Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
File:                     3097EEAE62A8D1441BC16E818D96E6882345B703.cer (raw, json)
Hash identifier:          4BTGY5XfJxbZ8ATgER2dEMzcdpOaVn8ysyeu7uLdwqU=
Subject key identifier:   30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       141934B64DCA433BAC8E6BF766818EEBD12B5771
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:53:32 +0000
Certificate not after:    Tue 04 Mar 2025 17:58:32 +0000
Subordinate resources:    AS: 28096
                          IP: 190.9.56.0/21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:19:34:b6:4d:ca:43:3b:ac:8e:6b:f7:66:81:8e:eb:d1:2b:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:53:32 2024 GMT
            Not After : Mar  4 17:58:32 2025 GMT
        Subject: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:7a:ef:0d:74:e6:42:74:4d:a0:79:fd:68:
                    5c:e3:38:30:e5:91:29:81:9f:5c:11:22:c8:8f:ce:
                    b2:8a:6c:a6:e5:cc:a2:da:61:03:ed:55:71:60:03:
                    0f:b8:40:a5:7b:5b:7d:38:8c:bb:55:a0:ed:da:35:
                    92:ac:b9:6f:f1:4d:d3:8e:c1:c4:3a:1f:9e:a2:70:
                    69:08:1f:91:e6:42:97:e0:bd:f9:a6:09:7b:1e:2e:
                    cf:a6:2e:71:47:86:ed:c7:fc:ad:0c:8d:06:ab:e0:
                    64:34:e9:30:65:6e:02:64:bb:90:cd:0e:8c:31:bc:
                    7e:91:bb:01:35:1b:23:3a:e9:e9:68:5c:4d:1b:02:
                    7c:21:84:a3:ec:fb:89:23:3f:62:77:b5:5b:6a:cf:
                    e6:53:b6:9b:76:45:b4:bf:36:b8:38:eb:db:a9:e1:
                    6f:3b:3f:23:a4:80:91:d7:04:dc:a6:15:11:b7:a7:
                    17:3e:bb:e6:ca:92:04:4e:ff:ac:2c:0b:bd:c3:18:
                    51:df:56:50:f1:18:22:37:92:83:c2:fa:5c:f3:fc:
                    8a:f1:3a:64:40:59:ff:09:ac:5a:b0:74:30:ca:b6:
                    54:86:90:48:f0:72:6b:c3:ef:ea:9e:ad:17:01:ef:
                    6b:c5:23:4f:ec:03:d2:9a:3a:45:c3:23:2a:32:54:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.56.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28096

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:c8:0c:d7:43:1b:48:b0:36:6f:a1:96:ab:e7:f7:2f:15:
         91:f0:b3:89:05:28:ba:a3:33:7c:f1:48:da:43:15:cc:23:9c:
         ef:17:54:5c:b4:e1:d6:0c:4f:e5:9f:9d:53:b0:94:f6:29:93:
         8d:5d:34:2b:c9:cd:26:60:1c:6d:11:fe:f9:e1:92:04:9e:62:
         90:57:2b:c8:f9:52:cc:4a:40:50:87:da:85:dd:4d:cc:e3:3e:
         8c:f2:9b:c1:62:5a:2b:a7:0c:1d:be:f9:c6:56:02:72:75:b8:
         8e:9c:92:7e:ff:e7:80:bd:e5:3c:8a:ce:9d:09:a4:10:da:97:
         fe:d2:2b:10:df:ee:47:a9:2c:15:31:44:c2:9d:35:b4:4f:e5:
         48:17:cf:fb:40:99:81:22:3b:90:b5:e1:23:6a:59:65:bf:05:
         f9:71:d2:9d:61:e5:59:82:69:54:df:78:fe:29:2f:cf:d0:3e:
         e5:f0:ed:f0:09:98:9a:37:ca:b1:e7:b9:86:e6:0d:55:49:0a:
         c0:57:43:70:d1:7e:f7:81:23:10:e4:b7:0d:5a:bd:ea:29:ae:
         0e:f2:2b:31:64:02:63:ad:c0:c1:bc:49:66:52:a1:37:0c:40:
         40:9b:b9:30:6c:d5:75:a5:1e:b6:f7:75:51:68:a2:0f:dc:36:
         08:31:b6:4c
-----BEGIN CERTIFICATE-----
MIIGlTCCBX2gAwIBAgIUFBk0tk3KQzusjmv3ZoGO69ErV3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMDUxNzUzMzJaFw0yNTAzMDQxNzU4MzJaMDMxMTAvBgNV
BAMTKDMwOTdFRUFFNjJBOEQxNDQxQkMxNkU4MThEOTZFNjg4MjM0NUI3MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Z3rvDXTmQnRNoHn9aFzjODDl
kSmBn1wRIsiPzrKKbKblzKLaYQPtVXFgAw+4QKV7W304jLtVoO3aNZKsuW/xTdOO
wcQ6H56icGkIH5HmQpfgvfmmCXseLs+mLnFHhu3H/K0MjQar4GQ06TBlbgJku5DN
DowxvH6RuwE1GyM66eloXE0bAnwhhKPs+4kjP2J3tVtqz+ZTtpt2RbS/Nrg469up
4W87PyOkgJHXBNymFRG3pxc+u+bKkgRO/6wsC73DGFHfVlDxGCI3koPC+lzz/Irx
OmRAWf8JrFqwdDDKtlSGkEjwcmvD7+qerRcB72vFI0/sA9KaOkXDIyoyVCMfAgMB
AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwl+6uYqjRRBvB
boGNluaII0W3AzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzBCOUQxMTFDMzY3QzU3QzEzRTJDMjZC
NjFFQjlGMDVGNjYyQjIzQkU1M0Y5RTc5MzgxMERFMTYxMTU2NkQ2Qy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zMEI5RDExMUMzNjdDNTdDMTNFMkMyNkI2MUVCOUYwNUY2NjJCMjNCRTUz
RjlFNzkzODEwREUxNjExNTY2RDZDLzAvMzA5N0VFQUU2MkE4RDE0NDFCQzE2RTgx
OEQ5NkU2ODgyMzQ1QjcwMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvgk4MBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAm3AMA0GCSqGSIb3DQEBCwUAA4IBAQBUXcgM10Mb
SLA2b6GWq+f3LxWR8LOJBSi6ozN88UjaQxXMI5zvF1RctOHWDE/ln51TsJT2KZON
XTQryc0mYBxtEf754ZIEnmKQVyvI+VLMSkBQh9qF3U3M4z6M8pvBYlorpwwdvvnG
VgJydbiOnJJ+/+eAveU8is6dCaQQ2pf+0isQ3+5HqSwVMUTCnTW0T+VIF8/7QJmB
IjuQteEjalllvwX5cdKdYeVZgmlU33j+KS/P0D7l8O3wCZiaN8qx57mG5g1VSQrA
V0Nw0X73gSMQ5LcNWr3qKa4O8isxZAJjrcDBvElmUqE3DEBAm7kwbNV1pR6293VR
aKIP3DYIMbZM
-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:37 2024 by rpki-client on console-fra.rpki-client.org