Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
File:                     274D68F06BB1F2ED094F03B52FED7565F7825D99.cer (raw, json)
Hash identifier:          1l34OKMODgbgIs6MuOOssNozz8QtN0/DAHkkYeLlTgs=
Subject key identifier:   27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       4B28285F24F19874AAF07858E9EF5B838CE66DFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:07:21 +0000
Certificate not after:    Tue 04 Mar 2025 18:12:21 +0000
Subordinate resources:    AS: 7303
                          AS: 7934
                          AS: 10318
                          AS: 10481
                          AS: 10895
                          AS: 10983
                          AS: 11356
                          AS: 12264
                          AS: 21590
                          AS: 26608
                          AS: 27871
                          IP: 24.232.0.0/16
                          IP: 66.60.0.0/18
                          IP: 152.168.0.0/14
                          IP: 170.150.196.0/22
                          IP: 170.231.136.0/22
                          IP: 181.0.0.0 -- 181.1.151.255
                          IP: 181.1.156.0 -- 181.15.255.255
                          IP: 181.28.0.0/14
                          IP: 181.80.0.0 -- 181.85.207.255
                          IP: 181.85.216.0 -- 181.91.83.255
                          IP: 181.91.88.0 -- 181.94.196.255
                          IP: 181.94.198.0 -- 181.94.207.255
                          IP: 181.94.211.0/24
                          IP: 181.94.239.0 -- 181.94.240.255
                          IP: 181.94.251.0 -- 181.111.255.255
                          IP: 181.164.0.0 -- 181.171.255.255
                          IP: 181.228.0.0/14
                          IP: 186.108.0.0/14
                          IP: 186.124.0.0/14
                          IP: 186.136.0.0/14
                          IP: 186.152.0.0/15
                          IP: 190.16.0.0/14
                          IP: 190.30.0.0/15
                          IP: 190.136.0.0/14
                          IP: 190.188.0.0 -- 190.195.255.255
                          IP: 190.224.0.0/13
                          IP: 190.244.0.0/14
                          IP: 191.97.128.0/17
                          IP: 196.32.64.0/19
                          IP: 200.3.32.0 -- 200.3.95.255
                          IP: 200.32.0.0/19
                          IP: 200.42.0.0 -- 200.42.159.255
                          IP: 200.43.0.0/16
                          IP: 200.45.0.0/16
                          IP: 200.49.96.0/20
                          IP: 200.49.128.0/19
                          IP: 200.55.64.0/18
                          IP: 200.61.192.0/19
                          IP: 200.63.0.0/19
                          IP: 200.71.224.0/20
                          IP: 200.73.128.0/18
                          IP: 200.80.64.0/20
                          IP: 200.82.0.0/17
