Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
File:                     94C3A0771637ACB24BEACD23DDD2075FB053F811.cer (raw, json)
Hash identifier:          zDySe9es9dgJblCIYcsZZ51jsztYlgSXPtmU03f+RzE=
Subject key identifier:   94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       11CA28316F8237B7AF9CBA19A0DC76C1B1A4E334
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:50:09 +0000
Certificate not after:    Tue 04 Mar 2025 17:55:09 +0000
Subordinate resources:    AS: 262159
                          IP: 138.36.76.0/22
                          IP: 143.137.112.0/22
                          IP: 168.228.132.0/22
                          IP: 170.239.120.0/22
                          IP: 179.60.112.0/20
                          IP: 190.211.224.0/20
                          IP: 2803:2880::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:28:31:6f:82:37:b7:af:9c:ba:19:a0:dc:76:c1:b1:a4:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:50:09 2024 GMT
            Not After : Mar  4 17:55:09 2025 GMT
        Subject: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:50:58:54:23:a4:3c:d3:10:0b:5b:31:34:
                    6e:a2:8a:ab:e8:64:56:4e:65:3a:33:6a:03:8f:16:
                    a7:f9:ec:f1:13:7f:ea:0e:2a:e2:05:85:75:28:21:
                    a1:fb:87:98:e5:ac:bd:56:bd:6b:81:5d:39:07:59:
                    37:d8:2c:8a:36:fa:21:cf:4e:20:8e:54:b5:d5:f9:
                    12:c6:38:8b:30:99:03:1d:57:06:83:83:00:3e:d0:
                    fc:c0:07:18:ad:82:80:50:bd:0f:1f:60:4d:33:68:
                    c1:2e:7d:11:86:37:cf:9d:ab:3c:a7:37:99:9a:a7:
                    69:d6:2b:2f:89:b2:a4:6c:79:45:a8:4e:ce:08:75:
                    dc:e5:15:b5:61:cf:63:f4:e8:2b:13:55:71:b8:50:
                    71:27:24:c6:03:5e:cf:ec:ab:44:50:4f:a7:02:d9:
                    7f:bd:81:c9:3c:39:5f:89:b8:e2:ae:2f:d1:b2:bc:
                    d4:e7:81:e1:f5:6a:a9:91:69:10:54:43:6f:56:bf:
                    16:7c:43:a7:0b:2a:bd:c4:b2:c2:bb:67:00:24:6c:
                    a3:b4:55:a0:9e:93:c4:fa:54:be:7a:1e:ae:f4:58:
                    03:a8:31:6f:77:a5:3b:5c:d2:ca:f0:6a:0d:92:45:
                    c5:8d:14:13:a8:08:01:01:13:dc:6e:22:00:52:ea:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.76.0/22
                  143.137.112.0/22
                  168.228.132.0/22
                  170.239.120.0/22
                  179.60.112.0/20
                  190.211.224.0/20
                IPv6:
                  2803:2880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262159

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:d8:7d:c3:2e:46:10:95:1a:a8:cd:c6:99:23:b1:23:f9:
         2c:a5:82:c9:28:a5:09:74:cf:77:2d:27:28:81:1b:39:9d:51:
         b5:34:26:93:cd:85:2c:17:03:bb:b0:67:84:46:02:d2:b7:d7:
         67:6b:ca:e5:58:50:c0:c5:30:ce:21:ab:02:b7:be:65:d9:dd:
         73:41:1b:71:cf:5d:7a:23:fc:6d:2f:2e:6d:b4:c6:f9:9a:f2:
         3d:9f:42:af:91:a4:d9:84:4f:4a:f0:6b:bc:a9:6b:e3:ce:c2:
         9f:72:5c:88:2f:09:82:d4:7e:98:13:ed:23:e2:1b:17:b2:b5:
         37:dc:da:56:46:02:bc:6c:b9:2a:13:31:5c:29:58:62:b5:6a:
         68:4d:c1:c3:59:ac:81:28:73:f0:f4:cc:d6:88:4e:9d:17:7f:
         b3:f7:3a:c3:96:dd:9a:98:56:15:22:6a:e5:30:26:71:01:6f:
         ee:6e:f0:64:4c:aa:e2:3f:3d:4b:0e:49:d3:95:64:32:48:6d:
         89:69:7a:fa:52:d6:36:77:7d:a2:6f:cb:31:0b:1c:b6:97:47:
         69:fe:11:5e:c4:d2:55:a6:11:b2:76:8c:f3:e0:25:a9:09:8f:
         72:cc:e7:64:9b:cd:a2:be:76:46:a0:46:92:a0:18:45:27:c6:
         b4:ed:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 04:44:19 2024 by rpki-client on console-fra.rpki-client.org