Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
File:                     2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer (raw, json)
Hash identifier:          qHx3tXUq4uu3lHYLVXMaMAHgi1NsYXYWwbT3STQK1AY=
Subject key identifier:   2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       0B90A7FB4CBABEE7F77B3DEA194554DB783010ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 17:50:08 +0000
Certificate not after:    Wed 04 Feb 2026 17:55:08 +0000
Subordinate resources:    AS: 10391
                          AS: 272037
                          IP: 179.0.200.0/23
                          IP: 2801:17:c000::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:90:a7:fb:4c:ba:be:e7:f7:7b:3d:ea:19:45:54:db:78:30:10:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 17:50:08 2025 GMT
            Not After : Feb  4 17:55:08 2026 GMT
        Subject: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:0a:7a:eb:c2:61:48:d3:51:f0:fd:cc:f1:
                    cf:7e:fd:92:71:51:b4:74:66:75:06:c0:e5:97:40:
                    e9:49:ea:9b:5b:8b:57:10:14:7c:d3:24:f3:eb:5b:
                    bb:38:9d:09:ce:1e:6c:8e:87:ba:51:78:ba:81:ec:
                    05:7b:d9:02:3e:96:78:65:0b:7c:ec:65:23:d8:4b:
                    87:c2:9d:9b:cf:41:cb:e7:48:a0:f1:cb:36:72:74:
                    8b:67:69:6e:df:bc:d2:40:1a:51:48:83:71:cf:88:
                    83:d0:56:93:14:6d:3f:43:cf:f2:19:28:b6:50:b0:
                    75:3f:30:76:c7:61:c4:8d:89:a8:96:85:6a:45:3a:
                    e0:54:15:85:25:d9:a0:94:11:31:56:8c:f6:89:fa:
                    0c:7f:40:79:fb:32:26:98:ee:42:c0:45:5c:2f:94:
                    01:2c:45:d3:6d:58:e2:fa:89:d4:9c:dc:bd:02:1a:
                    c6:cb:d9:47:45:7a:64:c7:00:53:a1:59:39:91:a4:
                    49:20:d4:34:58:9e:54:37:15:fd:7d:a1:3c:95:4a:
                    5e:f8:b0:a8:25:aa:cf:4c:ba:1e:05:12:90:cf:16:
                    c2:21:f0:4c:b0:26:90:f1:52:89:d4:fa:17:b6:f8:
                    d9:aa:88:1f:f2:aa:83:50:78:c0:a6:fb:09:d4:4d:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.200.0/23
                IPv6:
                  2801:17:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10391
                  272037

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:8c:3c:96:65:23:b4:97:80:bf:4e:dc:4f:b2:5f:df:e7:
         33:cb:68:46:5e:21:91:d0:75:57:d1:9e:a9:dd:10:b6:c5:9b:
         f4:bb:39:c0:0e:3c:3d:65:66:ef:0f:23:2e:99:f1:f8:92:26:
         1d:93:cc:67:aa:9a:99:63:aa:02:a9:e3:ef:db:bf:6e:0c:f2:
         06:74:87:d5:1b:d6:98:36:0f:37:c8:57:fe:05:19:6f:9b:1e:
         08:fa:69:81:c1:63:b5:d2:b9:84:9a:71:88:4b:fc:56:30:d5:
         fa:59:de:d8:6e:42:52:b0:ae:d8:71:60:1b:81:1d:24:35:06:
         51:cd:72:82:1d:f3:d8:b4:3b:87:6a:e1:fb:dc:31:a5:39:5e:
         91:c7:91:ee:b9:66:3c:cc:97:04:39:3d:c5:a2:fe:c6:b2:96:
         2e:00:43:78:67:6a:da:a5:24:69:4d:33:bc:8f:d5:c2:47:36:
         92:82:2b:95:2f:cd:c7:2d:b7:f9:f9:ee:fa:19:da:0a:37:0c:
         31:e9:93:b6:29:96:e9:17:d7:cd:2e:7b:cc:dc:d3:b6:ad:32:
         2c:20:32:69:78:e2:9c:38:ae:ee:0c:58:53:19:56:c7:fb:bc:
         48:61:88:5b:8e:06:00:c4:88:14:3f:8c:a5:b0:8f:30:73:3a:
         1c:10:f7:a0
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgIUC5Cn+0y6vuf3ez3qGUVU23gwEO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNTAyMDUxNzUwMDhaFw0yNjAyMDQxNzU1MDhaMDMxMTAvBgNV
BAMTKDJCQTEwRTZEN0MwMzI4RTUzNjRCRjQwNDExMDRENTI2MjRGRjJDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYgp668JhSNNR8P3M8c9+/ZJx
UbR0ZnUGwOWXQOlJ6ptbi1cQFHzTJPPrW7s4nQnOHmyOh7pReLqB7AV72QI+lnhl
C3zsZSPYS4fCnZvPQcvnSKDxyzZydItnaW7fvNJAGlFIg3HPiIPQVpMUbT9Dz/IZ
KLZQsHU/MHbHYcSNiaiWhWpFOuBUFYUl2aCUETFWjPaJ+gx/QHn7MiaY7kLARVwv
lAEsRdNtWOL6idSc3L0CGsbL2UdFemTHAFOhWTmRpEkg1DRYnlQ3Ff19oTyVSl74
sKglqs9Muh4FEpDPFsIh8EywJpDxUonU+he2+NmqiB/yqoNQeMCm+wnUTe+RAgMB
AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQroQ5tfAMo5TZL
9AQRBNUmJP8sLjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEMwQzg0MzNFNzcwQjFCRDIyRkZBNEE3
NjYxNTU2QjRDNzk1NjExNkIwNzIwQTI3NkUwNkQxQzgxRDg5QTU4OC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80QzBDODQzM0U3NzBCMUJEMjJGRkE0QTc2NjE1NTZCNEM3OTU2MTE2QjA3
MjBBMjc2RTA2RDFDODFEODlBNTg4LzAvMkJBMTBFNkQ3QzAzMjhFNTM2NEJGNDA0
MTEwNEQ1MjYyNEZGMkMyRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBswDIMA8EAgAC
MAkDBwQoAQAXwAAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICKJcCAwQmpTANBgkq
hkiG9w0BAQsFAAOCAQEAZfiMPJZlI7SXgL9O3E+yX9/nM8toRl4hkdB1V9Geqd0Q
tsWb9Ls5wA48PWVm7w8jLpnx+JImHZPMZ6qamWOqAqnj79u/bgzyBnSH1RvWmDYP
N8hX/gUZb5seCPppgcFjtdK5hJpxiEv8VjDV+lne2G5CUrCu2HFgG4EdJDUGUc1y
gh3z2LQ7h2rh+9wxpTlekceR7rlmPMyXBDk9xaL+xrKWLgBDeGdq2qUkaU0zvI/V
wkc2koIrlS/Nxy23+fnu+hnaCjcMMemTtimW6RfXzS57zNzTtq0yLCAyaXjinDiu
7gxYUxlWx/u8SGGIW44GAMSIFD+MpbCPMHM6HBD3oA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:57:11 2025 by rpki-client