Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer
File:                     9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer (raw, json)
Hash identifier:          QN9pFeHSO+IkBrk4JmKoSAQJpKQ0/57O0P3uSPUfXcw=
Subject key identifier:   9E:37:B5:F5:D4:15:61:B6:1B:B5:27:34:CE:C0:DD:26:DC:07:4D:DF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       2B0BDB46FD045413D6D99F17F5E9FA15ABC67154
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 23:28:05 +0000
Certificate not after:    Tue 03 Feb 2026 23:33:05 +0000
Subordinate resources:    AS: 267735
                          IP: 45.167.88.0/22
                          IP: 2803:da0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:db:46:fd:04:54:13:d6:d9:9f:17:f5:e9:fa:15:ab:c6:71:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 23:28:05 2025 GMT
            Not After : Feb  3 23:33:05 2026 GMT
        Subject: CN=9E37B5F5D41561B61BB52734CEC0DD26DC074DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:0e:68:d6:a4:ad:ac:bb:20:87:f4:95:8c:
                    8d:dc:c2:79:3b:2f:d6:58:cd:ea:51:6e:78:5f:51:
                    02:a9:b0:f7:2b:f9:a1:d7:15:17:76:18:72:87:32:
                    03:68:80:94:e2:92:a2:21:79:3d:44:81:21:00:5b:
                    cb:88:c6:ce:44:f0:8e:b7:4e:26:f9:56:b0:54:b3:
                    13:2b:a3:92:39:87:d4:61:9b:38:f4:91:18:fd:cb:
                    0f:08:44:b7:0b:32:ca:9f:30:c3:1d:20:ce:ba:ea:
                    b2:57:38:e8:9d:c5:61:2c:ee:3b:9e:d0:d2:33:aa:
                    a1:c4:7d:00:c7:47:83:dc:43:67:96:e5:9e:19:7a:
                    46:b5:3d:ac:6e:0b:9d:67:50:7e:08:44:bc:1b:97:
                    32:78:88:55:d6:2d:a0:28:ca:65:67:ce:fa:b9:bc:
                    c8:4e:30:ff:ae:39:f0:45:04:a4:06:8f:5f:b0:32:
                    a8:24:4a:c1:22:d5:00:79:7a:2d:cc:8f:02:5a:6d:
                    a1:ce:7e:3e:89:09:68:3e:ef:e3:c5:4e:f8:46:1a:
                    70:8b:48:4d:cf:91:cc:d6:0b:5b:9a:b3:d7:34:21:
                    2d:55:92:76:5f:f5:aa:ea:a2:33:c9:3c:c5:2b:3d:
                    e2:d6:c5:3e:ac:e3:77:e7:27:3e:cc:67:0f:21:3d:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:37:B5:F5:D4:15:61:B6:1B:B5:27:34:CE:C0:DD:26:DC:07:4D:DF
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.88.0/22
                IPv6:
                  2803:da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267735

    Signature Algorithm: sha256WithRSAEncryption
         10:69:52:ad:cc:60:72:33:e4:26:5c:fa:1c:d8:1b:82:79:a5:
         3b:30:b0:0c:dd:0a:15:54:a6:f9:51:6d:78:04:d6:4e:59:3a:
         64:8f:00:bb:df:0c:99:b5:16:ab:78:75:a9:a3:4a:99:cb:31:
         97:37:18:30:a7:e2:51:87:82:98:63:73:7d:63:93:d5:eb:c1:
         06:34:80:6d:78:78:09:d2:bd:4a:dc:aa:26:49:ae:d7:ff:8e:
         6f:6b:4b:3a:b0:68:2d:dd:a9:81:c0:0e:07:24:85:93:94:bd:
         ac:39:cf:5d:1a:19:0e:56:10:eb:14:7c:75:c1:a1:bc:bb:43:
         b7:0a:b5:e6:88:d0:7b:0b:a3:f0:cd:20:1a:80:d8:f1:86:86:
         b4:56:20:32:19:8b:5e:28:d8:81:ee:d2:f9:4d:27:6f:58:d9:
         2e:00:e2:54:0e:53:d6:93:68:30:16:42:13:76:e3:58:1a:85:
         d2:d7:72:5a:fa:07:9a:b0:bc:7c:56:fc:17:ce:b4:b4:12:1a:
         c6:65:0d:c2:2a:47:b0:4f:76:16:1e:fc:2c:da:13:24:d8:d1:
         3f:58:51:04:2e:f8:2f:5b:f4:8b:23:a7:41:ac:ee:9b:cd:08:
         59:61:14:12:26:f4:34:28:a5:05:51:3b:a2:22:5b:ef:c9:8d:
         cf:68:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:54:52 2025 by rpki-client