Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer
File:                     15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer (raw, json)
Hash identifier:          ahjHvgu17iUkgfgNqpYAiBAKDK+usfPMWeGVXb/Olyk=
Subject key identifier:   15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       22788D5A39B2A50220493729AA58A3A5C5660B71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 12:35:45 +0000
Certificate not after:    Wed 04 Feb 2026 12:40:45 +0000
Subordinate resources:    AS: 271898
                          IP: 200.39.60.0/22
                          IP: 2803:4210::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:78:8d:5a:39:b2:a5:02:20:49:37:29:aa:58:a3:a5:c5:66:0b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 12:35:45 2025 GMT
            Not After : Feb  4 12:40:45 2026 GMT
        Subject: CN=15AE320A4DE21615CC1ABBF64113CDEFC2D255CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:19:32:47:58:ab:a2:83:09:52:80:bf:12:
                    dd:86:1a:05:59:f2:47:3b:bc:25:bd:f6:68:03:1e:
                    2b:b5:4f:bf:25:ac:52:43:d6:b0:3d:66:30:0b:54:
                    ba:4b:31:d4:44:7e:86:45:90:f1:97:2d:f0:ef:f3:
                    96:a9:91:f3:62:f2:bd:fb:e2:12:5f:d9:cb:52:0b:
                    e5:1e:5d:cc:05:ef:a0:78:e2:0a:dd:8a:be:b0:c3:
                    d6:6c:06:cb:ad:12:99:48:c8:d4:91:2a:54:cd:f9:
                    26:70:cd:3a:fb:82:9f:72:bd:d1:4c:78:80:4b:dd:
                    e7:c3:9e:7e:9f:86:77:f6:c0:b8:37:6e:11:7b:6e:
                    bf:6d:0d:2f:ac:ef:07:ae:ec:36:bc:72:b3:17:41:
                    9c:d5:e6:e2:74:16:75:c6:45:26:f5:b0:e9:b4:ff:
                    e8:c7:13:aa:87:8e:13:5a:cc:b8:b9:ed:07:43:65:
                    07:ec:21:fa:ed:51:02:e1:a9:b6:09:25:6b:c2:d4:
                    62:07:f2:41:65:83:d4:1e:83:2f:6d:bc:12:21:7c:
                    f4:89:e7:a2:b4:74:0b:32:d9:4d:b1:0f:92:3e:d4:
                    56:15:ca:7f:25:8a:54:1d:55:92:f1:e3:43:fa:9f:
                    3c:f9:2f:6a:86:c5:4a:31:fc:39:b8:60:cf:c6:8f:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.60.0/22
                IPv6:
                  2803:4210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271898

    Signature Algorithm: sha256WithRSAEncryption
         a4:b7:c6:20:c4:12:51:b9:8f:b1:16:a8:43:1b:0d:b7:58:ef:
         b8:d4:10:2c:5b:bd:f6:6f:b6:06:ba:ab:a5:30:09:fd:80:df:
         39:3b:4b:c5:06:e4:f3:34:7c:a0:eb:3d:e2:0b:70:00:78:57:
         79:d8:a3:2c:89:63:21:77:20:6e:8a:e8:f0:3c:9b:46:fd:75:
         25:e4:26:f4:c9:f8:be:10:1c:34:0a:85:41:5d:55:47:7b:e1:
         f2:31:2e:58:2e:9f:bc:8b:ef:fa:64:49:84:9a:50:5e:64:52:
         d9:77:31:64:9e:02:0d:0d:c8:a9:8d:f4:ad:10:6e:12:db:68:
         1a:0b:02:58:e6:1c:67:65:28:73:cb:c6:83:1b:06:f3:d4:ae:
         45:98:4b:66:98:8c:ce:68:2c:f2:dc:c5:5c:d9:7d:09:7e:72:
         ec:bc:a3:fb:f8:b0:71:22:51:ef:bd:37:44:18:08:e8:c6:1b:
         03:1a:b2:f0:a4:95:f8:6e:52:82:f8:aa:27:c9:06:59:0d:c7:
         e8:b6:5e:58:d6:ac:50:ca:b6:36:b4:e0:16:1f:bd:a2:51:ff:
         2a:8b:9b:a1:f6:df:91:01:8c:ad:7e:72:15:82:9f:3c:6b:55:
         5b:b3:c9:67:06:e1:a1:b5:d8:a4:dc:0e:56:ae:ac:be:14:8f:
         37:d3:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:24:11 2025 by rpki-client