Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
File:                     94C3A0771637ACB24BEACD23DDD2075FB053F811.cer (raw, json)
Hash identifier:          t6j6WvINOT9rs1WME/3v7eI2aI6L0xGI7x6tGkrRyUo=
Subject key identifier:   94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       49B1DE0C218216396AD6F5F32E23992E1A3EAC78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 18:54:29 +0000
Certificate not after:    Tue 03 Feb 2026 18:59:29 +0000
Subordinate resources:    AS: 262159
                          IP: 138.36.76.0/22
                          IP: 143.137.112.0/22
                          IP: 168.228.132.0/22
                          IP: 170.239.120.0/22
                          IP: 179.60.112.0/20
                          IP: 190.211.224.0/20
                          IP: 2803:2880::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b1:de:0c:21:82:16:39:6a:d6:f5:f3:2e:23:99:2e:1a:3e:ac:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 18:54:29 2025 GMT
            Not After : Feb  3 18:59:29 2026 GMT
        Subject: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:50:58:54:23:a4:3c:d3:10:0b:5b:31:34:
                    6e:a2:8a:ab:e8:64:56:4e:65:3a:33:6a:03:8f:16:
                    a7:f9:ec:f1:13:7f:ea:0e:2a:e2:05:85:75:28:21:
                    a1:fb:87:98:e5:ac:bd:56:bd:6b:81:5d:39:07:59:
                    37:d8:2c:8a:36:fa:21:cf:4e:20:8e:54:b5:d5:f9:
                    12:c6:38:8b:30:99:03:1d:57:06:83:83:00:3e:d0:
                    fc:c0:07:18:ad:82:80:50:bd:0f:1f:60:4d:33:68:
                    c1:2e:7d:11:86:37:cf:9d:ab:3c:a7:37:99:9a:a7:
                    69:d6:2b:2f:89:b2:a4:6c:79:45:a8:4e:ce:08:75:
                    dc:e5:15:b5:61:cf:63:f4:e8:2b:13:55:71:b8:50:
                    71:27:24:c6:03:5e:cf:ec:ab:44:50:4f:a7:02:d9:
                    7f:bd:81:c9:3c:39:5f:89:b8:e2:ae:2f:d1:b2:bc:
                    d4:e7:81:e1:f5:6a:a9:91:69:10:54:43:6f:56:bf:
                    16:7c:43:a7:0b:2a:bd:c4:b2:c2:bb:67:00:24:6c:
                    a3:b4:55:a0:9e:93:c4:fa:54:be:7a:1e:ae:f4:58:
                    03:a8:31:6f:77:a5:3b:5c:d2:ca:f0:6a:0d:92:45:
                    c5:8d:14:13:a8:08:01:01:13:dc:6e:22:00:52:ea:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.76.0/22
                  143.137.112.0/22
                  168.228.132.0/22
                  170.239.120.0/22
                  179.60.112.0/20
                  190.211.224.0/20
                IPv6:
                  2803:2880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262159

    Signature Algorithm: sha256WithRSAEncryption
         61:c6:93:5e:c2:ae:80:39:87:24:83:75:1c:9d:40:d0:43:6d:
         76:be:db:4a:c8:22:31:70:a7:5a:cb:4a:e7:bc:ce:84:35:9b:
         ca:e2:e7:86:e5:2d:3f:95:7e:b0:27:57:af:12:a9:30:69:c5:
         7b:18:43:67:43:db:2b:32:2f:f7:73:ea:ad:e9:3c:09:a1:7b:
         57:56:6f:0a:b0:da:c1:ee:3d:7d:5f:b0:a1:5a:52:39:b1:7e:
         72:a3:a9:e7:ed:ee:c2:26:0c:e9:55:a9:69:3d:af:1d:bf:5f:
         37:8d:c1:10:ba:76:d0:db:d7:b6:4f:0f:50:aa:61:4f:b0:71:
         dc:ee:8f:09:1f:5e:0e:97:b9:58:64:0a:c8:b6:61:ba:22:da:
         96:ff:32:14:7f:2f:6b:9b:86:d5:7a:63:51:79:79:2a:3d:3a:
         28:ea:69:35:c6:ac:3c:4e:fb:cb:db:39:b4:a1:3e:5b:f1:84:
         74:c0:33:fb:ce:c1:84:60:ca:90:fc:80:91:aa:f9:c8:25:47:
         23:02:eb:ee:0e:72:9d:b0:b2:f0:43:71:21:18:15:6b:0d:f8:
         a7:a8:ff:24:64:be:cd:ef:19:a1:6f:2f:26:ae:46:95:24:b9:
         77:e6:8e:e5:9a:96:ee:ec:8f:a2:4f:33:6f:62:fe:22:b1:cf:
         7b:92:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:56 2025 by rpki-client