Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
File:                     0E2398E228CAF8263D654C1F35A155213634B840.cer (raw, json)
Hash identifier:          7NzA1SfHghoYiQ8CUQOPA30Su7zAkEYJ2+VgctoTvJE=
Subject key identifier:   0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       2C9666C1109E37EB6333C8A175A1AF49A2F141
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 03:31:08 +0000
Certificate not after:    Wed 04 Feb 2026 03:36:08 +0000
Subordinate resources:    AS: 26210
                          IP: 186.121.192.0/18
                          IP: 190.181.0.0/18
                          IP: 200.105.128.0 -- 200.105.223.255
                          IP: 2800:88::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:96:66:c1:10:9e:37:eb:63:33:c8:a1:75:a1:af:49:a2:f1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 03:31:08 2025 GMT
            Not After : Feb  4 03:36:08 2026 GMT
        Subject: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:6d:06:5a:13:77:96:7f:9f:d9:cd:b6:20:
                    53:7a:2f:65:c5:09:23:cf:ab:bc:25:f3:8b:e3:bd:
                    15:e9:a3:23:50:ac:e1:54:dc:8a:25:31:81:6f:67:
                    bc:20:36:49:f0:20:32:dd:e2:71:31:64:ea:b9:38:
                    aa:ed:51:7d:4c:91:2d:84:cb:3a:b6:76:66:87:63:
                    6a:87:8f:95:a9:02:b7:db:af:a3:08:7c:27:32:be:
                    fa:97:a3:4d:d3:2f:c5:4b:e0:f5:9c:c9:d8:31:f8:
                    e3:2d:ec:ca:48:9f:ea:c8:57:41:34:18:94:ae:37:
                    fb:c2:53:09:5a:d3:26:b2:d4:ee:06:f7:81:19:28:
                    a2:0b:8d:a0:bc:9c:1a:b4:ce:3b:90:d8:b5:14:da:
                    ec:00:39:c5:7d:aa:45:46:dd:96:9d:a0:36:e2:95:
                    7b:94:8f:02:1d:1d:7b:fc:21:4d:18:6f:01:97:de:
                    92:f4:22:29:4e:22:5c:a3:d3:72:c7:cc:17:6a:3a:
                    2a:45:7f:ff:14:d7:c4:10:e5:d5:0e:28:d9:9b:c7:
                    66:a1:5c:4d:3f:c9:89:c4:56:62:1f:70:4d:36:62:
                    37:af:5a:e2:6c:63:5a:ca:9d:84:09:72:8b:ab:44:
                    46:97:7c:64:2c:2f:a1:db:2c:64:f0:bc:42:d0:54:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.128.0-200.105.223.255
                IPv6:
                  2800:88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26210

    Signature Algorithm: sha256WithRSAEncryption
         19:04:9c:88:c3:22:34:2e:17:6e:70:49:61:9d:63:7c:f0:af:
         c7:61:91:85:f3:61:49:25:94:da:8b:08:6b:56:2d:72:3f:d7:
         f0:c2:4e:31:c2:2c:20:2d:4f:d1:8b:a9:c9:2e:88:3d:c1:75:
         4c:5d:51:b0:fc:dc:c0:dc:67:c8:c7:e5:61:75:da:e5:45:f2:
         1a:f5:01:88:0c:8f:d8:9a:f9:d7:df:3d:28:fa:a3:a6:b3:30:
         36:cd:96:7d:51:3a:17:a9:c2:7c:81:35:e9:72:d3:c6:cf:28:
         0b:79:e6:53:ca:1f:07:2d:67:c3:4d:6d:b5:b0:04:31:51:3d:
         67:53:64:a6:21:97:a4:ba:97:46:7b:cc:48:09:eb:00:df:86:
         f9:cc:b9:ae:3f:d8:14:1b:c3:89:de:e0:c4:10:08:1c:be:ef:
         0a:50:bf:75:d0:52:95:74:c5:cc:89:0e:a6:1b:3c:97:8f:b4:
         72:f1:a6:2f:0f:ed:4b:29:95:89:58:ee:9a:5a:13:6f:73:5e:
         32:68:f8:ae:ee:8e:1e:a1:fd:91:aa:d7:e8:da:0d:b8:7e:06:
         97:3a:f2:f6:54:b3:93:00:41:c3:66:5c:78:79:7b:b9:09:31:
         43:3d:80:37:5d:d5:38:0a:5d:67:e0:43:a5:1e:29:00:11:ee:
         37:aa:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:19:25 2025 by rpki-client