Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
File:                     864255909469F50CE15FE2F07B617FAAD2741BE0.cer (raw, json)
Hash identifier:          xGhbBW5hfJSxvIQlDJC5wBKZYwb1UFXGWFZVfcpHYI8=
Subject key identifier:   86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       6BC3E115E7D1259AC93BD285C9397ADAA65579FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 23:10:01 +0000
Certificate not after:    Wed 09 Apr 2025 23:15:01 +0000
Subordinate resources:    AS: 272122
                          IP: 2803:af10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Jun 2024 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:e1:15:e7:d1:25:9a:c9:3b:d2:85:c9:39:7a:da:a6:55:79:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Apr 10 23:10:01 2024 GMT
            Not After : Apr  9 23:15:01 2025 GMT
        Subject: CN=864255909469F50CE15FE2F07B617FAAD2741BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:32:ac:90:fb:6a:84:17:8e:b8:a1:03:10:
                    96:ed:e8:d1:dc:ce:78:84:49:d4:b8:73:f0:46:72:
                    e6:7c:d7:a4:98:05:16:fa:83:70:60:37:0d:b7:53:
                    22:31:27:51:2f:cb:9e:35:e9:6d:84:91:ed:d9:a0:
                    c8:7f:51:e2:a8:19:fd:3e:53:47:0e:9a:92:eb:a5:
                    f2:8e:99:98:a1:93:fa:5a:3c:d2:7c:58:6d:c2:23:
                    66:de:19:a7:b3:c3:4c:0c:db:ad:8c:55:ed:8f:4f:
                    7e:d1:e0:1e:d8:76:38:bd:3a:aa:8b:56:b2:6c:1c:
                    18:ce:2d:ec:79:35:83:88:db:f7:7e:4a:7b:7e:9d:
                    95:e4:a7:d4:19:83:79:20:1e:60:12:6c:0f:80:10:
                    8c:58:d1:73:e5:a9:cf:8e:7c:e8:97:3c:60:b1:55:
                    d6:f6:eb:c6:8c:da:61:69:d9:36:cb:d6:89:43:e2:
                    97:0f:7a:7d:b0:ef:ca:c6:d2:7d:77:07:d8:69:c2:
                    b4:51:84:97:bd:89:19:7d:19:93:9a:31:ea:e1:9f:
                    35:dc:d3:9d:98:81:58:36:f9:58:bf:e4:b9:4a:09:
                    d2:7a:b7:9a:ae:79:ee:f1:57:00:9e:25:a8:9b:8d:
                    de:04:bd:c6:16:20:8c:c7:05:a0:63:c1:bd:a5:1d:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272122

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:24:45:ef:32:66:4b:6b:97:a8:b0:2f:6b:0c:31:6b:bb:
         14:71:28:e0:ea:f4:66:11:de:88:41:b8:21:02:0f:60:24:70:
         f6:b5:ca:ec:74:69:08:b0:84:4a:84:15:ba:22:d7:1a:47:64:
         96:60:c6:2c:40:d7:5d:cb:40:11:25:ae:de:ce:bf:6e:4c:d9:
         2e:cc:c2:96:49:9c:8b:69:a4:b0:51:71:e6:44:e9:02:f2:8f:
         e4:a1:1a:c0:2d:ce:83:e8:d5:05:11:d3:7f:83:c6:60:b6:dd:
         d3:40:61:7f:f0:c2:3d:4b:71:ef:eb:49:e4:04:58:a5:b2:2a:
         7d:9d:51:8e:5c:06:82:49:b0:99:f5:37:90:ee:7f:fc:a6:ef:
         b3:14:3c:b6:a5:d2:51:94:fc:0d:82:01:71:51:cf:f6:24:fa:
         c9:a3:37:02:1a:df:09:ec:f6:84:35:32:71:64:0a:28:5f:6b:
         17:b8:07:7f:bb:bd:cd:89:83:c1:03:48:a8:1e:24:a4:e6:82:
         90:d1:81:30:39:b4:d1:95:58:e9:d5:64:41:0f:f0:52:ba:26:
         38:73:d4:fd:5e:29:3a:5b:8a:6f:24:39:24:53:81:41:80:3f:
         ff:17:32:db:26:c3:5d:27:a0:53:92:d5:17:94:6b:ca:29:c4:
         16:4a:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----