Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
File:                     A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer (raw, json)
Hash identifier:          x+G5JB6jOgBSFXPcgvmONg/SJHSo+sTkXvJNFj4GKmw=
Subject key identifier:   A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       52119FEA7E648455B462BAC8F717EB946791C8E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:38:39 +0000
Certificate not after:    Tue 04 Mar 2025 17:43:39 +0000
Subordinate resources:    AS: 27750
                          IP: 138.59.12.0/22
                          IP: 200.0.204.0/22
                          IP: 2001:1348::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:11:9f:ea:7e:64:84:55:b4:62:ba:c8:f7:17:eb:94:67:91:c8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:38:39 2024 GMT
            Not After : Mar  4 17:43:39 2025 GMT
        Subject: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:c7:9f:e7:89:dd:e9:35:f2:55:ad:a9:65:
                    68:89:c4:f6:02:bc:ec:c2:f0:e7:4f:ca:f2:40:32:
                    a8:00:88:b0:ad:06:b2:23:28:75:34:2a:5b:a3:47:
                    5b:46:be:fc:fc:5e:56:c4:32:0c:77:79:ef:74:2e:
                    2e:70:4b:c8:ec:bd:49:27:bc:4d:b2:45:76:e5:ef:
                    23:13:77:00:ba:7f:50:b9:47:ae:4d:53:ea:a9:30:
                    64:f9:83:12:9c:f2:97:01:f9:61:53:35:02:73:ac:
                    42:5b:16:e2:2a:58:ec:6e:96:62:fa:02:6d:39:90:
                    b0:a3:79:7c:00:a0:03:7f:d0:d9:4e:17:bd:3f:f9:
                    fd:ee:fe:7d:74:68:25:5d:6e:9c:08:d4:f8:fa:24:
                    c4:6d:23:51:9a:40:c4:10:65:0c:93:62:22:ec:0a:
                    89:64:2a:d7:a9:1d:56:1d:6d:78:7b:39:e6:e5:be:
                    4b:a8:01:56:1d:2f:64:a6:23:68:0a:2a:cd:42:b8:
                    f5:7e:18:12:b1:ae:94:dc:fe:e6:bf:56:5d:e8:d1:
                    ab:19:5a:d2:ae:3b:1b:89:c6:8e:1a:d7:df:d5:4f:
                    16:e2:bd:fd:da:b6:2b:98:1b:65:72:b7:32:5f:31:
                    c9:96:28:d5:69:fb:ee:72:52:82:54:15:b8:d2:13:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.12.0/22
                  200.0.204.0/22
                IPv6:
                  2001:1348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27750

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:6c:b1:0d:d6:6e:d1:e5:1e:23:75:82:0d:98:da:45:86:
         06:29:c2:df:6a:58:27:6a:20:ff:df:7e:46:83:dd:e2:58:c8:
         00:a1:e2:22:c5:77:56:68:0f:33:44:2a:c7:8d:38:35:44:be:
         61:63:cc:06:61:b8:05:a0:4b:59:a1:ac:ce:9d:06:75:5d:81:
         4f:7d:a8:61:3c:ee:47:80:4e:0f:22:3b:78:49:ab:c9:38:88:
         eb:81:e0:9c:16:bb:ef:b1:a2:a8:14:4e:1b:88:a4:2d:44:74:
         ea:2a:ba:c4:77:29:38:0e:28:ed:21:c0:fd:cc:48:d5:a5:10:
         63:af:25:d6:6b:48:77:fd:af:e4:20:60:c9:f4:27:2d:6f:46:
         67:c6:e0:16:5e:8b:74:0c:30:3a:92:8a:7d:f3:c8:f9:4d:d9:
         ce:32:40:f3:d4:da:aa:84:45:f5:ad:cc:f4:84:15:15:c3:ce:
         83:64:f5:59:00:e7:ac:1c:c6:a6:bd:b7:45:db:48:3f:6b:88:
         7a:6d:a7:3d:bd:df:90:ce:0c:b2:8f:76:5e:b5:0c:d8:29:49:
         c3:0e:ce:44:76:53:66:2a:d3:4c:00:ee:4b:00:e4:20:9f:4a:
         f5:72:68:14:ce:93:54:ee:13:11:15:31:40:94:ec:bf:b5:13:
         0d:64:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 13:07:27 2024 by rpki-client on console-fra.rpki-client.org