Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer
File:                     2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.cer (raw, json)
Hash identifier:          NT93iglD+uWCpNh/gblsNspEXEwONXxqLIsMm2MJTxc=
Subject key identifier:   25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       1471FB21AA9B6B6538BB958683B38CC3925627
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 02:47:41 +0000
Certificate not after:    Wed 04 Feb 2026 02:52:41 +0000
Subordinate resources:    AS: 264633
                          IP: 200.10.141.0/24
                          IP: 2801:11:1000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:71:fb:21:aa:9b:6b:65:38:bb:95:86:83:b3:8c:c3:92:56:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 02:47:41 2025 GMT
            Not After : Feb  4 02:52:41 2026 GMT
        Subject: CN=2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:15:52:71:34:76:f8:28:8d:87:23:fd:0a:
                    60:8c:9f:87:cb:aa:49:26:6c:3d:c3:6e:bc:9f:6f:
                    a3:18:45:42:25:cc:15:ce:d2:d1:2d:6c:c2:66:d5:
                    37:18:f0:9d:75:2f:57:2c:de:fd:bd:14:68:33:4d:
                    c8:ec:82:bb:2b:bb:4c:d6:77:03:4a:81:21:d5:96:
                    a0:9b:d3:57:56:70:37:dc:d3:d7:b6:c1:b8:63:4a:
                    0b:9e:af:e4:26:04:9e:c5:91:ef:96:55:94:c4:59:
                    3c:7e:a4:73:ad:ff:a9:6e:3c:21:e9:49:dd:12:fa:
                    97:9c:84:3d:7a:18:73:8c:b9:c6:84:4e:aa:3c:fa:
                    d7:fe:a7:fa:00:9b:47:07:a3:25:ce:3b:b1:a9:07:
                    8b:e5:aa:1e:f2:b8:fd:ae:c5:fe:3c:13:54:ad:96:
                    52:72:79:88:ec:11:d1:18:f1:6a:64:bd:f2:11:c6:
                    1d:b5:be:3f:9f:75:fe:71:f1:2a:e5:59:11:25:17:
                    d2:84:7e:86:ec:05:36:7b:f9:2c:62:ed:bc:75:0b:
                    3d:5e:f6:e5:50:e1:f7:a9:a1:63:65:a0:69:07:b7:
                    4c:a6:f4:71:3c:65:66:2e:6e:e9:cc:e8:a8:f5:c7:
                    30:0c:6a:52:44:78:c9:f4:ee:ed:99:6b:4c:a5:79:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:35:F6:21:0F:BE:38:9C:54:0F:5A:5D:E9:54:C9:CF:F7:EB:F7:FC
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/008ECF48FD626A41A4EAACDA7B40100DE0F0C1A4FD1DBC752A00393F31237B39/0/2535F6210FBE389C540F5A5DE954C9CFF7EBF7FC.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.141.0/24
                IPv6:
                  2801:11:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264633

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:46:11:b5:3b:4e:2b:a3:73:87:0c:02:d7:a4:3f:6e:32:
         1d:20:65:a8:41:6a:1b:af:5e:1f:e4:53:b0:c7:94:86:e1:06:
         d5:e1:b1:b1:70:62:b4:72:d7:ac:ea:0e:6f:fa:ff:d1:2e:51:
         0e:54:76:4b:ff:fb:87:89:53:b0:8d:e7:2f:d9:94:84:34:64:
         5c:24:a5:b4:ef:f7:53:b2:a4:0e:9f:f3:b3:a3:80:24:1e:1f:
         04:35:67:00:5b:10:5a:1d:a2:9c:75:52:2d:ce:fb:84:70:9b:
