Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.cer
File:                     81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.cer (raw, json)
Hash identifier:          tTDPdTVSpxRMBm6iPLKUvMf2NJ4bI+X6T1B7lpmbxTY=
Subject key identifier:   81:DE:98:10:99:4A:B4:E2:D0:AC:7C:40:2F:FE:DA:14:C6:FD:92:C1
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       241E714229237781BE594442D0B86455AF875255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:06:17 +0000
Certificate not after:    Tue 04 Mar 2025 18:11:17 +0000
Subordinate resources:    AS: 270184
                          IP: 2801:c4:38::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1e:71:42:29:23:77:81:be:59:44:42:d0:b8:64:55:af:87:52:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:06:17 2024 GMT
            Not After : Mar  4 18:11:17 2025 GMT
        Subject: CN=81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:0b:bd:be:b8:5c:27:91:ef:69:15:3c:ed:
                    97:31:8e:1d:7f:03:cc:db:ee:42:19:d4:5b:30:64:
                    32:7c:17:71:df:b6:77:47:b3:79:84:c8:8a:e5:b3:
                    da:dd:95:19:d3:1e:34:29:c0:f7:50:bb:70:c0:cc:
                    2b:d4:f6:5d:47:30:86:c3:f0:71:30:b3:03:5c:fb:
                    59:18:73:28:e3:98:96:b3:4c:28:3a:40:2d:ac:f9:
                    f4:39:bf:b4:76:2e:3a:5b:3e:48:9c:5b:c9:8f:66:
                    d1:27:c4:63:a0:ef:10:18:61:eb:f8:64:18:b3:bf:
                    d5:f0:03:4e:dd:87:09:9d:f6:52:55:e0:1a:35:1c:
                    af:de:42:35:f2:ce:cc:8b:c9:4f:3e:b8:3a:b6:b5:
                    e3:62:94:35:aa:db:35:0f:e2:94:aa:44:a5:4f:5d:
                    4d:3c:1c:05:04:83:05:74:53:8d:b5:30:88:bd:fb:
                    c2:fe:9d:d2:8e:78:c4:06:cb:d5:ff:52:34:08:a4:
                    23:9a:82:10:48:23:0c:f4:81:a7:60:89:e5:10:ad:
                    6a:f8:15:75:2c:48:81:9f:ff:64:79:d1:e1:68:4e:
                    06:5a:ed:71:e7:93:0b:6d:47:e6:2d:2f:8e:d3:57:
                    c6:4a:ac:3f:95:c3:7d:4b:19:9d:27:61:e2:95:6c:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:DE:98:10:99:4A:B4:E2:D0:AC:7C:40:2F:FE:DA:14:C6:FD:92:C1
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22C112579C6A167E2D6582C57BDE20DCEC6B5E89CCDE3AAE67F926DA2B012FAC/0/81DE9810994AB4E2D0AC7C402FFEDA14C6FD92C1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:38::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270184

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:33:a0:63:84:ef:ac:c9:22:a2:74:4f:ba:a5:f2:c1:cc:
         a7:d1:e4:dd:7a:5c:dd:6d:a3:ba:a6:06:85:0f:44:36:d2:8a:
         b8:8d:10:e4:99:74:12:10:1c:cc:63:a1:48:b4:30:f5:58:ff:
         b2:7a:2c:cd:e6:34:8d:13:f9:78:7d:ed:5e:af:66:70:17:fb:
         dd:49:5b:67:02:27:17:c5:cd:f7:bd:2a:e6:3c:09:7f:9d:08:
         71:74:7d:c0:3d:6e:fe:e6:77:67:2b:b6:c2:37:cb:63:17:9a:
         d8:b5:ea:93:f9:d0:d0:0a:f8:3c:ec:c1:64:fa:c7:87:9e:94:
         8d:42:3c:45:ee:77:e2:77:c7:2e:e5:04:15:f9:5e:49:03:29:
         0d:8b:dc:7b:3e:af:b6:b2:6f:6f:a1:32:e7:aa:d9:fc:91:06:
         9f:66:7a:d5:ee:d9:af:96:58:a9:a0:5e:b0:35:2d:bb:54:dd:
         bf:d9:41:94:ff:2a:cf:57:09:3e:a1:ea:ce:41:a8:f3:67:7c:
         c3:13:73:b8:05:61:88:40:f0:31:fe:8c:b5:6f:59:cb:7f:52:
         7c:7f:74:13:5a:b0:87:2b:c3:31:51:98:e6:07:39:fa:20:35:
         62:e5:49:fe:cc:34:35:37:14:b5:9b:a2:2a:e2:4a:13:9f:5a:
         51:74:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----