Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1909866B39096A8CF30007831196809049603B39.cer
File:                     1909866B39096A8CF30007831196809049603B39.cer (raw, json)
Hash identifier:          3oE4zsorGbukpf5MarPUtji8gKv1VjZDc1T1csAjMIY=
Subject key identifier:   19:09:86:6B:39:09:6A:8C:F3:00:07:83:11:96:80:90:49:60:3B:39
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       3B5E2D4D002511A8054E5D8CB391B32609FAD7BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/068283BAC57B18C7F69A467090852B3E644D3A902595A553F35B4407C4527B83/0/1909866B39096A8CF30007831196809049603B39.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/068283BAC57B18C7F69A467090852B3E644D3A902595A553F35B4407C4527B83/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:53:01 +0000
Certificate not after:    Tue 04 Mar 2025 17:58:01 +0000
Subordinate resources:    AS: 271975
                          IP: 2803:1e10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Jun 2024 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:2d:4d:00:25:11:a8:05:4e:5d:8c:b3:91:b3:26:09:fa:d7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:53:01 2024 GMT
            Not After : Mar  4 17:58:01 2025 GMT
        Subject: CN=1909866B39096A8CF30007831196809049603B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:47:ce:b6:77:01:df:82:ef:2f:3e:d8:89:
                    2b:2d:00:96:76:9b:9c:5f:2a:fa:da:63:b2:dc:9f:
                    42:25:b7:d2:47:b9:44:58:95:d7:9a:b7:a0:d0:3c:
                    7f:1a:61:c8:17:36:ed:49:0a:49:98:34:1e:cb:55:
                    6c:90:1f:2a:4f:83:16:07:25:ff:fb:ef:8f:2e:aa:
                    21:34:59:bc:ef:cb:f4:77:64:9f:d2:52:67:e4:8c:
                    ad:10:55:4b:6c:2b:77:4a:31:40:32:7f:0c:fc:50:
                    50:37:2a:5d:49:17:23:b4:49:7a:6a:dd:2b:c5:d5:
                    ba:d5:30:0c:8d:d5:fb:d4:e7:ac:54:5b:19:ce:99:
                    b8:6c:22:b9:fa:4d:26:d2:f3:14:22:ab:73:06:a9:
                    7b:1c:55:ae:08:e1:ac:fb:d8:42:a2:28:69:fc:0e:
                    82:01:ea:77:5b:09:81:55:85:0e:65:a6:42:93:d9:
                    53:b4:4b:51:9b:c7:f9:1a:0f:c5:93:c9:b0:6e:a2:
                    b9:54:4b:be:d2:e8:ea:eb:17:c8:42:22:28:8c:3c:
                    e2:1b:0c:61:73:11:dc:f7:86:2c:22:54:60:40:dc:
                    49:30:35:b8:32:93:9e:ec:f5:0b:dc:5b:88:cd:3b:
                    ef:62:7b:16:85:99:9a:f3:30:c9:36:80:30:84:37:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:09:86:6B:39:09:6A:8C:F3:00:07:83:11:96:80:90:49:60:3B:39
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/068283BAC57B18C7F69A467090852B3E644D3A902595A553F35B4407C4527B83/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/068283BAC57B18C7F69A467090852B3E644D3A902595A553F35B4407C4527B83/0/1909866B39096A8CF30007831196809049603B39.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271975

    Signature Algorithm: sha256WithRSAEncryption
         03:81:b5:8f:98:fc:fe:b9:c9:37:b3:e0:51:f7:58:ec:51:9e:
         cb:3f:3c:b8:98:00:ca:35:16:15:91:31:57:33:35:33:79:99:
         1f:6f:ca:7a:e3:b1:66:a4:9f:db:66:f7:9c:f2:24:fa:16:e6:
         c3:99:e5:bd:9b:e7:31:4b:55:0e:92:15:b0:c5:11:ef:85:d4:
         63:53:3f:5d:ad:7f:5d:e8:e4:61:5a:53:c5:f7:5c:ab:de:47:
         e4:a1:10:48:e5:d5:8f:2f:e1:d9:d5:d3:d2:b6:a2:f0:48:0b:
         0a:00:70:43:f4:2b:26:84:46:e5:a9:fb:b4:e1:25:a6:74:89:
         8d:df:5e:80:6a:69:ff:18:82:0a:00:10:c6:cb:56:3c:d5:b6:
         09:b9:03:1d:e1:89:ca:01:b8:28:4c:b1:70:06:c9:1c:b7:9f:
         f1:73:00:dc:fe:36:91:ea:4a:f9:dd:a4:08:a2:5c:d0:9d:29:
         7d:ac:22:5e:0b:6e:cd:85:cb:2a:0b:a5:34:5b:d7:da:ea:c6:
         23:a9:61:72:60:f1:45:f2:0d:9e:a6:2e:cd:41:f7:8d:b5:de:
         54:ba:ba:28:ab:71:cb:31:d2:42:94:fc:db:44:18:96:18:32:
         e1:f8:d5:f9:f9:a5:48:af:1d:f0:5e:61:25:a8:ff:1e:a8:fa:
         12:cf:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----