Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
File:                     A709D75E0BD0199002C071D36971A09E6D5E5F48.cer (raw, json)
Hash identifier:          UNrLYwKwB21KwNqTi8+PApU0JZVxhH4LR00WDxw5aa0=
Subject key identifier:   A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       19AAE88BA10837D0AA2ED55858F65DBE4DC25AE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:15:17 +0000
Certificate not after:    Tue 04 Mar 2025 18:20:17 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:e8:8b:a1:08:37:d0:aa:2e:d5:58:58:f6:5d:be:4d:c2:5a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:15:17 2024 GMT
            Not After : Mar  4 18:20:17 2025 GMT
        Subject: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:27:b6:93:49:09:37:5e:ba:ba:1e:36:a0:
                    d9:02:74:72:e2:ab:67:86:af:08:b2:9a:dc:66:87:
                    d6:c6:de:8e:e7:b7:c5:d2:ed:76:26:7f:3f:ac:e3:
                    90:bd:b5:f0:45:ab:2d:b6:74:65:a4:c4:1d:bb:2c:
                    dc:e2:57:c9:50:d4:a0:ab:40:f8:6c:19:ff:39:93:
                    5c:02:10:3a:13:ee:43:90:4d:0b:fb:78:39:8d:37:
                    f7:f6:22:bd:d5:00:2e:e3:97:1c:9a:d3:7d:bd:d1:
                    5d:67:f9:62:30:1d:77:fe:32:00:28:1e:e6:f1:ac:
                    41:4b:99:3e:61:3f:7c:4f:25:07:fe:91:84:b6:24:
                    0c:3b:c7:c2:ed:80:61:7e:d0:41:2e:76:b7:4c:8f:
                    9c:14:05:ef:e7:c4:a1:a4:40:06:a0:ff:95:06:6c:
                    4c:22:51:64:2a:16:0a:67:a9:64:8f:37:1d:53:1f:
                    04:5e:97:52:20:93:3d:a2:51:e2:06:a8:6f:01:bd:
                    c0:ee:45:bf:e6:06:37:89:cf:48:70:e8:78:ce:2c:
                    05:2c:cf:02:da:fa:d1:25:3a:ad:32:be:88:08:ca:
                    55:f5:0e:90:82:65:48:53:43:51:2e:a5:54:85:9f:
                    65:4e:e3:1d:f0:32:d6:4b:64:2a:69:7a:5d:65:14:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         83:62:21:5c:7e:13:6f:47:a5:d4:2a:f5:fb:96:b2:67:8e:df:
         0b:ce:4b:16:2f:e4:c6:b0:b7:8b:79:56:65:e3:24:e1:62:fc:
         c7:a2:0f:fe:b0:61:f4:47:c8:53:95:1d:2a:69:16:7e:21:25:
         54:e6:10:1d:2c:f5:a2:50:29:f3:8f:23:9c:cc:d7:4b:cb:b0:
         d5:c1:e2:4c:79:cf:0b:a3:3e:1a:a2:54:ca:81:59:5d:f4:06:
         1d:a5:11:56:27:ee:6b:92:63:8b:6d:81:c1:0d:e1:93:fa:38:
         6c:54:fa:c9:a4:3e:3f:0a:25:8f:91:24:8c:41:ba:a2:f2:f8:
         56:73:dd:37:4e:7d:29:77:c8:70:8f:61:83:21:00:fe:b5:2d:
         7f:65:28:15:0b:fb:a8:85:bb:cc:e2:c7:f3:cb:6f:de:f5:4a:
         40:16:75:ed:13:8e:cd:7a:77:7b:59:e5:44:44:7c:5f:2e:68:
         c8:ea:a3:6a:8f:86:3d:a7:d7:bb:b4:c2:74:b3:ae:2a:55:7c:
         88:0a:a2:34:23:e4:d0:e4:94:48:12:5a:33:1b:77:3a:cd:fc:
         e2:cf:52:ac:e5:b9:25:95:95:bf:d1:23:45:66:6a:79:c9:1a:
         1d:72:0a:e9:00:f6:1f:48:ce:b6:c0:0b:f0:ed:22:fa:eb:18:
         99:03:17:1c
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgIUGaroi6EIN9CqLtVYWPZdvk3CWugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMDUxODE1MTdaFw0yNTAzMDQxODIwMTdaMDMxMTAvBgNV
BAMTKEE3MDlENzVFMEJEMDE5OTAwMkMwNzFEMzY5NzFBMDlFNkQ1RTVGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDye2k0kJN166uh42oNkCdHLi
q2eGrwiymtxmh9bG3o7nt8XS7XYmfz+s45C9tfBFqy22dGWkxB27LNziV8lQ1KCr
QPhsGf85k1wCEDoT7kOQTQv7eDmNN/f2Ir3VAC7jlxya03290V1n+WIwHXf+MgAo
HubxrEFLmT5hP3xPJQf+kYS2JAw7x8LtgGF+0EEudrdMj5wUBe/nxKGkQAag/5UG
bEwiUWQqFgpnqWSPNx1THwRel1Igkz2iUeIGqG8BvcDuRb/mBjeJz0hw6HjOLAUs
zwLa+tElOq0yvogIylX1DpCCZUhTQ1EupVSFn2VO4x3wMtZLZCppel1lFHeZAgMB
AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnCddeC9AZkALA
cdNpcaCebV5fSDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEUwRDI4QzBCMjI4NTRGMDIxMDAzM0RG
N0IwQzYzNjE1OTMxMkMxMUQxQzc0MkFGQjNGRDFGQzM3OEE4RTc2MC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy84RTBEMjhDMEIyMjg1NEYwMjEwMDMzREY3QjBDNjM2MTU5MzEyQzExRDFD
NzQyQUZCM0ZEMUZDMzc4QThFNzYwLzAvQTcwOUQ3NUUwQkQwMTk5MDAyQzA3MUQz
Njk3MUEwOUU2RDVFNUY0OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBZQAAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqlzANBgkqhkiG9w0BAQsFAAOCAQEAg2Ih
XH4Tb0el1Cr1+5ayZ47fC85LFi/kxrC3i3lWZeMk4WL8x6IP/rBh9EfIU5UdKmkW
fiElVOYQHSz1olAp848jnMzXS8uw1cHiTHnPC6M+GqJUyoFZXfQGHaURVifua5Jj
i22BwQ3hk/o4bFT6yaQ+Pwolj5EkjEG6ovL4VnPdN059KXfIcI9hgyEA/rUtf2Uo
FQv7qIW7zOLH88tv3vVKQBZ17ROOzXp3e1nlRER8Xy5oyOqjao+GPafXu7TCdLOu
KlV8iAqiNCPk0OSUSBJaMxt3Os384s9SrOW5JZWVv9EjRWZqeckaHXIK6QD2H0jO
tsAL8O0i+usYmQMXHA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:11 2024 by rpki-client on console-ams.rpki-client.org