                          IP: 200.89.128.0/18
                          IP: 200.105.0.0 -- 200.105.95.255
                          IP: 200.110.224.0/21
                          IP: 200.114.128.0/17
                          IP: 200.117.0.0/16
                          IP: 200.122.0.0/17
                          IP: 200.126.128.0 -- 200.127.255.255
                          IP: 201.212.0.0/15
                          IP: 201.231.0.0/16
                          IP: 201.235.0.0/16
                          IP: 201.252.0.0/15
                          IP: 2001:13d0::/29
                          IP: 2800:2000::/20
                          IP: 2800:b000::/32
                          IP: 2803:da80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:28:28:5f:24:f1:98:74:aa:f0:78:58:e9:ef:5b:83:8c:e6:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:07:21 2024 GMT
            Not After : Mar  4 18:12:21 2025 GMT
        Subject: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:7e:94:d9:a9:de:09:12:3d:4e:b3:20:1b:
                    68:f5:43:c3:c0:4a:17:1e:02:c0:0a:14:c9:75:9b:
                    63:d0:ae:68:ac:e8:ae:44:f1:62:44:6a:51:0a:2e:
                    00:1b:d9:e5:3f:5e:8c:fa:9f:4c:15:68:6f:97:39:
                    df:2b:12:db:ec:5a:2e:58:88:8f:5c:45:e9:9e:02:
                    62:00:41:72:d6:ae:50:2c:48:ff:d8:ef:3d:87:93:
                    11:8b:a2:7c:2a:19:d9:e3:65:5d:40:e8:b1:03:0c:
                    0a:f9:ed:96:e9:bb:74:86:5b:ec:30:db:c5:d9:e7:
                    da:6e:20:5b:e0:ba:a6:ca:72:ca:08:a7:72:8d:95:
                    11:3f:a7:53:be:d2:dc:99:b1:86:cd:3a:f0:e8:b0:
                    fa:24:5d:08:11:66:d0:bc:01:e3:0e:69:1c:74:cf:
                    0f:11:d8:a1:fe:3e:82:03:ac:a5:88:31:3a:5c:5a:
                    8f:7e:ef:04:28:65:e5:66:35:4e:1b:06:dd:e8:87:
                    9d:d9:20:c8:00:17:18:a7:16:3d:bf:a7:f8:3b:a9:
                    e5:ec:2c:45:be:b8:6e:b3:17:37:54:6d:06:ef:d8:
                    d2:01:b7:87:ea:44:da:12:20:1b:f5:28:a6:c4:85:
                    99:ad:4d:d7:b7:1f:a9:bd:96:cd:bd:06:c6:9a:0e:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0-181.1.151.255
                  181.1.156.0-181.15.255.255
                  181.28.0.0/14
                  181.80.0.0-181.85.207.255
                  181.85.216.0-181.91.83.255
                  181.91.88.0-181.94.196.255
                  181.94.198.0-181.94.207.255
                  181.94.211.0/24
                  181.94.239.0-181.94.240.255
                  181.94.251.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7303
                  7934
                  10318
                  10481
                  10895
                  10983
                  11356
                  12264
                  21590
                  26608
                  27871

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:18:38:9d:b1:5b:34:3b:2f:5e:fc:73:cc:f4:87:c4:e8:
         0b:1d:c4:f1:04:9c:6a:26:a3:c2:7c:ed:65:bf:74:fa:72:04:
