Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
File:                     25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer (raw, json)
Hash identifier:          BTjOy39CRB1Y3uMFCuYitD7R51SYaH49SNsQ5KR0mDY=
Subject key identifier:   25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       648B2049A3E610F66EEBA4705FEE598440784B65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:44:17 +0000
Certificate not after:    Tue 04 Mar 2025 17:49:17 +0000
Subordinate resources:    AS: 264630
                          IP: 200.106.248.0/21
                          IP: 2801:0:190::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Jul 2024 18:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:20:49:a3:e6:10:f6:6e:eb:a4:70:5f:ee:59:84:40:78:4b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:44:17 2024 GMT
            Not After : Mar  4 17:49:17 2025 GMT
        Subject: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:7a:b6:8e:f0:80:5e:67:be:5b:34:17:88:
                    1b:fe:6a:76:c6:b6:1c:84:3a:14:51:3c:aa:be:a9:
                    7e:dd:18:4a:7f:e8:88:66:b5:d1:92:5a:a7:bc:e0:
                    74:85:09:0e:9a:f3:f3:b2:77:be:64:e8:9a:5c:dc:
                    23:ac:35:a9:90:d6:4d:b8:a7:e4:63:dc:fb:12:6c:
                    ad:18:5b:ad:ea:54:7b:da:64:40:a8:8c:ef:c1:18:
                    7d:29:f0:59:71:21:f5:85:1d:55:f3:76:f3:60:ac:
                    08:98:5c:1c:46:af:12:0f:b2:7a:8a:4f:2b:01:69:
                    dc:41:be:11:a8:72:c4:c6:cd:fe:33:76:d9:80:ab:
                    aa:d0:8a:9f:90:61:33:b8:ad:f5:9f:f4:e5:9e:71:
                    3b:92:c4:2e:ea:3c:3c:b7:c2:32:f7:d8:8d:09:02:
                    9b:7a:54:a1:e1:2d:42:e0:77:9e:a9:34:2b:77:de:
                    1b:66:b4:f6:f3:56:d9:92:9d:1a:c6:d4:e2:f9:52:
                    3c:65:07:1a:fc:03:cf:a9:9d:16:bf:1f:53:c1:4a:
                    5f:d1:bb:24:e7:e1:54:9f:dd:30:fb:b9:b8:c8:ee:
                    bf:b4:3d:18:c2:f9:f3:5a:84:a5:09:a7:f7:9e:66:
                    4d:bc:68:49:31:37:d1:b4:f1:8d:bd:de:5d:0d:77:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.248.0/21
                IPv6:
                  2801:0:190::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264630

    Signature Algorithm: sha256WithRSAEncryption
         14:c1:3e:88:3f:6d:88:6a:e7:9a:d7:24:66:70:da:5f:ae:96:
         c0:60:61:2f:07:5c:ae:49:44:bd:6e:0d:56:7a:01:b3:a5:03:
         89:e0:62:38:0e:f2:db:ad:96:d1:34:e7:1f:d7:b9:ca:09:aa:
         6c:02:85:94:c1:a0:21:ce:c3:98:2c:63:37:4a:43:08:4f:d4:
         5a:05:4c:3e:74:13:3b:f0:28:3b:e8:a8:f9:a8:22:8d:ee:0e:
         0a:c9:44:e8:30:d8:ca:c5:60:a9:ae:12:03:1f:91:83:f4:db:
         af:28:77:2c:ed:10:29:d0:a6:93:5f:c5:3c:bc:3c:33:3b:47:
         1a:cd:9c:8d:b8:d9:8c:de:0a:8d:34:fd:3b:51:37:d0:4d:ad:
         34:fa:85:c4:c7:5d:c8:40:87:f5:9b:37:da:f3:56:c9:b7:21:
         f5:d0:ac:7e:40:cf:4e:82:72:64:32:b8:f0:df:c6:c1:4d:54:
         84:6e:0d:fa:8b:c4:6f:da:8f:be:5a:9b:e6:7f:fe:3a:3e:f8:
         57:54:52:0b:fe:0b:82:f6:65:ab:a5:9a:42:52:34:f4:7d:4e:
         82:dd:c6:45:83:d2:0a:c6:53:69:86:8d:f7:77:ac:a6:8a:75:
         5c:5c:8f:62:b1:a1:17:eb:56:6e:08:aa:ff:d0:fa:6e:e2:0d:
         82:9f:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 19:23:49 2024 by rpki-client on console-ams.rpki-client.org