Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
File:                     BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer (raw, json)
Hash identifier:          2ih0Jj4bwI1w5tVWcG9KMxFi3f4s/H0v2Wp3ubsBXVI=
Subject key identifier:   BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       60BE01CA6A54C4221B7AA786A87F30DB82A31E5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 13:04:07 +0000
Certificate not after:    Wed 04 Feb 2026 13:09:07 +0000
Subordinate resources:    AS: 267745
                          IP: 45.169.163.0/24
                          IP: 2803:83a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:01:ca:6a:54:c4:22:1b:7a:a7:86:a8:7f:30:db:82:a3:1e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 13:04:07 2025 GMT
            Not After : Feb  4 13:09:07 2026 GMT
        Subject: CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:82:36:3d:5e:80:53:46:9b:36:63:10:81:
                    70:c4:01:2f:de:ae:f1:82:c5:18:48:98:99:44:20:
                    59:f2:af:52:0c:f5:7e:af:9f:77:53:ce:f8:18:9b:
                    5c:2b:76:15:62:47:bb:c6:7f:c2:39:06:6d:39:55:
                    4e:91:f0:18:71:40:1c:87:a5:c0:89:89:6a:10:46:
                    f9:48:7e:db:4c:1a:3b:1e:79:43:36:84:9c:77:c3:
                    67:8d:fc:96:4e:f5:f0:4b:57:05:80:c5:3f:eb:48:
                    b2:81:b3:9d:bb:e6:9d:8c:93:c1:c3:70:b8:cb:54:
                    96:a9:00:5b:e9:77:a2:9e:da:f6:8d:e4:98:21:2f:
                    3c:63:13:c8:06:b1:c5:1b:7b:ab:29:da:1b:08:f6:
                    d8:e2:26:7a:0b:4c:c0:e8:96:02:75:cc:d2:b8:f3:
                    eb:91:71:1c:92:22:88:be:af:94:01:f7:41:c0:98:
                    49:34:83:55:65:f7:a0:70:35:48:71:c5:d5:e6:25:
                    cd:63:6c:37:bf:82:76:54:84:62:f6:1e:9c:ce:2c:
                    dc:b4:6e:34:4f:cf:1b:c8:5d:7c:e0:27:04:ad:ff:
                    a3:82:f3:43:a3:ad:91:40:5b:45:3e:55:c4:e0:3b:
                    f8:4d:b0:46:00:53:73:29:da:5b:73:19:0a:e3:b6:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.163.0/24
                IPv6:
                  2803:83a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267745

    Signature Algorithm: sha256WithRSAEncryption
         51:39:ce:16:53:ac:1f:bd:c5:3c:d7:f9:c7:85:3c:fc:34:1f:
         ad:83:10:34:25:b2:a6:20:7f:55:7c:77:4e:b0:8e:39:b5:84:
         67:aa:5b:5c:b8:fa:12:41:b6:d3:f9:b3:56:25:e9:ae:6f:36:
         13:bf:0c:52:d4:d9:98:c6:8c:5e:3d:9d:eb:4f:75:33:e4:e5:
         25:af:a5:cc:70:02:04:12:a4:c0:e6:81:94:92:ce:1c:bc:e0:
         7c:60:c6:56:72:32:46:7b:db:9a:36:40:78:12:ce:3d:78:f9:
         cc:95:3c:7f:67:27:a1:ed:e3:00:fa:c3:98:76:2a:31:76:e9:
         bb:eb:3c:74:10:40:e6:04:f7:d7:58:d1:ae:f8:b6:45:67:d0:
         38:43:ad:b2:41:cb:3b:39:a1:62:a7:ad:c8:51:ef:60:45:b5:
         d2:98:a2:a1:e6:8d:87:be:22:00:de:27:73:de:64:2e:3f:74:
         01:11:4a:e2:4b:48:9d:52:a0:db:dd:7a:52:18:3b:d2:90:c7:
         a6:d8:d4:02:13:2d:1e:d6:9f:f8:1a:c9:ca:6f:b1:59:3e:d0:
         13:bc:a5:9d:ef:1f:38:ef:86:eb:ed:73:5e:c2:b9:c4:3c:62:
         1e:cc:b1:c8:fd:b2:24:b1:9d:53:7e:e1:ab:df:d2:c0:0d:47:
         8b:e5:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:26 2025 by rpki-client