Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64BC48E3A6135CF82F39FBD21751AF299756F257.cer
File:                     64BC48E3A6135CF82F39FBD21751AF299756F257.cer (raw, json)
Hash identifier:          8wyGt7Hf0wFAky7h4/C0DyzuU3HsZpqrLaDLs7W/k7s=
Subject key identifier:   64:BC:48:E3:A6:13:5C:F8:2F:39:FB:D2:17:51:AF:29:97:56:F2:57
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       2E624A5CAC2972B04D4DD4B3858F340808676951
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Aug 2024 03:15:01 +0000
Certificate not after:    Wed 06 Aug 2025 03:20:01 +0000
Subordinate resources:    AS: 273889
                          IP: 2803:e350::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:62:4a:5c:ac:29:72:b0:4d:4d:d4:b3:85:8f:34:08:08:67:69:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Aug  7 03:15:01 2024 GMT
            Not After : Aug  6 03:20:01 2025 GMT
        Subject: CN=64BC48E3A6135CF82F39FBD21751AF299756F257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:14:ae:8c:4d:37:06:2f:4f:e1:67:9a:68:
                    2b:6b:e0:40:65:db:59:9d:fa:8e:9f:ab:4b:36:12:
                    b1:2c:cb:b3:7b:bf:f1:23:00:e0:79:0a:15:a3:8e:
                    de:dd:f0:85:09:3b:d2:81:d1:f5:45:50:af:26:9b:
                    d6:5f:75:14:6e:05:d9:7f:cd:62:d5:ad:ed:0d:55:
                    d2:cb:c7:d3:54:cc:d9:81:46:6d:ec:29:4a:bd:5d:
                    78:da:bc:0b:9f:60:6f:30:d5:c3:a4:e2:64:b0:5e:
                    ce:b9:1a:bd:c8:e6:53:97:dc:fc:b3:da:9b:7a:4f:
                    95:8e:de:ee:3c:d2:f2:c0:18:71:3e:9e:9b:52:da:
                    1f:8b:5f:bd:82:d1:78:dc:45:16:30:33:17:79:d5:
                    aa:e3:47:41:74:68:a7:63:f3:70:6c:f5:1c:f1:17:
                    b0:3e:59:86:d9:2c:08:c8:0d:20:1a:58:35:14:15:
                    0d:f3:19:19:96:4e:36:c7:b8:45:32:4f:35:6d:72:
                    62:71:0b:9e:1a:ed:e1:d8:39:de:0a:c5:19:90:ab:
                    a0:b3:c2:fa:03:d1:d8:73:78:70:fc:72:d2:e8:a9:
                    55:52:c4:74:50:2f:92:87:bf:61:d5:b0:6b:b1:53:
                    0b:1e:64:94:30:8b:e9:f5:f2:dc:46:c8:b2:ce:5b:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:BC:48:E3:A6:13:5C:F8:2F:39:FB:D2:17:51:AF:29:97:56:F2:57
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273889

    Signature Algorithm: sha256WithRSAEncryption
         ac:6d:62:a8:84:4f:cc:09:8b:a6:66:dd:ab:fb:bc:2f:02:a3:
         48:6b:e3:91:3d:37:ba:8e:8c:fd:03:d6:22:e2:a7:95:f6:3d:
         df:22:f3:d1:b3:56:a6:b3:58:7a:dc:41:7d:c8:ce:b6:4f:9b:
         88:8e:8e:17:35:6a:e2:e5:f8:b9:d3:df:a9:bf:9e:74:54:a0:
         bc:4d:02:9c:f1:92:a0:f4:b9:bb:1f:51:5d:30:69:cb:04:2f:
         ff:ec:f3:8b:9e:9b:b0:14:ae:be:8d:da:77:e8:32:a8:02:e4:
         d1:a9:1c:b1:bc:a3:81:a7:9c:b3:e6:d0:02:1e:ad:98:91:56:
         6d:16:1c:18:4a:2b:ee:36:0e:83:73:1f:eb:e4:16:5c:84:41:
         1f:cf:85:85:2c:d1:ca:f1:ae:1f:1c:b4:71:8e:3a:0b:79:25:
         50:dd:3b:28:ac:18:d5:e5:2d:dd:4d:83:b5:b4:63:db:46:57:
         70:7d:9a:2a:79:ba:30:e9:0d:a4:52:55:5b:7d:af:01:74:bf:
         89:fa:f9:bf:1f:ee:9d:df:1f:45:06:77:2e:5f:51:b5:05:81:
         32:54:3f:4d:eb:27:b7:b2:b6:83:e8:a7:11:83:c6:18:19:18:
         bd:8d:4e:37:5f:7e:4e:fe:40:1f:85:34:47:c7:15:09:ed:69:
         02:29:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----