52:98:50:1a:a6:df:4a:e3:e6:d0:0e:62:
         31:d8:7b:5d:bf:ac:85:09:32:08:66:37:01:fc:37:b1:04:a6:
         f8:7b:1a:e8:12:a1:01:a5:5d:ca:a8:63:79:fe:bb:89:33:ab:
         c8:94:6f:65:38:15:21:2e:82:af:96:b2:55:33:e8:8e:d0:74:
         60:7c:a6:d5:e0:5f:4c:01:b9:55:ea:4e:d9:15:74:b8:10:4a:
         02:40:3c:19:f5:37:8a:bb:96:99:7d:f1:75:c1:d1:ed:dc:47:
         11:49:e8:5e:46:9b:0c:d0:24:f8:4b:ef:cf:50:a6:1e:f3:44:
         59:89:97:dc:73:56:55:f4:0c:0b:4c:a1:e6:ad:1b:cb:d9:1e:
         11:2d:cf:77:22:bc:20:0f:61:3e:5e:3a:ee:da:97:b9:7a:86:
         3a:d2:32:a9:d0:7d:4c:8a:b6:21:8c:09:62:8a:89:d6:82:2b:
         40:46:9e:1c:8f:86:06:43:cb:db:02:c5:59:79:e6:9f:ed:37:
         93:2f:60:9a:94:5b:90:b8:f2:03:84:0d:e9:51:57:cd:2e:31:
         ac:c4:6f:47:8c:38:62:e5:f4:84:bc:da:9e:bf:63:a7:bc:7c:
         85:88:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----