Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7871230EF82230BE042A8923EAD143183314225.cer
File:                     B7871230EF82230BE042A8923EAD143183314225.cer (raw, json)
Hash identifier:          lYMWZYbsx1lDI5f8yLv80M0GQDMCkg7R49VEn90V3us=
Subject key identifier:   B7:87:12:30:EF:82:23:0B:E0:42:A8:92:3E:AD:14:31:83:31:42:25
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       5068E5D18B11F0836B0FC2486D69597322827F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:44:52 +0000
Certificate not after:    Tue 04 Mar 2025 17:49:52 +0000
Subordinate resources:    AS: 262223
                          IP: 190.96.96.0/21
                          IP: 2803:ab10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:68:e5:d1:8b:11:f0:83:6b:0f:c2:48:6d:69:59:73:22:82:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:44:52 2024 GMT
            Not After : Mar  4 17:49:52 2025 GMT
        Subject: CN=B7871230EF82230BE042A8923EAD143183314225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:0e:0e:10:41:f7:8c:9d:e9:90:43:be:ac:
                    4f:76:83:b8:69:f3:0a:d3:f2:d8:a1:bc:4d:cd:c7:
                    2f:44:2b:45:b4:aa:e4:11:24:9f:3b:39:40:fa:22:
                    7e:df:73:cb:e2:1d:1a:9d:b7:8e:06:21:0b:9f:ee:
                    33:16:60:5e:11:54:b9:c8:c3:90:13:b7:d3:ea:ff:
                    84:c1:d7:b4:03:ab:8f:78:48:a8:17:c3:e8:7e:11:
                    5c:b8:3a:32:78:c5:aa:86:50:48:d4:af:ab:59:b1:
                    39:ea:4f:c2:01:14:e2:11:18:d5:03:c2:a8:8d:cf:
                    c1:5a:73:db:ce:97:8c:5a:48:17:9b:95:b3:11:9d:
                    26:b6:b2:38:f2:18:62:f0:24:64:f2:f9:29:5c:12:
                    e0:ca:16:39:cd:88:42:21:72:71:ca:2c:0b:29:02:
                    04:d5:7a:b5:f1:20:80:41:80:44:8e:ae:5e:9a:56:
                    eb:21:7a:b4:25:89:e4:98:6c:37:ce:ea:81:f1:e6:
                    c3:36:09:89:ee:99:b6:dd:96:6c:4e:24:c1:1c:ac:
                    07:45:31:66:27:e6:58:a7:8b:8f:d5:a2:c6:83:aa:
                    3f:70:f0:c6:94:82:f3:33:81:58:06:fa:c6:07:d6:
                    92:91:c0:5a:af:c9:37:6b:47:26:ec:96:35:1a:5d:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:87:12:30:EF:82:23:0B:E0:42:A8:92:3E:AD:14:31:83:31:42:25
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/472774FDD7F0AF96EA24E4E6879617D9CF89454C4FAFE6A92D59FDC55AE9E07E/0/B7871230EF82230BE042A8923EAD143183314225.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.96.0/21
                IPv6:
                  2803:ab10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262223

    Signature Algorithm: sha256WithRSAEncryption
         9e:e3:71:7d:2e:b3:a8:78:9b:e9:d1:6b:9a:6b:f2:c5:c5:6f:
         83:c3:3d:90:f2:ae:6b:75:97:af:31:80:ca:c5:63:73:42:eb:
         98:22:24:cc:11:a0:5b:0d:48:91:56:f9:53:f9:c1:98:01:ec:
         23:c2:0c:4c:12:8f:63:c4:09:fe:80:b2:65:de:2f:2a:2d:70:
         e8:16:1a:4a:5d:1b:78:5b:e8:61:53:19:37:8a:79:5b:46:0c:
         55:22:75:38:cd:8f:8a:41:fe:14:e0:47:eb:b2:98:40:b1:2b:
         a3:b5:f0:6a:d4:27:cf:15:35:00:98:e8:0b:5a:f2:2b:0d:33:
         15:db:a6:8f:f1:c4:27:15:c5:8b:10:8b:51:a6:15:c7:0f:7d:
         f6:e8:5b:7f:71:d9:aa:dd:11:7a:b8:e7:93:64:60:d9:45:7b:
         c3:3d:3c:22:3f:12:10:a2:32:6e:5a:e8:40:6e:33:9f:a4:3e:
         de:da:27:02:df:77:3b:47:65:d9:f1:ff:93:1e:1b:2d:b2:06:
         77:1d:a2:a5:14:62:90:42:d1:a0:ca:3e:57:d0:8b:f9:09:5c:
         6f:b5:6d:db:bd:a7:9e:27:02:22:d2:37:13:fe:51:d7:6d:54:
         1f:0d:e1:16:41:1f:b1:b1:de:c4:49:f8:b6:4a:8a:6f:ab:20:
         3d:58:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:23 2024 by rpki-client on console-fra.rpki-client.org