Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
File:                     8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer (raw, json)
Hash identifier:          O6tY26u75b2YwthKeEyK+rislip1d3TZ20Lv2KwR8rU=
Subject key identifier:   8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       7C40649926DED4AD73335B2621FFFB9857CBF801
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 19:16:33 +0000
Certificate not after:    Tue 03 Feb 2026 19:21:33 +0000
Subordinate resources:    AS: 271860
                          IP: 45.71.32.0/22
                          IP: 45.224.144.0/22
                          IP: 2803:8210::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:40:64:99:26:de:d4:ad:73:33:5b:26:21:ff:fb:98:57:cb:f8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 19:16:33 2025 GMT
            Not After : Feb  3 19:21:33 2026 GMT
        Subject: CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:0e:b7:80:32:19:b7:8d:09:6f:d8:88:ac:
                    ae:d3:e2:7c:1a:4f:bf:18:dd:29:16:86:fd:b8:c5:
                    a7:fb:34:d6:5f:21:da:5f:fa:c0:1d:ba:90:db:77:
                    df:ed:e5:9d:40:08:bd:a6:ec:00:6a:c5:00:b4:d0:
                    2f:fa:24:5e:6a:a5:5f:a8:b7:be:c6:be:fd:ac:89:
                    70:ba:cd:68:46:ac:e9:92:14:b8:98:89:a7:82:14:
                    d5:c3:54:80:ea:ea:f8:44:ee:ab:1f:8e:e4:81:bd:
                    72:9e:4e:f0:88:de:11:9f:ca:36:30:b2:14:25:6a:
                    64:a1:b5:54:9c:58:d8:76:ec:f6:0d:0e:1b:5c:56:
                    12:e0:25:32:79:32:44:f1:51:24:79:6e:39:2f:ac:
                    e1:5a:2a:0e:2e:2c:41:6c:ae:d4:64:ef:c9:2e:b2:
                    fb:aa:3e:9f:63:63:cf:7c:1f:23:35:80:67:cc:7d:
                    c8:7f:a5:04:61:42:86:3e:7b:09:e7:51:38:23:fa:
                    78:c5:0f:e2:ba:69:9c:ea:ad:3a:90:10:90:35:95:
                    13:d1:8d:bf:05:f2:15:e9:4e:0f:9b:dd:1f:8b:35:
                    f1:18:77:11:a5:a8:79:24:bc:ad:bf:62:c9:14:ff:
                    90:4c:09:4a:e6:da:63:a6:5e:8b:cd:00:7d:0a:35:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.32.0/22
                  45.224.144.0/22
                IPv6:
                  2803:8210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271860

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:82:83:0c:f6:10:ac:95:66:30:ee:1a:d6:29:14:fe:0d:
         95:d9:e3:05:ca:f7:b3:e9:5e:2d:ee:11:5e:86:1b:c2:73:26:
         37:13:3b:83:51:50:6d:8e:1a:40:a9:80:c3:cb:91:fb:43:0f:
         6e:85:56:89:19:e9:14:18:88:d8:42:0f:5c:a4:30:ba:9e:33:
         9d:f5:e4:77:d4:0e:36:46:32:d6:49:9e:5c:2a:e9:47:86:cc:
         43:8f:6e:e0:73:f5:95:55:64:16:28:86:80:77:cd:9b:16:89:
         db:8e:c8:cd:b2:a0:d5:93:47:6f:4a:10:73:93:43:96:50:89:
         cb:5a:4b:ac:60:e3:3b:4e:d3:b2:6c:c1:e3:92:b4:3b:f8:75:
         50:64:c2:b7:48:d4:47:b5:68:13:a4:5a:31:fb:2d:8a:2f:67:
         f2:87:d9:49:d0:26:9d:40:d0:e1:0b:94:47:d2:bf:6f:eb:a7:
         76:bc:e4:7e:ec:c5:ed:fd:10:6b:e7:e7:93:25:31:8e:ce:ca:
         2e:21:10:32:34:2f:6a:0d:54:3b:8a:69:64:a1:e1:d4:71:cb:
         fb:48:2f:7f:53:7a:81:1f:b6:41:38:3a:e6:d2:c0:b0:b4:67:
         1f:9c:50:53:78:01:4f:36:b7:20:3d:a8:69:b5:91:66:29:9c:
         a7:5a:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:01:49 2025 by rpki-client