Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
File:                     30B067F4705EDF16C63ED51B9F8946787B07F237.cer (raw, json)
Hash identifier:          nLkgazDamEvmA7Db/uZbpQ+4KjweDl/5dMYBd0BV+6E=
Subject key identifier:   30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       0CFE1765DDF397C80EF37BB2864301AF39030BAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 17:55:09 +0000
Certificate not after:    Mon 17 Mar 2025 18:00:09 +0000
Subordinate resources:    AS: 6458
                          AS: 13682
                          AS: 14754
                          IP: 181.209.128.0/17
                          IP: 186.151.0.0 -- 186.151.93.255
                          IP: 186.151.95.0/24
                          IP: 186.151.112.0 -- 186.151.255.255
                          IP: 190.56.0.0/16
                          IP: 190.143.128.0 -- 190.143.239.255
                          IP: 190.148.0.0 -- 190.148.84.255
                          IP: 190.148.86.0 -- 190.149.133.255
                          IP: 190.149.135.0 -- 190.149.151.255
                          IP: 190.149.153.0 -- 190.149.255.255
                          IP: 200.6.192.0/18
                          IP: 200.119.128.0 -- 200.119.150.255
                          IP: 200.119.154.0 -- 200.119.183.255
                          IP: 201.216.128.0/18
                          IP: 216.230.128.0/19
                          IP: 2800:98::/32
                          IP: 2800:890::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:17:65:dd:f3:97:c8:0e:f3:7b:b2:86:43:01:af:39:03:0b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar 18 17:55:09 2024 GMT
            Not After : Mar 17 18:00:09 2025 GMT
        Subject: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:d7:7e:80:a0:0e:08:46:9d:76:10:aa:f1:
                    3f:c8:49:41:cb:97:fc:78:ff:75:3f:0f:8e:64:74:
                    87:d5:71:5f:c5:48:16:f7:2d:45:19:7f:69:1a:b0:
                    c1:78:76:23:a0:41:8d:12:d4:f0:bf:22:49:6d:de:
                    c2:b7:31:6e:b3:10:a6:48:09:d9:5b:84:11:6f:24:
                    53:c9:11:35:d6:9c:15:db:cf:fe:49:61:d9:af:42:
                    4d:0f:9b:c4:56:c1:0d:65:f7:c7:71:d1:ca:04:13:
                    58:f9:03:93:e9:62:28:ac:d9:4a:19:ee:21:25:4e:
                    7f:1a:5a:10:84:6f:f9:bf:bd:8f:0a:38:31:79:f5:
                    df:34:dd:58:d6:78:80:10:59:d1:be:90:47:92:ed:
                    0e:70:bb:09:b1:fe:1c:4f:bf:f7:82:48:5a:27:85:
                    67:cc:f3:17:3d:4f:c0:10:56:13:79:42:84:4f:6e:
                    69:07:21:e4:3a:f8:be:51:b2:48:07:88:2e:c5:06:
                    61:02:ab:da:c6:30:27:31:8f:bb:01:3e:03:ff:ca:
                    5b:4d:9a:6b:86:87:07:de:7b:d9:53:25:f5:f1:72:
                    d6:57:16:93:24:92:6f:15:50:65:9a:6b:51:56:b9:
                    ae:bb:31:ae:14:fb:3a:b5:0d:65:43:87:8f:30:b7:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.128.0/17
                  186.151.0.0-186.151.93.255
                  186.151.95.0/24
                  186.151.112.0-186.151.255.255
                  190.56.0.0/16
                  190.143.128.0-190.143.239.255
                  190.148.0.0-190.148.84.255
                  190.148.86.0-190.149.133.255
