Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
File:                     22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer (raw, json)
Hash identifier:          M/SpncpGeoeJBW97Dgn8dVoZmW27WI3cfAMoQXg+gsM=
Subject key identifier:   22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       05C53E3F97CEE89880806E2CCE5DE6DA2E8F6AA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 21:31:48 +0000
Certificate not after:    Wed 04 Feb 2026 21:36:48 +0000
Subordinate resources:    AS: 4270
                          IP: 170.210.0.0/16
                          IP: 2800:110::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c5:3e:3f:97:ce:e8:98:80:80:6e:2c:ce:5d:e6:da:2e:8f:6a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 21:31:48 2025 GMT
            Not After : Feb  4 21:36:48 2026 GMT
        Subject: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:9f:e8:a4:fe:09:2b:fe:92:dd:a9:93:7d:
                    ae:a8:c5:b0:32:ea:37:be:1a:ed:5e:c9:88:ab:07:
                    ba:70:ba:7d:ed:46:04:27:cb:25:24:49:6f:fb:bf:
                    6b:d4:34:46:2d:03:70:15:1f:35:ee:46:58:5a:f5:
                    39:4b:7e:82:f0:73:ae:97:6d:58:4f:6b:d2:f0:fb:
                    12:f4:74:d8:26:43:83:f4:0e:0b:b9:16:c9:d2:73:
                    2a:db:7e:d6:74:27:65:af:87:9d:eb:f2:c9:ff:66:
                    b6:da:74:12:6a:8f:66:85:72:49:a5:57:e0:47:44:
                    e7:60:f7:76:95:97:ea:c2:95:83:5b:75:1c:57:7c:
                    2f:98:f6:e4:bf:ca:1f:a1:60:4a:de:61:fb:a8:aa:
                    7b:fc:b2:70:20:24:8f:90:2a:d2:39:0d:27:d2:a9:
                    74:c8:53:5f:62:63:49:11:0a:85:a5:ce:5a:a0:1b:
                    f9:55:6f:07:89:e4:d4:ba:4f:b9:35:e4:f9:3f:07:
                    49:cb:17:42:1f:5e:e9:0b:29:ff:62:2c:d0:11:66:
                    ac:57:42:7b:76:ff:2d:8f:18:88:80:e2:4e:e5:c1:
                    fb:04:a0:35:15:7f:b5:a8:ee:c4:95:83:74:da:87:
                    28:6e:c6:22:dc:b3:6c:c9:30:d3:66:50:ea:14:13:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.0.0/16
                IPv6:
                  2800:110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4270

    Signature Algorithm: sha256WithRSAEncryption
         c0:93:5f:4f:36:17:1f:7e:5c:ae:33:c1:2f:47:d4:01:42:f4:
         d9:8d:15:af:53:07:12:fd:3d:8d:c6:0f:8c:65:33:d8:ba:1f:
         48:80:b5:a1:d6:9b:ee:d0:a7:05:73:4d:2e:a9:29:87:b1:5c:
         d8:a1:4b:a2:4c:c5:5f:9b:41:08:20:0f:0d:74:d7:33:03:71:
         75:6f:c4:ba:6d:a5:82:a8:7a:d6:b6:9c:c5:b9:3f:cc:bd:58:
         20:eb:df:a3:ee:1f:cf:d6:af:a9:9c:cf:fe:7a:d9:3c:80:3e:
         c9:20:4d:dd:9c:3c:35:08:1f:b2:f9:d1:b5:a3:fa:5f:2d:25:
         af:5d:56:72:4d:7b:cc:07:27:ed:12:77:43:79:ad:51:54:f9:
         49:22:5d:a0:67:47:b2:d8:cc:eb:57:26:3a:5e:d8:03:98:c3:
         ee:d9:82:6e:3b:68:4d:b1:49:f1:5d:dd:86:74:7b:64:7c:03:
         a7:e2:57:9f:7b:46:c5:5a:30:36:b1:a8:52:a4:a4:7e:c1:6c:
         5a:04:59:32:36:d9:cc:d5:71:45:ec:7b:1c:ff:b2:cf:62:40:
         cc:0e:f8:49:3f:7b:12:18:29:20:74:21:c8:c7:71:04:72:9b:
         2f:0d:73:4d:49:3f:e9:6d:39:c1:af:69:1a:25:c3:4d:1f:45:
         2d:43:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:03:09 2025 by rpki-client