Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer
File:                     13B657FF6E17844C871CDBE69EB5DF87796F1536.cer (raw, json)
Hash identifier:          PFzUQJ9jtp2cRxFuMp0xnek8eWzEyzTMFmVRQKffzBc=
Subject key identifier:   13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       72683A10175AE4B44202B1A3EB80A0268B8E6606
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 22:36:08 +0000
Certificate not after:    Wed 04 Feb 2026 22:41:08 +0000
Subordinate resources:    AS: 269728
                          IP: 45.180.140.0/22
                          IP: 2803:1160::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:68:3a:10:17:5a:e4:b4:42:02:b1:a3:eb:80:a0:26:8b:8e:66:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 22:36:08 2025 GMT
            Not After : Feb  4 22:41:08 2026 GMT
        Subject: CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:f2:e6:a5:87:71:79:c0:31:f8:4f:60:1e:
                    e5:d2:15:65:0b:3a:cd:d5:db:23:c7:ff:89:4d:90:
                    37:a3:e9:65:1a:c6:9b:7d:c4:58:8d:c2:d0:ff:fc:
                    47:fe:dc:af:87:f8:d8:4d:26:09:3b:58:6f:c8:0c:
                    7e:a1:77:22:37:c5:35:2f:04:b5:b1:67:8a:b1:64:
                    71:4c:3f:72:6a:e6:92:d9:85:05:90:13:9e:31:0c:
                    8d:60:93:9a:16:b9:4c:c7:ec:8e:4b:6d:44:dc:b6:
                    81:b1:c7:59:70:dd:f7:e9:80:9f:22:b1:23:1f:1d:
                    90:6c:cb:2d:d3:88:b8:99:8a:a4:97:4f:00:87:29:
                    7a:78:34:de:ef:fd:c3:38:7a:66:41:74:9e:42:c3:
                    37:d2:7c:42:b8:2c:ed:c3:1b:63:3f:9a:f1:bd:27:
                    64:70:92:7c:50:24:76:a6:43:c3:90:9e:fb:9f:9d:
                    8c:bc:70:4e:8f:62:24:d7:8d:1c:4f:81:06:fe:bb:
                    95:ac:54:95:77:a2:90:46:3a:86:ed:26:d2:df:82:
                    a7:73:20:7a:e1:af:68:d9:f3:ec:8d:75:1d:c5:73:
                    0c:97:40:30:68:be:ce:ce:a6:1a:c3:eb:d9:7f:ed:
                    07:4f:f7:cd:9c:4f:5e:39:cf:a1:e2:ea:f0:74:37:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.140.0/22
                IPv6:
                  2803:1160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269728

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:bb:93:ab:2b:b6:62:ba:df:b6:f2:3e:63:db:d0:76:c2:
         d2:ed:ad:ea:38:70:b1:01:c6:74:c0:3f:1d:b1:f6:47:d4:e5:
         24:6a:6b:a8:84:a6:6c:8f:5f:14:18:e3:08:49:e1:f3:d0:2d:
         61:54:5f:ab:85:79:04:0e:d6:cb:4f:86:64:12:25:ea:2b:97:
         a1:55:f3:5d:b7:6c:a9:b4:65:33:10:fe:75:bd:d1:bf:0a:d3:
         4b:73:9f:75:75:64:f6:f3:f5:a0:42:69:3f:7a:70:84:a9:d7:
         11:1b:ca:cd:52:3a:fc:d7:4e:ff:d7:35:95:55:18:42:9b:8d:
         18:c6:fb:e8:36:1a:64:3d:a5:66:9c:d7:d0:54:78:b3:24:6e:
         79:f5:89:68:34:51:83:65:77:9b:e0:a2:fa:3a:0c:2c:18:76:
         1e:c8:c5:90:e2:41:a5:3a:5a:d1:2f:cc:c9:0e:fd:1d:84:43:
         30:e3:35:4d:c0:3c:83:d4:4f:5a:0a:bb:45:82:8c:f0:56:26:
         2a:ba:4b:e1:0d:12:98:e9:6e:bf:61:26:2b:59:2f:e9:6d:24:
         73:43:e5:7a:9f:6f:07:6c:f3:cd:75:34:1e:15:81:52:05:0a:
         40:47:c0:68:70:8c:49:be:a5:af:5f:be:61:79:2d:2f:93:af:
         00:d8:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:50 2025 by rpki-client