Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D62EA63151AA9A9577BA8C67853CE24666A9A5.cer
File:                     B6D62EA63151AA9A9577BA8C67853CE24666A9A5.cer (raw, json)
Hash identifier:          gq3vZ3b7cvzGaRDl5f7k77LtinxywmeCglFd++utZxE=
Subject key identifier:   B6:D6:2E:A6:31:51:AA:9A:95:77:BA:8C:67:85:3C:E2:46:66:A9:A5
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       26D09173AA45BFCB7ADA5884E5D626D3E4483DF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/C06C598547AC2224917669A25EA1637B1D363B7A3A1989C2BB57A966F1DC04FE/0/B6D62EA63151AA9A9577BA8C67853CE24666A9A5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/C06C598547AC2224917669A25EA1637B1D363B7A3A1989C2BB57A966F1DC04FE/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:17:29 +0000
Certificate not after:    Tue 04 Mar 2025 18:22:29 +0000
Subordinate resources:    AS: 273093
                          IP: 2803:2050::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d0:91:73:aa:45:bf:cb:7a:da:58:84:e5:d6:26:d3:e4:48:3d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:17:29 2024 GMT
            Not After : Mar  4 18:22:29 2025 GMT
        Subject: CN=B6D62EA63151AA9A9577BA8C67853CE24666A9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:89:4d:2b:f7:8d:9e:9f:af:02:b5:e7:6e:
                    12:ee:3e:63:9c:60:dc:be:d3:52:df:cd:c8:dc:41:
                    de:8e:8b:5b:2e:d9:c6:9d:80:80:d6:c0:89:76:0d:
                    d5:5b:df:12:39:3a:54:b0:32:08:64:1b:e8:41:2e:
                    15:ba:90:c7:13:5e:e5:29:a5:6b:16:1f:41:19:50:
                    c1:a8:20:3a:2b:8e:d1:fe:3f:9b:8d:ac:22:74:35:
                    8b:11:77:e8:bf:87:08:70:ba:57:41:4c:35:1c:73:
                    49:5f:6b:40:6c:ae:39:51:24:6e:b8:09:2e:8f:29:
                    c7:fa:0c:73:8f:4e:e1:d5:eb:2a:73:48:66:43:a3:
                    a1:c0:3e:0e:77:9a:ed:8d:33:69:df:6b:a0:c5:ab:
                    6c:d1:59:9c:0e:bf:94:49:46:3d:97:78:32:00:dc:
                    d3:a9:c3:bb:e7:3e:1e:48:a3:87:1f:a8:e8:18:62:
                    3c:ea:f6:b8:65:09:9d:39:e6:c6:f9:28:71:3c:c1:
                    f4:c4:a4:d3:40:6d:44:b5:70:df:34:4c:fd:5c:eb:
                    5f:7c:20:8e:b6:db:22:93:ae:fd:b1:92:c8:87:53:
                    5b:65:ba:0f:f1:63:c3:e9:e6:e7:75:d2:a1:6c:f8:
                    74:c0:60:22:44:01:a7:92:73:56:20:0b:f8:70:11:
                    d3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:D6:2E:A6:31:51:AA:9A:95:77:BA:8C:67:85:3C:E2:46:66:A9:A5
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C06C598547AC2224917669A25EA1637B1D363B7A3A1989C2BB57A966F1DC04FE/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C06C598547AC2224917669A25EA1637B1D363B7A3A1989C2BB57A966F1DC04FE/0/B6D62EA63151AA9A9577BA8C67853CE24666A9A5.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273093

    Signature Algorithm: sha256WithRSAEncryption
         52:75:6c:33:ab:07:66:b6:40:dc:5e:78:d4:11:63:2a:39:f6:
         32:22:0c:33:6f:60:c9:8e:49:0a:e2:63:fb:3b:cd:c8:96:01:
         8b:00:e5:5d:a4:6f:8c:2f:ec:53:e7:89:66:90:72:78:65:72:
         22:2e:f1:3f:a5:35:54:b6:05:e1:72:6e:6c:39:48:0b:9d:1b:
         1e:ad:fa:9b:51:b2:a5:34:0b:46:d3:89:c5:aa:d8:d5:72:4f:
         1f:83:0b:15:31:4a:01:d8:44:d7:41:5c:83:4b:8c:81:b9:35:
         bd:40:b5:d4:fa:c5:74:c2:15:c2:3a:fd:a0:e6:e8:19:69:c1:
         88:6c:a2:7b:55:92:cb:65:e5:68:1d:30:df:46:60:37:80:2b:
         2d:84:1f:76:d6:57:aa:27:2c:fa:d7:d4:f1:46:31:d8:46:b3:
         99:b0:f4:c9:0d:38:60:2a:69:77:5d:c1:d5:81:2a:73:15:a7:
         0a:59:96:57:52:f4:81:a6:d6:41:4f:46:bd:c4:75:2f:a0:76:
         5e:10:45:a8:1e:c3:99:67:14:40:60:03:52:ab:a4:af:64:18:
         ca:d1:dd:fe:fd:0a:03:cd:78:73:c1:f7:a5:2a:32:ed:51:dd:
         96:4a:eb:74:a2:56:36:50:e5:35:59:c9:1a:49:c3:8f:04:85:
         8a:c8:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----