Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
File:                     822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer (raw, json)
Hash identifier:          +/bzz9NIQZH+MXc8kOBCasT/8hCwqWifcy4p9S64Sa0=
Subject key identifier:   82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       3497A7C1CF1A22DC0A66112A1872CDEA03B9BCA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:15:48 +0000
Certificate not after:    Tue 04 Mar 2025 18:20:48 +0000
Subordinate resources:    AS: 14522
                          IP: 181.175.0.0/16
                          IP: 186.66.0.0/16
                          IP: 186.68.0.0/14
                          IP: 190.10.128.0/17
                          IP: 190.154.0.0/15
                          IP: 200.25.128.0/18
                          IP: 200.63.192.0/18
                          IP: 200.69.160.0/19
                          IP: 201.217.64.0/18
                          IP: 2800:9a0::/29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Jul 2024 18:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:97:a7:c1:cf:1a:22:dc:0a:66:11:2a:18:72:cd:ea:03:b9:bc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:15:48 2024 GMT
            Not After : Mar  4 18:20:48 2025 GMT
        Subject: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:f0:b9:be:8e:88:85:2c:8e:51:86:39:b2:
                    99:1f:d5:4c:a5:39:b7:c8:eb:c2:8b:a6:08:aa:71:
                    0f:5d:fd:0e:f2:76:bc:26:6c:ab:94:20:7c:2d:86:
                    4c:23:50:e7:6f:5b:13:c3:02:ab:e5:17:69:5d:66:
                    6e:78:ed:d9:f9:6b:fe:5a:e8:31:3c:0c:76:2f:4c:
                    87:31:d2:db:35:da:f7:2f:f8:51:31:09:4c:9a:c3:
                    6f:69:2d:f8:8e:0f:62:23:c0:25:37:d9:7e:ac:86:
                    4c:a1:79:35:52:d2:2e:5d:3b:23:e3:dd:08:cf:5b:
                    3b:e9:70:e0:5b:d4:92:65:4d:76:b4:c0:66:07:d9:
                    79:c4:ec:5b:f2:7c:60:be:09:38:0e:be:71:e0:0a:
                    cc:08:44:a6:33:e7:b5:34:a3:dc:bf:fb:c4:42:1d:
                    95:0e:d3:10:8b:ae:d2:69:df:c0:40:d7:d2:d9:ee:
                    50:40:46:2c:19:10:d3:c9:ed:5e:74:08:04:9b:1d:
                    1f:ea:a8:24:9c:7e:82:5e:b4:3a:95:0d:ce:98:3f:
                    79:21:b9:88:17:c1:2f:28:bb:c9:d5:27:90:3a:44:
                    5d:8b:e8:95:c8:19:d9:88:d2:68:5e:a8:96:93:2c:
                    ab:7a:85:84:38:f7:20:25:0f:e8:50:1f:38:d3:6e:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.175.0.0/16
                  186.66.0.0/16
                  186.68.0.0/14
                  190.10.128.0/17
                  190.154.0.0/15
                  200.25.128.0/18
                  200.63.192.0/18
                  200.69.160.0/19
                  201.217.64.0/18
                IPv6:
                  2800:9a0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14522

    Signature Algorithm: sha256WithRSAEncryption
         af:74:24:3c:a4:2f:5f:5a:7f:fe:13:07:00:3c:1e:2d:7a:f6:
         c2:0d:9f:c0:53:97:1f:b2:29:e8:88:96:71:a9:83:bf:e5:83:
         42:90:ba:4f:4b:6a:1d:a9:30:3b:04:a5:e9:72:5f:e7:13:c6:
         38:01:72:79:31:61:27:df:a7:94:43:7b:ae:09:54:d2:11:64:
         87:b0:6a:dc:08:70:b3:0c:e4:4e:c8:14:ad:9f:54:66:ca:4e:
         2f:07:0e:74:24:94:b0:0b:a6:b3:fe:f0:ff:ab:ca:e3:51:7c:
         6f:d8:40:2f:57:21:85:73:74:8e:e4:75:e2:56:ba:54:9f:22:
         08:18:7d:62:d2:d7:aa:0d:8e:cc:60:ce:28:9d:8d:91:53:2c:
         86:4a:fc:17:47:1f:81:4e:9a:b6:08:27:e9:5e:37:cc:63:08:
         4a:ab:61:2c:75:1e:cc:76:de:df:a4:d6:db:9e:33:34:2d:67:
         a1:12:0a:e7:be:15:01:0f:dc:36:17:93:27:f0:a3:e9:0d:f4:
         e7:84:45:be:e1:80:23:a1:e2:62:98:f5:84:c6:e9:fd:09:36:
         b5:97:25:16:5a:b8:70:59:25:51:a3:0d:b7:c2:ab:d2:1b:42:
         88:90:bf:bd:9a:1c:c9:8a:f7:ce:b0:fc:95:6b:66:c5:00:5b:
         2b:7c:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 17:21:34 2024 by rpki-client on console-fra.rpki-client.org