Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
File:                     220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer (raw, json)
Hash identifier:          KRddsf8OO8eD0CHQXk85gNLsWYujN7bVfVPKYRD5pCw=
Subject key identifier:   22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       68F92E886C70AD2B4D33AF342F67BFA443EC3624
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 11:35:20 +0000
Certificate not after:    Wed 04 Feb 2026 11:40:20 +0000
Subordinate resources:    AS: 262234
                          IP: 131.108.232.0/22
                          IP: 170.245.56.0/22
                          IP: 179.49.112.0/21
                          IP: 2803:db00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f9:2e:88:6c:70:ad:2b:4d:33:af:34:2f:67:bf:a4:43:ec:36:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 11:35:20 2025 GMT
            Not After : Feb  4 11:40:20 2026 GMT
        Subject: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:50:c9:d9:db:3e:cc:58:1a:35:6b:32:58:
                    2e:7b:b5:09:42:b9:a8:cd:9b:66:64:df:ad:51:03:
                    93:2a:74:72:03:59:d9:18:5f:ae:fb:5f:1e:74:01:
                    b1:06:23:92:1d:50:35:4b:20:b4:6e:3f:47:a5:d5:
                    c0:3a:ee:64:50:f8:ad:8f:fb:e8:85:99:f4:7d:ef:
                    3d:6a:85:4c:3e:af:1b:52:8f:c4:90:e6:cb:a7:c6:
                    e8:e8:65:c3:77:d5:30:12:04:17:cb:f1:67:04:2f:
                    6c:fe:3d:af:42:f4:e1:d3:47:bb:f4:12:4b:80:66:
                    53:7a:86:ff:db:7e:0b:b4:67:8b:6a:f2:52:45:88:
                    77:14:b1:b8:2a:38:6b:e4:89:23:80:f5:ca:fb:d3:
                    72:85:37:35:7f:ef:26:c7:37:e4:22:9b:73:a0:7c:
                    aa:c9:7c:55:40:25:3a:e8:83:28:9d:bb:2b:b0:d0:
                    0c:8d:0c:2f:25:e6:ec:75:0d:a8:e7:3c:3f:ae:0d:
                    57:7e:92:5c:5d:cf:b2:31:c2:5a:f0:99:67:21:e4:
                    b0:09:3f:05:2d:56:45:49:86:b7:a4:5d:14:88:f9:
                    3f:34:55:bb:45:51:cc:78:fa:de:8b:40:0d:1c:f5:
                    63:1e:15:a7:8d:73:9c:6b:94:4c:1d:dd:c9:07:38:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.232.0/22
                  170.245.56.0/22
                  179.49.112.0/21
                IPv6:
                  2803:db00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262234

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:da:f3:03:77:20:7d:a5:c4:23:40:eb:2b:3b:b7:14:16:
         fb:2d:14:d8:4e:11:b6:cb:71:df:f9:b0:f0:54:b8:c0:60:57:
         02:26:a3:d9:52:45:71:69:ca:12:b3:11:22:37:dc:90:4f:9f:
         e3:7a:23:92:6b:85:26:52:d6:9b:c1:e4:0b:b2:7d:86:fa:22:
         01:36:00:a7:ac:4a:f2:34:86:a7:38:a3:cd:d8:7f:fa:ed:c4:
         15:b1:42:df:1b:16:81:aa:8e:77:d0:7a:c4:33:bd:91:75:49:
         6f:c2:cc:e2:2e:15:f7:f9:04:6f:97:d1:8e:9a:4e:42:96:f6:
         d8:ec:fd:27:ed:9c:c9:5b:7c:a8:f8:06:b6:bc:ce:f7:62:05:
         f6:ce:b8:8e:17:13:97:1d:d8:6e:a4:f6:9d:31:14:55:6a:d1:
         d7:f4:86:d0:96:97:29:78:b3:05:80:30:db:b3:02:68:df:97:
         81:99:e4:29:f4:67:72:e9:0d:63:75:8e:4b:02:68:bb:57:5a:
         a5:e6:8d:3b:a6:79:b2:63:d4:75:90:fc:fa:92:a5:ff:a6:fd:
         ac:4c:cd:24:b5:38:4f:35:e9:f6:6c:53:4b:33:e4:b3:2e:c6:
         e7:90:ef:f1:70:ad:7c:ad:44:c2:2d:f2:7b:d3:1e:e6:d5:8d:
         ba:3c:ad:2a
-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgIUaPkuiGxwrStNM680L2e/pEPsNiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNTAyMDUxMTM1MjBaFw0yNjAyMDQxMTQwMjBaMDMxMTAvBgNV
BAMTKDIyMEFFNDI2M0VDNDUxMEJERUVEQTkwQjJFNTZGNTBDNjM5MTlERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmVDJ2ds+zFgaNWsyWC57tQlC
uajNm2Zk361RA5MqdHIDWdkYX677Xx50AbEGI5IdUDVLILRuP0el1cA67mRQ+K2P
++iFmfR97z1qhUw+rxtSj8SQ5sunxujoZcN31TASBBfL8WcEL2z+Pa9C9OHTR7v0
EkuAZlN6hv/bfgu0Z4tq8lJFiHcUsbgqOGvkiSOA9cr703KFNzV/7ybHN+Qim3Og
fKrJfFVAJTrogyiduyuw0AyNDC8l5ux1DajnPD+uDVd+klxdz7IxwlrwmWch5LAJ
PwUtVkVJhrekXRSI+T80VbtFUcx4+t6LQA0c9WMeFaeNc5xrlEwd3ckHOJCRAgMB
AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiCuQmPsRRC97t
qQsuVvUMY5Gd8DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTI3QjczMzlBNTdGMkE0RDE5OEJCRDZD
NUQ1RjY0Q0UxQUY4MTRCNDA5MzU0NzcxQTIzMEEyRjAyMTk4NTM5Ri8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9BMjdCNzMzOUE1N0YyQTREMTk4QkJENkM1RDVGNjRDRTFBRjgxNEI0MDkz
NTQ3NzFBMjMwQTJGMDIxOTg1MzlGLzAvMjIwQUU0MjYzRUM0NTEwQkRFRURBOTBC
MkU1NkY1MEM2MzkxOURGMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCg2zoAwQCqvU4
AwQDszFwMA0EAgACMAcDBQAoA9sAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQA
WjANBgkqhkiG9w0BAQsFAAOCAQEAOa7a8wN3IH2lxCNA6ys7txQW+y0U2E4Rtstx
3/mw8FS4wGBXAiaj2VJFcWnKErMRIjfckE+f43ojkmuFJlLWm8HkC7J9hvoiATYA
p6xK8jSGpzijzdh/+u3EFbFC3xsWgaqOd9B6xDO9kXVJb8LM4i4V9/kEb5fRjppO
Qpb22Oz9J+2cyVt8qPgGtrzO92IF9s64jhcTlx3YbqT2nTEUVWrR1/SG0JaXKXiz
BYAw27MCaN+XgZnkKfRncukNY3WOSwJou1dapeaNO6Z5smPUdZD8+pKl/6b9rEzN
JLU4TzXp9mxTSzPksy7G55Dv8XCtfK1Ewi3ye9Me5tWNujytKg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:36 2025 by rpki-client