                  190.149.135.0-190.149.151.255
                  190.149.153.0-190.149.255.255
                  200.6.192.0/18
                  200.119.128.0-200.119.150.255
                  200.119.154.0-200.119.183.255
                  201.216.128.0/18
                  216.230.128.0/19
                IPv6:
                  2800:98::/32
                  2800:890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6458
                  13682
                  14754

    Signature Algorithm: sha256WithRSAEncryption
         b9:41:6f:0a:a9:52:a3:cc:e3:b3:fe:7f:1b:5a:a4:5b:32:4e:
         fa:72:34:b0:10:b5:28:4e:c3:3c:3c:3d:54:37:34:49:95:e7:
         e0:eb:73:d9:3e:b4:b4:65:0f:f1:84:85:15:05:35:a4:6f:c9:
         00:7d:e5:74:35:d8:ba:c6:d3:12:a6:92:a3:d6:ec:9e:59:d3:
         46:0b:7e:76:d6:4f:cb:c1:95:15:13:05:be:2e:86:12:87:b2:
         8a:c3:28:9a:02:de:e9:87:7f:57:f8:35:12:17:b3:e6:f4:8c:
         ac:88:ee:6a:d2:f1:e3:32:9c:ed:5c:b1:63:32:c1:84:12:3f:
         8e:20:82:f7:5c:ae:47:b5:c9:79:7e:1a:bf:03:3d:40:24:b4:
         70:22:b1:a0:36:32:5b:5b:38:e8:4b:9e:92:d6:2a:d9:34:7b:
         14:84:cf:54:f3:76:a4:f3:ce:69:da:c3:46:df:e5:be:c9:2c:
         97:65:93:44:f4:33:28:0b:38:73:43:34:82:36:1e:78:83:f9:
         6b:2a:a5:83:12:f4:b4:88:bc:d8:d1:b9:8b:42:f8:be:93:07:
         f0:0c:d6:e0:02:93:7e:6e:91:32:99:47:1c:db:f3:26:4e:f3:
         ae:d7:dc:f3:e4:cf:d3:bf:f8:a8:e8:50:09:a9:6d:27:86:e8:
         9a:be:85:c1
-----BEGIN CERTIFICATE-----
MIIHTzCCBjegAwIBAgIUDP4XZd3zl8gO83uyhkMBrzkDC6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMTgxNzU1MDlaFw0yNTAzMTcxODAwMDlaMDMxMTAvBgNV
BAMTKDMwQjA2N0Y0NzA1RURGMTZDNjNFRDUxQjlGODk0Njc4N0IwN0YyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJdd+gKAOCEaddhCq8T/ISUHL
l/x4/3U/D45kdIfVcV/FSBb3LUUZf2kasMF4diOgQY0S1PC/Iklt3sK3MW6zEKZI
CdlbhBFvJFPJETXWnBXbz/5JYdmvQk0Pm8RWwQ1l98dx0coEE1j5A5PpYiis2UoZ
7iElTn8aWhCEb/m/vY8KODF59d803VjWeIAQWdG+kEeS7Q5wuwmx/hxPv/eCSFon
hWfM8xc9T8AQVhN5QoRPbmkHIeQ6+L5RskgHiC7FBmECq9rGMCcxj7sBPgP/yltN
mmuGhwfee9lTJfXxctZXFpMkkm8VUGWaa1FWua67Ma4U+zq1DWVDh48wt1dBAgMB
AAGjggRZMIIEVTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwsGf0cF7fFsY+
1RufiUZ4ewfyNzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1
OUNGMDJDNzI4N0JFMkUwMjM5NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3QkUyRTAyMzk3
MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFC
OUY4OTQ2Nzg3QjA3RjIzNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTCBpAQCAAEwgZ0DBAe10YAw
CwMDALqXAwQBupdcAwQAupdfMAsDBAS6l3ADAwO6kAMDAL44MAwDBAe+j4ADBAS+
j+AwCwMDAr6UAwQAvpRUMAwDBAG+lFYDBAG+lYQwDAMEAL6VhwMEA76VkDALAwQA
vpWZAwMBvpQDBAbIBsAwDAMEB8h3gAMEAMh3ljAMAwQByHeaAwQDyHewAwQGydiA
AwQF2OaAMBQEAgACMA4DBQAoAACYAwUAKAAIkDAhBggrBgEFBQcBCAEB/wQSMBCg
DjAMAgIZOgICNXICAjmiMA0GCSqGSIb3DQEBCwUAA4IBAQC5QW8KqVKjzOOz/n8b
WqRbMk76cjSwELUoTsM8PD1UNzRJlefg63PZPrS0ZQ/xhIUVBTWkb8kAfeV0Ndi6
xtMSppKj1uyeWdNGC3521k/LwZUVEwW+LoYSh7KKwyiaAt7ph39X+DUSF7Pm9Iys
iO5q0vHjMpztXLFjMsGEEj+OIIL3XK5Htcl5fhq/Az1AJLRwIrGgNjJbWzjoS56S
1irZNHsUhM9U83ak885p2sNG3+W+ySyXZZNE9DMoCzhzQzSCNh54g/lrKqWDEvS0
iLzY0bmLQvi+kwfwDNbgApN+bpEymUcc2/MmTvOu19zz5M/Tv/io6FAJqW0nhuia
voXB
-----END CERTIFICATE-----
Generated at Sat May 18 17:19:20 2024 by rpki-client on console-ams.rpki-client.org