Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer
File:                     2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer (raw, json)
Hash identifier:          lxT3jWVesuzWM9dBE8xO+zNsjcxHYiwQK5/mOisMyqM=
Subject key identifier:   2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       64406C20431260F39964D973DE4CCDFCC76AD4B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 23:49:21 +0000
Certificate not after:    Tue 03 Feb 2026 23:54:21 +0000
Subordinate resources:    AS: 269884
                          IP: 45.188.216.0/23
                          IP: 2803:f8e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:40:6c:20:43:12:60:f3:99:64:d9:73:de:4c:cd:fc:c7:6a:d4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 23:49:21 2025 GMT
            Not After : Feb  3 23:54:21 2026 GMT
        Subject: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:95:b2:46:37:1c:43:a8:b4:70:ce:c2:29:
                    e6:87:03:5c:42:07:59:18:14:a0:7b:66:1b:d1:3f:
                    a8:8b:54:52:24:1f:e7:d9:40:18:be:26:3c:50:b3:
                    09:c3:42:df:40:c6:12:64:df:8a:e3:ea:24:98:85:
                    5b:a5:76:c1:5a:6e:5a:68:25:ce:0a:9a:7f:51:ae:
                    ec:3c:1d:db:9d:19:09:cf:f8:e0:40:28:47:9b:67:
                    d2:35:c3:84:19:6d:c2:6d:e2:1d:27:f6:28:80:25:
                    1e:7c:9f:c7:a9:27:d3:25:72:95:87:f3:7e:8f:a1:
                    2a:c9:87:0c:e1:c9:1a:93:bf:b0:c8:28:11:d8:f0:
                    c8:91:66:8a:fd:e6:07:95:61:7c:cd:4e:4a:6e:d1:
                    b5:09:eb:ca:ca:4a:04:b5:11:53:a0:63:d1:0c:81:
                    c9:b1:e5:a7:69:bc:42:44:0c:af:a9:e0:b9:ce:d0:
                    96:cb:4b:88:09:c2:a8:cc:55:3e:fa:b3:45:ac:61:
                    e5:ff:90:57:55:a6:08:a9:ad:b0:09:0a:be:e8:ff:
                    ea:19:68:c3:04:20:47:ea:fd:0b:2c:31:62:2c:8c:
                    42:1e:f6:f3:d0:da:9a:81:8e:d5:c0:cc:6b:00:fc:
                    68:7b:3d:5f:ae:5d:10:75:f6:d7:4d:8a:16:29:1d:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.216.0/23
                IPv6:
                  2803:f8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269884

    Signature Algorithm: sha256WithRSAEncryption
         51:02:c2:f5:7f:38:6b:99:18:c9:d5:e9:e9:c1:22:db:c2:fb:
         97:6f:46:05:ef:a9:9e:13:b2:01:f6:03:9e:52:87:02:67:04:
         24:ad:63:b7:37:28:b4:fa:9c:17:91:fb:f0:43:90:86:8c:b3:
         86:71:c2:8d:59:34:be:70:a6:a2:7d:7c:e3:f2:0f:f8:aa:ce:
         74:73:d5:17:c8:cd:4f:9b:1c:3a:bf:19:b7:93:a7:5f:7c:cb:
         cb:61:96:42:d6:94:bb:77:eb:61:e4:e7:5e:64:a5:7d:5c:ae:
         b2:e2:d7:78:7f:07:64:28:24:14:40:ef:23:a8:da:e3:c3:3e:
         0a:05:26:b4:ff:14:d2:89:82:db:be:b9:5c:70:e4:45:37:4a:
         1b:04:30:e8:d5:d7:ca:d9:a4:bf:31:f2:0b:a6:ed:29:88:3d:
         64:bd:b7:67:29:94:ca:09:25:8c:06:4d:d1:b2:a8:e9:27:bb:
         97:60:5b:23:05:c0:bf:b8:c4:76:c3:b5:bb:9d:d5:3f:98:4a:
         ae:b9:47:12:80:e3:4c:bd:d3:b2:8d:e0:b8:42:7b:6a:70:0e:
         4d:20:0b:ab:e0:57:63:43:9b:ef:c9:1d:15:30:e8:8e:06:b9:
         40:4d:ea:51:93:97:e5:31:87:57:e0:3d:bd:95:ab:41:f0:91:
         eb:b6:60:c3
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUZEBsIEMSYPOZZNlz3kzN/Mdq1LMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNTAyMDQyMzQ5MjFaFw0yNjAyMDMyMzU0MjFaMDMxMTAvBgNV
BAMTKDJDN0MxRDNCRDdDMjc3RDIyODZBRjZCNDQ2MUY2QTI3NjQ4NzZBNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeJWyRjccQ6i0cM7CKeaHA1xC
B1kYFKB7ZhvRP6iLVFIkH+fZQBi+JjxQswnDQt9AxhJk34rj6iSYhVuldsFablpo
Jc4Kmn9Rruw8HdudGQnP+OBAKEebZ9I1w4QZbcJt4h0n9iiAJR58n8epJ9MlcpWH
836PoSrJhwzhyRqTv7DIKBHY8MiRZor95geVYXzNTkpu0bUJ68rKSgS1EVOgY9EM
gcmx5adpvEJEDK+p4LnO0JbLS4gJwqjMVT76s0WsYeX/kFdVpgiprbAJCr7o/+oZ
aMMEIEfq/QssMWIsjEIe9vPQ2pqBjtXAzGsA/Gh7PV+uXRB19tdNihYpHd1lAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsfB0718J30ihq
9rRGH2onZIdqXzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjAyMjJGRTM3MDdGQzBFODM1MTBFRUUx
RjhCNDZDQjYxMDBCNzg3QjQ1RDBCMjA5QjYxRjgzNUUwMjFFNUJFNS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8yMDIyMkZFMzcwN0ZDMEU4MzUxMEVFRTFGOEI0NkNCNjEwMEI3ODdCNDVE
MEIyMDlCNjFGODM1RTAyMUU1QkU1LzAvMkM3QzFEM0JEN0MyNzdEMjI4NkFGNkI0
NDYxRjZBMjc2NDg3NkE1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbzYMA0EAgAC
MAcDBQAoA/jgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQePDANBgkqhkiG9w0B
AQsFAAOCAQEAUQLC9X84a5kYydXp6cEi28L7l29GBe+pnhOyAfYDnlKHAmcEJK1j
tzcotPqcF5H78EOQhoyzhnHCjVk0vnCmon184/IP+KrOdHPVF8jNT5scOr8Zt5On
X3zLy2GWQtaUu3frYeTnXmSlfVyusuLXeH8HZCgkFEDvI6ja48M+CgUmtP8U0omC
2765XHDkRTdKGwQw6NXXytmkvzHyC6btKYg9ZL23ZymUygkljAZN0bKo6Se7l2Bb
IwXAv7jEdsO1u53VP5hKrrlHEoDjTL3Tso3guEJ7anAOTSALq+BXY0Ob78kdFTDo
jga5QE3qUZOX5TGHV+A9vZWrQfCR67Zgww==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:21 2025 by rpki-client