         9c:8e:03:c8:60:43:33:12:6c:08:c6:57:42:85:b2:19:8c:c9:
         1a:12:5a:67:09:0e:1c:0f:a7:9a:91:81:52:5c:d2:fe:8e:70:
         e0:a7:5b:e8:65:67:96:50:5b:a9:b2:98:3b:d5:f3:6e:65:89:
         fd:94:10:41:4f:45:5f:48:c1:5a:9e:78:8f:8a:df:00:8c:03:
         26:b9:a1:ad:b0:95:da:37:14:5e:68:f7:87:de:88:3f:d3:c6:
         cf:6f:e6:48:a0:2e:90:d5:74:d5:a3:91:59:0a:d8:cb:87:7f:
         e7:ef:67:a2:2a:22:f3:01:43:c9:0f:8a:32:be:2c:b3:47:b9:
         3f:24:33:6e:34:ab:76:c3:e1:13:12:c1:f6:18:8f:67:88:53:
         d7:99:4b:bd:6f:9a:99:46:1b:33:41:8d:1d:b1:50:de:d4:c2:
         fb:60:69:be:4d:51:c8:7e:ad:58:23:5f:39:f7:d2:78:65:29:
         55:39:6a:47:92:25:51:47:7d:3c:65:36:f2:ef:5d:ac:3e:c4:
         c7:5e:39:d8:17:68:8e:e5:21:76:7b:e4:1f:53:7d:f1:fa:5f:
         8e:7a:e9:87
-----BEGIN CERTIFICATE-----
MIIIeDCCB2CgAwIBAgIUSygoXyTxmHSq8HhY6e9bg4zmbf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMDUxODA3MjFaFw0yNTAzMDQxODEyMjFaMDMxMTAvBgNV
BAMTKDI3NEQ2OEYwNkJCMUYyRUQwOTRGMDNCNTJGRUQ3NTY1Rjc4MjVEOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oH6U2aneCRI9TrMgG2j1Q8PA
ShceAsAKFMl1m2PQrmis6K5E8WJEalEKLgAb2eU/Xoz6n0wVaG+XOd8rEtvsWi5Y
iI9cRemeAmIAQXLWrlAsSP/Y7z2HkxGLonwqGdnjZV1A6LEDDAr57Zbpu3SGW+ww
28XZ59puIFvguqbKcsoIp3KNlRE/p1O+0tyZsYbNOvDosPokXQgRZtC8AeMOaRx0
zw8R2KH+PoIDrKWIMTpcWo9+7wQoZeVmNU4bBt3oh53ZIMgAFxinFj2/p/g7qeXs
LEW+uG6zFzdUbQbv2NIBt4fqRNoSIBv1KKbEhZmtTde3H6m9ls29BsaaDu4VAgMB
AAGjggWCMIIFfjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnTWjwa7Hy7QlP
A7Uv7XVl94JdmTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUVFOUIxRTA4MzE2NzdFRDkzODAzQUYw
QjhFRDZCOTVGRTM2N0JBMENDODNDRUQ0QjBBRUY2MTdFMUYwMzE1MC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1
MkZFRDc1NjVGNzgyNUQ5OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMIIB2AYIKwYBBQUHAQcBAf8EggHHMIIBwzCCAZwEAgABMIIBlAMD
ABjoAwQGQjwAAwMCmKgDBAKqlsQDBAKq54gwCgMCALUDBAO1AZAwCwMEArUBnAMD
BLUAAwMCtRwwCwMDBLVQAwQEtVXAMAwDBAO1VdgDBAK1W1AwDAMEA7VbWAMEALVe
xDAMAwQBtV7GAwQEtV7AAwQAtV7TMAwDBAC1Xu8DBAC1XvAwCwMEALVe+wMDBLVg
MAoDAwK1pAMDArWoAwMCteQDAwK6bAMDArp8AwMCuogDAwG6mAMDAr4QAwMBvh4D
AwK+iDAKAwMCvrwDAwK+wAMDA77gAwMCvvQDBAe/YYADBAXEIEAwDAMEBcgDIAME
BcgDQAMEBcggADALAwMByCoDBAXIKoADAwDIKwMDAMgtAwQEyDFgAwQFyDGAAwQG
yDdAAwQFyD3AAwQFyD8AAwQEyEfgAwQGyEmAAwQEyFBAAwQHyFIAAwQGyFmAMAsD
AwDIaQMEBchpQAMEA8hu4AMEB8hygAMDAMh1AwQHyHoAMAsDBAfIfoADAwfIAAMD
AcnUAwMAyecDAwDJ6wMDAcn8MCEEAgACMBsDBQMgARPQAwQEKAAgAwUAKACwAAMF
ACgD2oAwQQYIKwYBBQUHAQgBAf8EMjAwoC4wLAICHIcCAh7+AgIoTgICKPECAiqP
AgIq5wICLFwCAi/oAgJUVgICZ/ACAmzfMA0GCSqGSIb3DQEBCwUAA4IBAQAb4xg4
nbFbNDsvXvxzzPSHxOgLHcTxBJxqJqPCfO1lv3T6cgScjgPIYEMzEmwIxldChbIZ
jMkaElpnCQ4cD6eakYFSXNL+jnDgp1voZWeWUFupspg71fNuZYn9lBBBT0VfSMFa
nniPit8AjAMmuaGtsJXaNxReaPeH3og/08bPb+ZIoC6Q1XTVo5FZCtjLh3/n72ei
KiLzAUPJD4oyviyzR7k/JDNuNKt2w+ETEsH2GI9niFPXmUu9b5qZRhszQY0dsVDe
1ML7YGm+TVHIfq1YI18599J4ZSlVOWpHkiVRR308ZTby712sPsTHXjnYF2iO5SF2
e+QfU33x+l+OeumH
-----END CERTIFICATE-----
Generated at Mon May 20 20:43:43 2024 by rpki-client on console-fra.rpki-client.org