Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
File:                     274D68F06BB1F2ED094F03B52FED7565F7825D99.cer (raw, json)
Hash identifier:          K1Xz7ZOvyQsn7TKfLBdknSkvY7adjPYDVhTBrnluE8I=
Subject key identifier:   27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       57E6938D93F37B7F92ACBACCB30481B8C01F1673
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Oct 2024 12:20:00 +0000
Certificate not after:    Tue 30 Sep 2025 12:25:00 +0000
Subordinate resources:    AS: 7303
                          AS: 7934
                          AS: 10318
                          AS: 10481
                          AS: 10895
                          AS: 10983
                          AS: 11356
                          AS: 12264
                          AS: 21590
                          AS: 26608
                          AS: 27871
                          IP: 24.232.0.0/16
                          IP: 66.60.0.0/18
                          IP: 152.168.0.0/14
                          IP: 170.150.196.0/22
                          IP: 170.231.136.0/22
                          IP: 181.0.0.0 -- 181.1.151.255
                          IP: 181.1.156.0 -- 181.15.255.255
                          IP: 181.28.0.0/14
                          IP: 181.80.0.0 -- 181.85.207.255
                          IP: 181.85.216.0 -- 181.91.83.255
                          IP: 181.91.88.0 -- 181.94.196.255
                          IP: 181.94.198.0 -- 181.94.207.255
                          IP: 181.94.211.0/24
                          IP: 181.94.239.0 -- 181.94.240.255
                          IP: 181.94.251.0 -- 181.102.255.255
                          IP: 181.103.16.0 -- 181.103.63.255
                          IP: 181.103.80.0 -- 181.111.255.255
                          IP: 181.164.0.0 -- 181.171.255.255
                          IP: 181.228.0.0/14
                          IP: 186.108.0.0/14
                          IP: 186.124.0.0/14
                          IP: 186.136.0.0/14
                          IP: 186.152.0.0/15
                          IP: 190.16.0.0/14
                          IP: 190.30.0.0/15
                          IP: 190.136.0.0/14
                          IP: 190.188.0.0 -- 190.195.255.255
                          IP: 190.224.0.0/13
                          IP: 190.244.0.0/14
                          IP: 191.97.128.0/17
                          IP: 196.32.64.0/19
                          IP: 200.3.32.0 -- 200.3.95.255
                          IP: 200.32.0.0/19
                          IP: 200.42.0.0 -- 200.42.159.255
                          IP: 200.43.0.0/16
                          IP: 200.45.0.0/16
                          IP: 200.49.96.0/20
                          IP: 200.49.128.0/19
                          IP: 200.55.64.0/18
                          IP: 200.61.192.0/19
                          IP: 200.63.0.0/19
                          IP: 200.71.224.0/20
                          IP: 200.73.128.0/18
                          IP: 200.80.64.0/20
                          IP: 200.82.0.0/17
                          IP: 200.89.128.0/18
                          IP: 200.105.0.0 -- 200.105.95.255
                          IP: 200.110.224.0/21
                          IP: 200.114.128.0/17
                          IP: 200.117.0.0/16
                          IP: 200.122.0.0/17
                          IP: 200.126.128.0 -- 200.127.255.255
                          IP: 201.212.0.0/15
                          IP: 201.231.0.0/16