         7e:12:77:c8:cd:29:04:39:9e:f3:3b:c5:4c:79:c3:6d:7f:4c:
         ac:dd:c1:bf:1b:e0:e1:02:13:0f:4b:f1:5b:41:e7:b7:33:e4:
         8c:24:8f:71:c6:b8:aa:d2:7d:5d:7e:ea:35:d9:8a:37:ca:80:
         65:3d:2a:82:96:9b:ea:9c:5e:4a:e8:96:3f:15:a9:7d:ae:51:
         44:78:a0:3d:c4:37:e9:e2:37:73:25:3e:fb:ee:d2:93:d7:14:
         45:3d:12:26:04:f8:04:f3:9f:0e:b1:04:ce:b1:05:b9:e2:27:
         d6:70:da:db:ee:96:37:21:9b:fd:72:42:b7:35:87:9e:85:3b:
         e0:86:a2:b2:c0:02:b7:66:59:8d:16:50:8d:a9:fc:11:f2:18:
         c0:60:0a:72
-----BEGIN CERTIFICATE-----
MIIGpjCCBY6gAwIBAgITFHH7Iaqba2U4u5WGg7OMw5JWJzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF
NjYxODE2MB4XDTI1MDIwNTAyNDc0MVoXDTI2MDIwNDAyNTI0MVowMzExMC8GA1UE
AxMoMjUzNUY2MjEwRkJFMzg5QzU0MEY1QTVERTk1NEM5Q0ZGN0VCRjdGQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAoFVJxNHb4KI2HI/0KYIyfh8uq
SSZsPcNuvJ9voxhFQiXMFc7S0S1swmbVNxjwnXUvVyze/b0UaDNNyOyCuyu7TNZ3
A0qBIdWWoJvTV1ZwN9zT17bBuGNKC56v5CYEnsWR75ZVlMRZPH6kc63/qW48IelJ
3RL6l5yEPXoYc4y5xoROqjz61/6n+gCbRwejJc47sakHi+WqHvK4/a7F/jwTVK2W
UnJ5iOwR0RjxamS98hHGHbW+P591/nHxKuVZESUX0oR+huwFNnv5LGLtvHULPV72
5VDh96mhY2WgaQe3TKb0cTxlZi5u6czoqPXHMAxqUkR4yfTu7ZlrTKV5ym8CAwEA
AaOCA7EwggOtMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFCU19iEPvjicVA9a
XelUyc/36/f8MB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud
DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv
c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3
MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w
L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5
BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv
cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw
QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND
MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr
BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku
bGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMDhFQ0Y0OEZENjI2QTQxQTRFQUFDREE3
QjQwMTAwREUwRjBDMUE0RkQxREJDNzUyQTAwMzkzRjMxMjM3QjM5LzAvMIGmBggr
BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzAwOEVDRjQ4RkQ2MjZBNDFBNEVBQUNEQTdCNDAxMDBERTBGMEMxQTRGRDFE
QkM3NTJBMDAzOTNGMzEyMzdCMzkvMC8yNTM1RjYyMTBGQkUzODlDNTQwRjVBNURF
OTU0QzlDRkY3RUJGN0ZDLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh
Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADICo0wDwQCAAIw
CQMHACgBABEQADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECbkwDQYJKoZIhvcN
AQELBQADggEBAE8QRhG1O04ro3OHDALXpD9uMh0gZahBahuvXh/kU7DHlIbhBtXh
sbFwYrRy16zqDm/6/9EuUQ5Udkv/+4eJU7CN5y/ZlIQ0ZFwkpbTv91OypA6f87Oj
gCQeHwQ1ZwBbEFodopx1Ui3O+4Rwm34Sd8jNKQQ5nvM7xUx5w21/TKzdwb8b4OEC
Ew9L8VtB57cz5Iwkj3HGuKrSfV1+6jXZijfKgGU9KoKWm+qcXkrolj8VqX2uUUR4
oD3EN+niN3MlPvvu0pPXFEU9EiYE+ATznw6xBM6xBbniJ9Zw2tvuljchm/1yQrc1
h56FO+CGorLAArdmWY0WUI2p/BHyGMBgCnI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:56 2025 by rpki-client