Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.cer
File:                     679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.cer (raw, json)
Hash identifier:          iSjEKWddssP3bCnjdyiioN3yHLEVydOGB2jPV1sa+5M=
Subject key identifier:   67:9A:5B:C1:ED:D2:E1:52:90:D4:8A:AE:9B:64:7C:C9:FF:F4:56:24
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       3F465D6F188FD3C77C68D25209FB279F34B1B7C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:57:06 +0000
Certificate not after:    Tue 04 Mar 2025 18:02:06 +0000
Subordinate resources:    AS: 270167
                          IP: 2801:c4:e0::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:46:5d:6f:18:8f:d3:c7:7c:68:d2:52:09:fb:27:9f:34:b1:b7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:57:06 2024 GMT
            Not After : Mar  4 18:02:06 2025 GMT
        Subject: CN=679A5BC1EDD2E15290D48AAE9B647CC9FFF45624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:8c:13:3b:17:18:88:9b:7f:ed:cd:91:45:
                    91:3e:c3:82:14:27:51:2a:9a:6d:90:df:ef:e6:06:
                    05:58:8e:04:de:f7:39:e1:0d:c4:b0:e5:e0:81:e6:
                    44:11:98:ff:99:d7:4e:1b:fa:68:ac:a2:e1:12:a7:
                    21:a4:e9:0b:df:3c:f3:73:4b:fd:f3:ab:f0:08:40:
                    3d:d4:05:11:15:35:15:30:1c:db:1f:a1:30:7b:ab:
                    11:a7:9c:b6:93:5d:7c:e7:1e:21:e9:71:d4:6c:fd:
                    65:1d:90:44:d8:ae:03:a0:96:00:11:b7:05:15:41:
                    67:2b:7d:9c:45:45:a4:2f:84:34:5c:12:52:c2:76:
                    b4:5a:f5:7a:6c:3b:56:d3:b8:5b:1d:11:48:f0:c3:
                    68:3e:f6:d7:33:57:b2:03:36:45:f0:6d:dc:68:82:
                    90:72:53:b8:3f:4a:d0:07:20:b2:da:e7:a8:d9:09:
                    71:f1:c1:67:3d:f4:97:8f:db:b2:2f:8a:3f:c7:9e:
                    09:5c:4b:76:79:7c:13:2a:2a:6d:4d:22:4f:91:f6:
                    32:b1:b9:36:e6:c1:e8:2d:ba:ef:1b:b1:b5:be:0a:
                    26:2a:ce:1a:5f:64:7c:ed:8a:ec:f5:5a:a1:a1:84:
                    5c:f3:ea:cc:f6:79:e3:ce:a6:66:29:94:38:cf:27:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:9A:5B:C1:ED:D2:E1:52:90:D4:8A:AE:9B:64:7C:C9:FF:F4:56:24
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9771838E45C2652D56F1AC16E02C809CA90A8C4E9DF9DCD68223D3BAB9F50488/0/679A5BC1EDD2E15290D48AAE9B647CC9FFF45624.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:e0::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270167

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:a5:85:1a:52:1b:ae:69:7f:cf:16:ac:17:eb:a9:b7:bb:
         4f:bc:e2:37:42:8d:c3:69:0b:49:46:d6:f7:bf:6d:f2:df:18:
         29:64:d0:01:d0:6f:1f:f2:ad:82:19:9a:db:da:de:fd:b7:ee:
         1c:ae:fe:ec:42:19:0d:82:d4:2e:52:8a:58:e2:40:23:21:5f:
         3e:de:cd:cf:5b:1c:ce:aa:01:6c:21:87:18:59:f7:ab:9d:f9:
         aa:6a:d4:7d:a8:aa:de:27:b4:11:15:e3:9c:30:bd:29:bf:80:
         98:03:4e:4e:f3:b9:58:5e:2d:f0:07:a4:ce:24:66:3f:f0:a0:
         e0:24:19:6b:ce:9a:d3:3c:26:e3:fc:78:aa:41:fe:c9:0f:b3:
         20:52:9d:52:6d:eb:16:6e:57:67:b2:ae:27:5c:fd:15:ce:fd:
         34:bf:f9:be:32:97:10:92:ed:2e:c1:18:bd:fd:62:33:bb:45:
         af:df:95:d5:24:c0:12:64:0a:f4:05:56:f9:96:55:91:b5:75:
         2d:76:ee:3f:31:98:ac:22:52:06:b3:70:a0:c3:89:91:1b:1e:
         f4:2d:b2:ac:97:5f:44:45:c9:a5:71:29:a2:6f:67:9c:8b:79:
         fb:5b:ed:44:8c:f7:09:fa:c8:0d:b5:f3:c7:8e:4e:d7:9b:99:
         e2:24:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----