                          IP: 201.235.0.0/16
                          IP: 201.252.0.0/15
                          IP: 2001:13d0::/29
                          IP: 2800:2000::/20
                          IP: 2800:b000::/32
                          IP: 2803:da80::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e6:93:8d:93:f3:7b:7f:92:ac:ba:cc:b3:04:81:b8:c0:1f:16:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Oct  1 12:20:00 2024 GMT
            Not After : Sep 30 12:25:00 2025 GMT
        Subject: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:7e:94:d9:a9:de:09:12:3d:4e:b3:20:1b:
                    68:f5:43:c3:c0:4a:17:1e:02:c0:0a:14:c9:75:9b:
                    63:d0:ae:68:ac:e8:ae:44:f1:62:44:6a:51:0a:2e:
                    00:1b:d9:e5:3f:5e:8c:fa:9f:4c:15:68:6f:97:39:
                    df:2b:12:db:ec:5a:2e:58:88:8f:5c:45:e9:9e:02:
                    62:00:41:72:d6:ae:50:2c:48:ff:d8:ef:3d:87:93:
                    11:8b:a2:7c:2a:19:d9:e3:65:5d:40:e8:b1:03:0c:
                    0a:f9:ed:96:e9:bb:74:86:5b:ec:30:db:c5:d9:e7:
                    da:6e:20:5b:e0:ba:a6:ca:72:ca:08:a7:72:8d:95:
                    11:3f:a7:53:be:d2:dc:99:b1:86:cd:3a:f0:e8:b0:
                    fa:24:5d:08:11:66:d0:bc:01:e3:0e:69:1c:74:cf:
                    0f:11:d8:a1:fe:3e:82:03:ac:a5:88:31:3a:5c:5a:
                    8f:7e:ef:04:28:65:e5:66:35:4e:1b:06:dd:e8:87:
                    9d:d9:20:c8:00:17:18:a7:16:3d:bf:a7:f8:3b:a9:
                    e5:ec:2c:45:be:b8:6e:b3:17:37:54:6d:06:ef:d8:
                    d2:01:b7:87:ea:44:da:12:20:1b:f5:28:a6:c4:85:
                    99:ad:4d:d7:b7:1f:a9:bd:96:cd:bd:06:c6:9a:0e:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0-181.1.151.255
                  181.1.156.0-181.15.255.255
                  181.28.0.0/14
                  181.80.0.0-181.85.207.255
                  181.85.216.0-181.91.83.255
                  181.91.88.0-181.94.196.255
                  181.94.198.0-181.94.207.255
                  181.94.211.0/24
                  181.94.239.0-181.94.240.255
                  181.94.251.0-181.102.255.255
                  181.103.16.0-181.103.63.255
                  181.103.80.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7303
                  7934
                  10318
                  10481
                  10895
                  10983
                  11356
                  12264
                  21590
                  26608
                  27871

    Signature Algorithm: sha256WithRSAEncryption
         e4:14:1b:9b:3e:ba:6a:c9:8f:00:8f:90:ce:c9:de:29:77:39:
         55:bf:f0:c6:a8:a6:83:7e:a7:60:32:cf:a3:29:3c:7c:b9:2f:
         41:0a:eb:99:19:5f:5a:9b:a3:21:cb:4c:7f:80:3a:5d:a2:49:
         e5:1d:21:7c:93:28:6f:54:b9:ef:79:7a:ae:e8:dd:b2:bd:fb:
         c2:73:09:3f:25:d4:72:e5:15:41:a3:d3:08:e2:06:9c:42:9a:
         8d:d6:2d:a9:74:47:10:9c:f5:1f:f0:57:f7:7f:c5:6f:bb:23:
         3f:03:fc:50:65:55:4c:8a:17:f1:aa:07:50:08:c0:10:d9:1e:
         67:c4:c4:f1:b1:2a:02:d6:4a:81:1b:0a:b1:ae:3b:0c:96:58:
         7a:d5:75:da:a7:37:fc:d1:e5:d4:0b:dd:19:ad:3a:04:f2:66:
         70:fa:82:01:7d:81:f8:99:ff:a6:50:57:70:51:0b:a5:a7:95:
         65:05:6c:5e:c2:6e:1e:fb:16:8e:65:2a:8c:0c:a1:d2:ee:cf:
         14:1d:db:4e:b5:22:46:17:40:db:fd:3f:6d:c0:99:f8:e3:60:
         5f:df:01:8e:74:a3:49:97:d3:38:80:2b:47:b3:4a:79:76:65:
         43:50:cf:3d:ad:fb:5c:da:a4:f8:44:12:c4:4e:0b:74:86:7b:
         5b:96:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 14:08:04 2024 by rpki-client on console-ams.rpki-client.org