Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer
File:                     77E2A219521149A9ACFA935AA2B306003A25D8B7.cer (raw, json)
Hash identifier:          eAmKNBBiZf81Zv30WZuvNZ2IaZ4mQ/bnjpoyttAQBAY=
Subject key identifier:   77:E2:A2:19:52:11:49:A9:AC:FA:93:5A:A2:B3:06:00:3A:25:D8:B7
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       68C736FF1851DBD8DE4BE76F46DA9016B1172DE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:39:22 +0000
Certificate not after:    Tue 04 Mar 2025 17:44:22 +0000
Subordinate resources:    AS: 269738
                          IP: 45.181.224.0/22
                          IP: 2803:e960::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:36:ff:18:51:db:d8:de:4b:e7:6f:46:da:90:16:b1:17:2d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=77E2A219521149A9ACFA935AA2B306003A25D8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:6a:d6:99:36:4e:cc:f6:ec:1c:65:99:58:
                    3f:14:5f:1e:47:89:f6:f7:72:e7:13:75:7f:d4:64:
                    62:4c:e2:a9:3b:52:2e:6c:eb:02:ec:f6:83:c1:63:
                    c6:71:01:f8:d3:86:dc:b7:fb:6a:fe:da:6b:1b:f7:
                    70:5a:0d:53:fb:84:3c:23:ce:75:17:5d:d0:97:7a:
                    b5:76:73:c2:53:b1:ca:11:ac:8d:ad:23:0d:c5:b6:
                    5b:bb:f9:48:37:15:a0:22:1d:3c:59:9d:3c:e9:98:
                    2f:94:79:36:de:4b:5e:30:83:41:0a:50:ed:f5:b8:
                    83:df:fd:68:d1:ad:23:16:2f:74:13:eb:cb:8d:7a:
                    3a:b6:0e:0a:a1:58:d7:e1:e8:75:70:48:e9:a2:b6:
                    38:19:d0:98:4d:0a:c1:71:23:e8:db:cb:62:da:1a:
                    71:ae:8f:7c:0e:f2:0f:9e:de:68:ca:7a:38:6e:ac:
                    d3:c1:f3:f5:15:87:9f:47:b4:6a:d7:aa:6b:7c:30:
                    b2:81:a9:75:63:82:29:d3:5d:01:af:7a:f7:ba:d8:
                    cd:c0:70:60:8c:12:41:e7:9a:0c:a3:25:e3:e9:f6:
                    af:29:cd:fb:d7:95:b0:e4:35:84:06:92:f6:8c:4a:
                    23:70:fb:1f:c1:a0:8a:f5:c0:f9:34:4c:46:83:54:
                    9c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:E2:A2:19:52:11:49:A9:AC:FA:93:5A:A2:B3:06:00:3A:25:D8:B7
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.224.0/22
                IPv6:
                  2803:e960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269738

    Signature Algorithm: sha256WithRSAEncryption
         d5:75:81:63:33:fb:a2:b7:02:28:2c:f8:bf:cc:31:d1:84:03:
         b0:63:76:a1:88:8c:f6:b5:bc:76:f8:32:c1:f2:f1:5c:ff:d8:
         17:6d:2b:e6:6b:29:a5:6b:1f:25:1d:ef:a0:8e:58:8e:d5:ac:
         06:45:eb:0d:34:62:7b:cf:a9:00:33:a6:da:aa:bc:b3:0c:75:
         89:b5:ca:fb:4f:8f:f5:e1:cc:dd:51:01:15:23:2b:30:a9:86:
         ca:a1:18:4d:72:8f:05:cd:7a:67:df:40:9a:b8:99:06:79:ad:
         f3:b1:b9:40:43:d7:d1:ad:22:11:ec:d6:cf:de:ab:c0:6e:03:
         fd:e2:60:53:bb:5f:95:86:b5:6d:8a:b5:54:df:3c:9e:52:67:
         45:54:e8:04:c2:1d:79:01:23:16:7d:08:aa:87:f2:01:4f:34:
         47:f7:51:b4:c9:29:fd:80:16:95:71:6b:7c:e8:52:28:31:ee:
         67:02:43:d7:8d:5a:43:2b:4c:52:1b:43:23:e0:28:94:40:0b:
         49:01:2e:67:61:5f:d9:5c:50:8b:e1:da:a3:aa:5a:49:4d:a4:
         26:e4:e2:b9:9c:08:87:3a:f7:04:77:b3:e9:a2:86:b6:7d:73:
         6b:35:6c:88:aa:f4:a2:b7:62:67:a3:82:f9:0b:55:d0:f1:07:
         d4:92:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:09 2024 by rpki-client on console-fra.rpki-client.org