Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer
File:                     511EC7ECE8F3FF815535163C5C512E56C1CDA048.cer (raw, json)
Hash identifier:          SESHpgKTcYjxoW8IvU6NDzth73HPrSKo2jxBs5YA4+4=
Subject key identifier:   51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       70B5DB014788812DE1A31A77CD552DA749915C3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 21:58:09 +0000
Certificate not after:    Wed 04 Feb 2026 22:03:09 +0000
Subordinate resources:    IP: 2801:105::/44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b5:db:01:47:88:81:2d:e1:a3:1a:77:cd:55:2d:a7:49:91:5c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 21:58:09 2025 GMT
            Not After : Feb  4 22:03:09 2026 GMT
        Subject: CN=511EC7ECE8F3FF815535163C5C512E56C1CDA048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:73:36:42:ae:56:dd:68:a9:71:5d:5e:fd:
                    26:73:7b:18:0e:8e:73:50:82:7a:58:e3:60:e9:b5:
                    e7:a2:ba:0c:96:37:fb:aa:19:9f:1b:35:5d:82:57:
                    cb:25:19:b0:43:cd:48:24:d9:57:72:4d:a4:2e:f2:
                    fe:aa:37:b8:69:17:e5:d6:08:51:15:9b:1e:9e:c1:
                    78:0f:10:36:85:94:18:88:91:2a:ee:2b:85:1a:79:
                    6b:09:53:ba:05:20:1c:33:e4:c5:db:12:f9:55:e8:
                    e0:c8:2f:c0:1e:b7:b3:94:5e:60:93:fd:d6:db:61:
                    17:59:10:47:51:f5:a1:1d:8a:cd:84:16:88:a4:78:
                    df:ad:ea:e1:e2:3d:9e:fc:d8:a2:1f:ef:17:b3:ef:
                    f5:39:f9:2e:9a:79:d2:c8:29:bc:08:fe:a5:ee:ef:
                    bf:3d:ad:b0:82:d2:91:c8:21:04:99:90:a3:9f:6b:
                    bf:66:9d:fb:ea:d0:39:63:f3:b5:74:f3:06:aa:f0:
                    b7:c8:5b:c5:72:34:78:78:97:5a:a3:ad:4a:6a:40:
                    29:95:f9:79:40:b1:c3:09:c3:3c:ce:aa:71:7c:a3:
                    d1:35:81:2b:31:d6:62:e8:77:38:d0:c4:72:a2:85:
                    ec:b1:8c:b2:e7:e4:f9:25:06:d0:3e:49:75:a0:72:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:1E:C7:EC:E8:F3:FF:81:55:35:16:3C:5C:51:2E:56:C1:CD:A0:48
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6D1CC00427698EA984E9DFC28EAA35240F75A0499336EA446FF34E68ED069736/0/511EC7ECE8F3FF815535163C5C512E56C1CDA048.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:105::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:0e:a1:6e:b9:30:03:e3:2a:45:9d:dd:98:d6:73:04:7e:
         14:7f:07:a6:34:f2:06:99:eb:74:31:a9:9e:31:06:84:08:f9:
         6c:69:0b:a7:31:02:cf:5d:6e:02:4c:1c:98:3d:2e:0a:9e:c2:
         80:e0:06:25:e4:14:cd:a1:4a:fb:9e:fc:d3:5a:23:68:a3:1b:
         cb:b6:c9:41:91:a8:8f:0b:ca:11:a3:08:e4:e7:55:5f:09:3f:
         58:d1:0f:ea:a6:99:16:b7:4d:ec:d2:f6:d3:b8:09:5d:f7:76:
         31:7e:98:ed:e1:bc:59:c4:f3:42:98:d1:70:b4:b9:e4:ee:be:
         12:9b:60:97:40:a1:2a:55:c3:3b:e9:df:e6:90:99:fe:7c:53:
         76:2d:4b:9f:33:47:61:ca:b4:51:c9:4f:d4:1b:f7:b8:d0:88:
         d5:24:ff:37:c9:82:fd:fd:fb:9c:b6:4a:b5:9a:75:5c:01:25:
         f2:f7:f8:ba:69:d8:3c:3f:8c:aa:de:76:3d:56:28:99:d4:88:
         82:af:18:1e:ae:20:b0:f3:77:e8:59:75:8d:2c:bb:87:25:f0:
         da:5d:a5:b6:5f:1c:9a:16:eb:e9:78:aa:8d:1f:09:8b:21:6d:
         23:9d:4b:d0:09:c5:a0:54:bc:99:ad:db:6d:4b:e6:fd:43:eb:
         a0:5e:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:12:27 2025 by rpki-client