Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
File:                     3C3B7B469CAC485C79640430F65FB7E54F99A890.cer (raw, json)
Hash identifier:          G7XpTjM8rNSio4y6g4AmkRzlwKo6gEsXJ29HbKWZ38A=
Subject key identifier:   3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       69CC0B81DE831E362DC9497621E9A794B125F683
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 15:29:25 +0000
Certificate not after:    Wed 04 Feb 2026 15:34:25 +0000
Subordinate resources:    AS: 272026
                          IP: 167.250.236.0/23
                          IP: 177.11.254.0/23
                          IP: 2803:6510::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cc:0b:81:de:83:1e:36:2d:c9:49:76:21:e9:a7:94:b1:25:f6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 15:29:25 2025 GMT
            Not After : Feb  4 15:34:25 2026 GMT
        Subject: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:d9:02:1e:35:b7:9d:a4:2d:91:56:ff:9c:
                    39:e7:17:d0:22:d1:8e:fa:18:3d:bc:d8:a1:05:67:
                    27:50:2a:eb:cc:96:ee:41:8a:f3:99:de:93:b4:55:
                    13:05:7f:87:6f:73:0c:aa:d6:f7:17:30:8e:3f:ba:
                    44:74:52:41:fc:3f:28:16:6b:5f:61:23:15:13:5e:
                    f7:df:6e:09:22:cd:a9:8f:a9:ca:42:81:e0:c2:cd:
                    0c:86:e2:ff:3d:6e:38:42:23:d3:d7:b7:c1:c8:c7:
                    55:b3:ed:2f:55:2e:b0:df:70:e5:ae:ad:89:83:ae:
                    3e:12:32:2c:95:c8:a8:76:d1:7b:b9:61:04:c7:79:
                    d3:2e:42:b2:93:e1:b9:95:7e:65:40:a5:ff:8e:3b:
                    25:77:99:70:65:e9:d0:8d:f2:d4:9a:49:cb:fa:e5:
                    1c:c8:ad:4d:76:2f:22:18:fd:26:f9:51:b2:20:6b:
                    c0:61:34:4e:7d:40:0a:dd:6c:f8:ae:46:59:57:d9:
                    f6:7b:11:6b:aa:4c:97:9a:77:d0:4a:2c:7c:91:d0:
                    1e:ae:4a:4e:40:db:d1:ce:25:3d:3e:ed:2e:61:db:
                    5e:68:4e:40:23:31:fd:fd:d0:65:6b:5b:4c:a2:67:
                    12:9e:9e:73:7c:ea:8e:81:ed:96:25:d7:ff:84:12:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/23
                  177.11.254.0/23
                IPv6:
                  2803:6510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272026

    Signature Algorithm: sha256WithRSAEncryption
         18:39:c4:5a:35:e3:be:04:33:e6:db:e1:d7:47:ef:92:a4:f9:
         da:42:83:b4:d2:80:ee:23:f9:ad:a2:ad:eb:ad:45:a1:f1:90:
         37:dd:64:10:22:b7:cd:af:4d:14:9c:f8:94:69:a3:3e:c4:1a:
         c4:49:79:b2:da:45:94:70:b6:2f:cf:fa:1c:82:91:57:fa:88:
         be:6f:1f:15:1f:0f:8e:22:68:91:a7:85:ee:e4:e5:09:81:75:
         4a:5b:f7:c3:85:33:89:74:1d:f2:08:8d:e4:50:99:22:49:f6:
         41:ef:2f:6f:c8:c8:e0:d7:66:96:19:ee:a4:a7:97:c7:b2:a6:
         33:c6:c4:45:bb:fb:79:ec:a1:c7:72:d1:ae:65:af:b0:d3:4d:
         2c:47:31:9a:c7:3f:ef:22:50:35:85:0d:53:d0:02:92:cf:a4:
         c8:cf:ea:92:58:be:2c:87:eb:7f:ed:c9:1d:00:4a:27:88:e7:
         49:e9:9e:ff:71:96:59:a3:8f:70:13:13:f8:90:8e:22:10:fb:
         82:e8:67:80:69:c2:f4:9e:49:21:a3:e4:f8:ca:93:c6:5c:8b:
         12:be:28:c2:ec:c5:5f:38:5b:84:ef:d6:7b:15:e6:68:4e:2b:
         14:7b:0b:af:52:60:1f:26:dc:f6:00:01:d8:47:87:0e:1c:be:
         71:9b:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:57 2025 by rpki-client