Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
File:                     84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer (raw, json)
Hash identifier:          f87Hr+sI3sB95RLDqY0uAvfz67Xdr9OBz+fsBqeEnhQ=
Subject key identifier:   84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       66FA2DF8895307D4BA10D9167CF9DC95B754834D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 15:23:16 +0000
Certificate not after:    Wed 04 Feb 2026 15:28:16 +0000
Subordinate resources:    AS: 272890
                          IP: 2803:4690::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fa:2d:f8:89:53:07:d4:ba:10:d9:16:7c:f9:dc:95:b7:54:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 15:23:16 2025 GMT
            Not After : Feb  4 15:28:16 2026 GMT
        Subject: CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:fc:18:2f:c7:6a:96:3d:0e:2e:74:69:5c:
                    5a:3e:c3:47:51:35:85:ac:6f:4d:7d:3d:ee:66:4f:
                    ae:e1:f2:aa:af:b7:7a:55:5f:e8:3c:26:cb:c4:64:
                    f3:75:9d:fc:30:d1:55:5d:d4:90:9b:15:01:04:a2:
                    6c:c8:f0:b9:42:59:8f:17:96:fc:48:74:2f:12:bb:
                    67:d0:d7:f0:44:85:95:f8:04:c4:23:41:15:77:2e:
                    b5:93:19:df:b4:c1:16:40:e4:e5:88:93:bf:c2:05:
                    2d:04:5f:51:e9:e9:3d:ba:db:ba:a5:a1:a8:85:09:
                    2d:61:fd:e6:e9:57:4a:a2:7e:a8:f8:6f:27:58:2f:
                    35:95:e5:34:0e:31:d1:5b:37:60:f1:16:51:99:68:
                    55:46:e6:29:8b:08:c8:d1:e5:26:1e:9a:d1:de:23:
                    d8:e8:1e:58:cd:1b:00:7b:df:1e:f6:7c:da:bb:f7:
                    97:d3:fb:2a:7e:ad:05:3b:d9:c7:bf:bc:53:49:1e:
                    58:2d:31:ef:da:bc:7f:ba:d0:d7:5e:3e:08:63:55:
                    0f:e7:9b:0d:05:00:84:0b:b2:24:dd:2f:25:fb:a5:
                    99:fb:72:ab:41:e9:78:b8:83:36:24:ad:c4:92:19:
                    0b:e2:6b:c9:6e:fb:62:8a:3c:37:7d:61:30:03:a7:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272890

    Signature Algorithm: sha256WithRSAEncryption
         bc:43:9d:dc:16:ea:ec:c1:f9:c8:2b:05:6d:0f:22:65:2b:1b:
         b9:6e:1a:e3:7a:ab:66:4f:e3:a2:da:c6:67:d8:81:96:d9:bd:
         58:cb:b8:60:59:85:8c:0f:76:b3:3f:89:04:f1:ec:ee:26:f1:
         8d:d2:a2:86:11:bd:00:90:f7:1a:29:c4:1a:cc:d3:aa:df:23:
         c8:b2:21:b7:e2:13:b5:92:7d:ad:8c:55:98:e9:0e:d9:f1:42:
         1c:a2:3b:c6:56:4b:a4:73:53:cf:e2:24:6c:8e:6a:06:01:3c:
         44:75:81:4a:f5:b5:5e:ae:d5:8e:1d:7c:ec:2d:bc:70:55:1a:
         f7:49:56:70:06:96:03:c3:2d:f3:fd:21:37:d9:c0:eb:1e:03:
         09:57:12:ba:e4:34:29:62:81:e3:51:09:4b:c6:d1:04:7a:43:
         16:1d:16:54:c9:bc:17:77:2d:8b:c5:64:cf:da:f1:20:c8:e2:
         d6:f4:5e:11:5b:80:19:d4:84:e9:7b:0c:68:38:c0:7c:71:95:
         d5:60:a9:48:83:d6:ac:3f:29:5d:57:d7:56:92:f4:53:cd:93:
         ff:8a:78:17:03:15:f0:5b:81:54:89:58:f8:25:1a:94:4a:39:
         c6:ef:75:5f:0e:30:51:c6:1d:92:4a:05:23:b5:74:3e:8a:3f:
         a3:d5:78:44
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUZvot+IlTB9S6ENkWfPnclbdUg00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNTAyMDUxNTIzMTZaFw0yNjAyMDQxNTI4MTZaMDMxMTAvBgNV
BAMTKDg0RkRDRjQwMTMwRTlENjg2RjdBMzY1N0RBODBFQTBCMDk4NjhBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaXPwYL8dqlj0OLnRpXFo+w0dR
NYWsb019Pe5mT67h8qqvt3pVX+g8JsvEZPN1nfww0VVd1JCbFQEEomzI8LlCWY8X
lvxIdC8Su2fQ1/BEhZX4BMQjQRV3LrWTGd+0wRZA5OWIk7/CBS0EX1Hp6T2627ql
oaiFCS1h/ebpV0qifqj4bydYLzWV5TQOMdFbN2DxFlGZaFVG5imLCMjR5SYemtHe
I9joHljNGwB73x72fNq795fT+yp+rQU72ce/vFNJHlgtMe/avH+60NdePghjVQ/n
mw0FAIQLsiTdLyX7pZn7cqtB6Xi4gzYkrcSSGQvia8lu+2KKPDd9YTADp0/bAgMB
AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSE/c9AEw6daG96
NlfagOoLCYaKSDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODdBQTY4QzMzNTUwNjc4QTgyM0JDRjc5
MzJGRjM5OUM0QzQyQkFGMDMzNDMxQjk5QzQ0RUU2RjI0RTJBNjdFNi8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy84N0FBNjhDMzM1NTA2NzhBODIzQkNGNzkzMkZGMzk5QzRDNDJCQUYwMzM0
MzFCOTlDNDRFRTZGMjRFMkE2N0U2LzAvODRGRENGNDAxMzBFOUQ2ODZGN0EzNjU3
REE4MEVBMEIwOTg2OEE0OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANGkDAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMEKfowDQYJKoZIhvcNAQELBQADggEBALxDndwW
6uzB+cgrBW0PImUrG7luGuN6q2ZP46LaxmfYgZbZvVjLuGBZhYwPdrM/iQTx7O4m
8Y3SooYRvQCQ9xopxBrM06rfI8iyIbfiE7WSfa2MVZjpDtnxQhyiO8ZWS6RzU8/i
JGyOagYBPER1gUr1tV6u1Y4dfOwtvHBVGvdJVnAGlgPDLfP9ITfZwOseAwlXErrk
NCligeNRCUvG0QR6QxYdFlTJvBd3LYvFZM/a8SDI4tb0XhFbgBnUhOl7DGg4wHxx
ldVgqUiD1qw/KV1X11aS9FPNk/+KeBcDFfBbgVSJWPglGpRKOcbvdV8OMFHGHZJK
BSO1dD6KP6PVeEQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:57:13 2025 by rpki-client