Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
File:                     2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer (raw, json)
Hash identifier:          IptFUfrjCxmvf5rKqwmGVSGp6I9ue0qD5ff/Z+mj8MU=
Subject key identifier:   20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       6243909EF416616AB6B963716695881E07D684FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:39:12 +0000
Certificate not after:    Tue 04 Mar 2025 17:44:12 +0000
Subordinate resources:    AS: 22833
                          IP: 179.5.0.0/16
                          IP: 190.62.0.0/16
                          IP: 190.86.0.0/15
                          IP: 201.247.0.0/16
                          IP: 2800:b20::/30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 21:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:43:90:9e:f4:16:61:6a:b6:b9:63:71:66:95:88:1e:07:d6:84:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:39:12 2024 GMT
            Not After : Mar  4 17:44:12 2025 GMT
        Subject: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:92:d5:5f:54:f1:6f:63:2a:49:7e:81:fd:
                    0f:68:52:af:ff:0d:70:b2:a5:04:54:2c:9e:e0:5c:
                    3d:7f:3d:91:23:1e:f9:3b:ef:d7:ea:7e:56:bb:49:
                    b6:41:e5:4e:13:1b:c5:9d:ed:31:c9:6f:11:22:eb:
                    9d:c8:bd:26:2a:1b:e1:b5:2b:e7:a5:dc:b5:ae:e1:
                    17:f3:e1:5b:a5:15:82:d7:90:8f:49:a1:8e:7a:fe:
                    5d:f9:ec:10:11:8f:0f:d8:03:02:a4:54:5e:0c:72:
                    66:53:dd:4e:bf:9b:48:f2:93:49:f7:b5:fd:6d:80:
                    95:84:b2:29:90:7c:51:06:79:40:b8:52:ed:64:51:
                    c8:20:71:dc:b9:1b:b9:f5:a5:f1:10:88:8e:2a:16:
                    e2:75:0d:a2:32:12:a5:a6:19:0b:66:72:7c:15:f4:
                    81:17:b6:70:56:d4:c9:3e:a0:25:53:c6:41:2d:83:
                    c8:56:82:89:79:13:b3:53:51:9e:0b:f1:b0:31:53:
                    80:22:2c:97:39:ab:5c:a5:58:2f:c9:55:a4:14:78:
                    02:d0:94:72:f9:b4:ce:b3:db:f5:89:05:2f:a7:a8:
                    a5:a0:03:bc:6f:78:1e:ab:2d:8f:15:0e:eb:61:af:
                    f9:a4:c1:ab:df:0f:86:ed:f4:dd:57:21:21:66:a1:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16
                  190.62.0.0/16
                  190.86.0.0/15
                  201.247.0.0/16
                IPv6:
                  2800:b20::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22833

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:d3:78:38:06:81:c6:22:40:e0:9a:16:64:ef:81:e7:6b:
         c1:92:1b:fb:a2:9e:79:ec:1c:6a:ae:dd:00:43:67:3d:e0:be:
         5b:26:9c:f2:95:43:52:f6:c1:75:37:0e:9b:16:f2:45:9f:62:
         d6:b8:ff:10:91:75:3b:cc:61:db:e5:74:cc:42:e8:e4:ac:23:
         e9:70:e6:c7:06:ea:4d:4a:24:a1:30:a4:93:b4:03:5b:eb:44:
         81:1e:4c:09:b7:36:47:9e:ad:c5:2b:ec:bf:54:4d:45:a9:37:
         35:a7:d8:45:68:2a:51:ee:31:bb:11:f1:c4:5d:54:98:29:a5:
         1e:58:d5:da:c8:29:72:14:ee:0a:84:20:68:67:ec:b8:10:59:
         d1:58:fa:ea:65:49:46:d9:d7:54:b8:f8:a9:29:dd:ea:40:61:
         55:4a:92:15:34:24:e7:3f:44:04:fe:c0:83:6e:aa:48:5e:86:
         1b:da:8a:48:7d:0b:5f:04:01:d7:64:4d:74:d0:1f:02:68:c8:
         4e:56:34:f6:b4:12:91:0b:97:64:b6:30:8b:57:f8:b9:67:08:
         3a:bd:40:bc:eb:5e:07:93:22:65:af:2e:e0:58:92:24:06:f7:
         00:37:1c:c1:a7:3b:35:61:32:7c:75:ec:49:ee:9b:4f:26:16:
         58:73:98:92
-----BEGIN CERTIFICATE-----
MIIGsjCCBZqgAwIBAgIUYkOQnvQWYWq2uWNxZpWIHgfWhP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMDUxNzM5MTJaFw0yNTAzMDQxNzQ0MTJaMDMxMTAvBgNV
BAMTKDIwMTU3ODlFMEE5QjEyRUUxQTgyQ0I4NUE1OTQ1REQ5QjMxODU3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+5LVX1Txb2MqSX6B/Q9oUq//
DXCypQRULJ7gXD1/PZEjHvk779fqfla7SbZB5U4TG8Wd7THJbxEi653IvSYqG+G1
K+el3LWu4Rfz4VulFYLXkI9JoY56/l357BARjw/YAwKkVF4McmZT3U6/m0jyk0n3
tf1tgJWEsimQfFEGeUC4Uu1kUcggcdy5G7n1pfEQiI4qFuJ1DaIyEqWmGQtmcnwV
9IEXtnBW1Mk+oCVTxkEtg8hWgol5E7NTUZ4L8bAxU4AiLJc5q1ylWC/JVaQUeALQ
lHL5tM6z2/WJBS+nqKWgA7xveB6rLY8VDuthr/mkwavfD4bt9N1XISFmoSUFAgMB
AAGjggO8MIIDuDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgFXieCpsS7hqC
y4WllF3ZsxhXJTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjIxMDU4RDE3OUNBNUMxQzA1NkMxQkY3
QjgyQzkyN0E1QUZDQjFCMTkwOTFBRDVDQzdERTAxQTREMkJBMzNCNS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy82MjEwNThEMTc5Q0E1QzFDMDU2QzFCRjdCODJDOTI3QTVBRkNCMUIxOTA5
MUFENUNDN0RFMDFBNEQyQkEzM0I1LzAvMjAxNTc4OUUwQTlCMTJFRTFBODJDQjg1
QTU5NDVERDlCMzE4NTcyNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwMAswUDAwC+PgMD
Ab5WAwMAyfcwDQQCAAIwBwMFAigACyAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
WTEwDQYJKoZIhvcNAQELBQADggEBAIv+03g4BoHGIkDgmhZk74Hna8GSG/uinnns
HGqu3QBDZz3gvlsmnPKVQ1L2wXU3DpsW8kWfYta4/xCRdTvMYdvldMxC6OSsI+lw
5scG6k1KJKEwpJO0A1vrRIEeTAm3NkeercUr7L9UTUWpNzWn2EVoKlHuMbsR8cRd
VJgppR5Y1drIKXIU7gqEIGhn7LgQWdFY+uplSUbZ11S4+Kkp3epAYVVKkhU0JOc/
RAT+wINuqkhehhvaikh9C18EAddkTXTQHwJoyE5WNPa0EpELl2S2MItX+LlnCDq9
QLzrXgeTImWvLuBYkiQG9wA3HMGnOzVhMnx17Enum08mFlhzmJI=
-----END CERTIFICATE-----
Generated at Mon Jun 10 10:25:34 2024 by rpki-client on console-fra.rpki-client.org