Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
File:                     84B320834CA10CE018169848F7AE0810EB3E7C5D.cer (raw, json)
Hash identifier:          psmcVijC5csAbkutqb9TDjQGzPe31UpIlHXNea2ZO50=
Subject key identifier:   84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       3B4B35E9BA3F684A67C50FBD7D31426A384F66B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 04:16:32 +0000
Certificate not after:    Wed 04 Feb 2026 04:21:32 +0000
Subordinate resources:    AS: 266851
                          IP: 45.170.100.0/23
                          IP: 45.238.179.0/24
                          IP: 2803:42a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4b:35:e9:ba:3f:68:4a:67:c5:0f:bd:7d:31:42:6a:38:4f:66:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 04:16:32 2025 GMT
            Not After : Feb  4 04:21:32 2026 GMT
        Subject: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:2f:b3:d5:a6:a4:21:a4:8b:6f:a9:98:6f:
                    af:33:f4:c8:31:a4:93:6d:15:bc:aa:e9:e9:9c:77:
                    e4:2f:45:b6:fe:15:00:78:7b:62:1e:9d:c5:8a:f4:
                    18:50:ff:e6:eb:e0:90:e9:10:48:e5:a9:cd:bf:66:
                    f6:df:bb:b5:1a:e8:64:cb:fd:7e:0e:93:61:4d:9c:
                    e8:e6:a3:7f:2f:28:b0:2f:0a:f1:bc:e8:41:bf:04:
                    e7:17:40:02:e3:f9:33:e6:78:ad:ab:76:4f:12:82:
                    67:57:0d:12:39:f8:b0:c6:50:57:87:3d:e8:b2:22:
                    88:7e:e6:05:7f:b6:45:a3:6d:b1:e3:f1:63:56:09:
                    f9:2c:46:46:39:64:ff:9e:c3:29:a2:e6:ed:78:4d:
                    a7:f2:25:14:cd:27:f8:90:22:14:a3:f4:91:6c:5b:
                    ff:70:4f:0e:b3:fc:4c:bb:2c:06:f4:a8:36:6f:59:
                    7d:ff:92:f2:f5:af:f1:5b:2d:bc:50:12:9c:e9:aa:
                    65:85:23:90:8b:ea:5f:a1:9f:0c:4c:7e:29:eb:2d:
                    e6:c8:99:18:8a:6b:d7:0a:31:38:ed:16:b2:ce:23:
                    8f:c0:bb:fe:a2:a6:94:00:c6:ea:19:1b:65:71:4e:
                    e9:9b:5c:5d:1e:06:f3:3c:7c:e8:19:42:b9:ae:9e:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.100.0/23
                  45.238.179.0/24
                IPv6:
                  2803:42a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266851

    Signature Algorithm: sha256WithRSAEncryption
         e5:77:2e:81:74:7e:12:34:4d:77:55:d5:51:52:b1:39:3b:65:
         68:b4:ae:f9:85:64:5b:0b:ab:69:04:b7:7c:32:3f:31:bd:e8:
         bd:6e:d8:66:73:65:30:84:ac:16:04:04:03:e1:7c:cb:a6:00:
         eb:68:13:e9:04:b1:b7:b3:fa:ab:2a:2d:58:9a:41:6a:f9:0b:
         98:f0:35:04:02:13:28:87:75:4c:c7:1d:cb:5e:aa:27:49:17:
         7c:b8:14:c2:a7:4d:c9:e5:2c:47:21:02:98:e7:b2:ac:dd:1d:
         45:ac:df:72:1a:e8:fa:56:e6:2b:d9:88:a2:22:5d:47:53:e8:
         70:41:72:ed:95:24:41:fb:26:20:6c:e6:3e:ec:ba:d5:b9:3e:
         8f:b3:c4:98:07:3e:5b:13:fd:c2:5b:79:e4:cc:18:70:ec:ab:
         37:9e:97:a5:22:cf:3e:98:8b:eb:f8:75:9f:fe:e4:2b:be:48:
         0e:55:17:23:81:7e:a8:bc:da:88:73:b6:ad:7d:a9:c8:f0:8d:
         a5:99:55:0f:f8:39:24:00:37:88:8d:8f:0d:01:6b:00:4a:11:
         88:c6:d1:38:70:e8:21:24:07:0a:32:f7:99:8f:8f:61:f4:23:
         42:1f:30:88:33:33:9e:06:ed:24:64:77:77:d9:9e:4e:63:c4:
         d2:2e:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:42:38 2025 by rpki-client