Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer
File:                     26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer (raw, json)
Hash identifier:          IBSeQhzz5LUdHhEkBas24v9y0lkZrxKEyO1z0zoe5B4=
Subject key identifier:   26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       37218F20122056C9B61AFC42142BF59828442D70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 18:54:17 +0000
Certificate not after:    Tue 03 Feb 2026 18:59:17 +0000
Subordinate resources:    AS: 52428
                          IP: 170.238.240.0/22
                          IP: 200.115.48.0/20
                          IP: 2803:1900::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:21:8f:20:12:20:56:c9:b6:1a:fc:42:14:2b:f5:98:28:44:2d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 18:54:17 2025 GMT
            Not After : Feb  3 18:59:17 2026 GMT
        Subject: CN=26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:8d:7c:ca:3e:50:a4:cb:47:da:8e:e8:82:
                    50:0f:02:a2:d0:b4:84:7e:1a:b2:aa:ef:48:ba:be:
                    ad:72:6b:a3:47:60:07:c8:9f:7e:f4:a5:d8:df:95:
                    48:3f:8c:71:95:9c:3d:19:48:f7:bb:81:77:58:73:
                    b1:12:0d:fd:d3:4d:dd:43:3b:f0:d2:5f:ad:48:10:
                    c1:8d:b6:9b:14:5b:6d:51:fb:bc:61:89:23:ba:04:
                    4c:14:38:09:66:e1:53:b1:0c:04:b8:bf:ee:b9:45:
                    74:f3:ff:be:b3:35:93:33:22:de:86:6b:4d:97:1b:
                    d0:cc:ac:36:b9:7e:39:65:25:ac:95:31:af:12:89:
                    ed:6a:1c:29:f5:1c:e6:19:f8:c2:ed:f4:f8:c2:e4:
                    6e:70:43:06:d9:5e:ab:e8:34:ec:24:1a:91:c4:71:
                    11:c7:50:99:86:a4:c6:b4:f4:15:23:a9:74:93:84:
                    1b:8e:c3:3a:4e:b0:20:61:57:48:d6:0f:e4:67:b5:
                    0d:ad:d0:e5:97:b8:0a:63:b6:cf:52:4a:ac:99:bc:
                    ff:65:62:30:1b:6e:44:99:3e:8f:3a:17:d7:ed:3c:
                    8f:6a:f5:eb:54:9c:f3:0a:07:ab:c0:bc:19:45:f9:
                    16:50:c5:bf:30:63:0e:e3:a6:11:21:54:95:ca:04:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.240.0/22
                  200.115.48.0/20
                IPv6:
                  2803:1900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52428

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:58:7d:71:1a:3e:dc:b3:32:ca:fe:4f:19:67:6a:71:78:
         c2:6b:1f:77:ab:b8:90:1c:08:98:5a:5c:bd:8b:5d:fc:07:5b:
         4e:53:85:6f:ca:26:17:90:c9:3e:ff:48:7a:21:f5:27:71:39:
         43:9e:5b:b6:d9:7a:75:84:2b:4f:10:af:71:df:cb:cc:21:8e:
         28:36:c1:af:57:3a:f8:78:2e:a7:df:fd:55:00:5e:82:90:20:
         98:b1:73:e2:3a:23:cf:0d:b0:ff:7c:7f:d2:1c:ef:29:4d:03:
         70:6c:35:1d:86:55:b0:14:ff:6e:df:f8:25:10:c9:3b:ae:7d:
         b5:92:11:cc:b3:d0:b3:df:78:2d:79:de:08:90:2c:70:68:7a:
         44:5e:0c:4e:55:3d:e4:a4:0b:3a:bf:e5:3c:d5:90:de:1d:81:
         c4:1a:34:77:4d:c1:db:bb:c0:de:c0:23:4e:07:0c:62:ad:10:
         9c:f1:f0:2b:e0:b2:f9:47:b2:11:7b:16:69:19:8a:13:da:47:
         5a:bb:41:31:6f:8e:32:7b:dc:b7:48:22:a4:63:7c:52:e0:20:
         a2:50:8e:92:7e:64:e4:de:2b:58:78:73:00:88:29:a2:32:3a:
         c9:bc:4e:57:77:fa:1d:6c:f2:ea:bf:0e:95:ab:2e:13:36:39:
         47:0d:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:14 2025 by rpki-client