Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD94D9821F379D20EA36D36736038ACA527A9932.cer
File:                     BD94D9821F379D20EA36D36736038ACA527A9932.cer (raw, json)
Hash identifier:          MRnn0x6+9jBpsT5Rlb7YjAr/2YlvxtTq/frCI4J6xRI=
Subject key identifier:   BD:94:D9:82:1F:37:9D:20:EA:36:D3:67:36:03:8A:CA:52:7A:99:32
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       7A111176B91B8B2CC34B461E669E7AA587E1917C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 16:41:52 +0000
Certificate not after:    Wed 04 Feb 2026 16:46:52 +0000
Subordinate resources:    AS: 270101
                          IP: 45.6.215.0/24
                          IP: 168.196.208.0/23
                          IP: 2803:67e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:11:76:b9:1b:8b:2c:c3:4b:46:1e:66:9e:7a:a5:87:e1:91:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 16:41:52 2025 GMT
            Not After : Feb  4 16:46:52 2026 GMT
        Subject: CN=BD94D9821F379D20EA36D36736038ACA527A9932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:bd:fb:d5:f8:cb:6c:2f:11:9b:a1:53:3d:
                    a9:93:fe:dd:4e:af:19:4c:15:ab:72:c7:83:d2:b2:
                    90:85:77:09:72:92:03:0a:28:6a:f3:7e:27:99:20:
                    bf:c5:96:31:5c:ac:71:20:d5:06:55:27:27:74:8a:
                    d7:71:74:fc:c1:1f:98:e3:39:5c:4e:5a:38:8a:44:
                    4b:d1:59:d3:22:b0:6f:c8:5f:a2:c2:43:aa:fa:99:
                    21:77:d9:ee:7f:92:7c:38:91:1c:1f:ff:4e:40:fa:
                    d9:dd:d6:84:6b:22:3c:1d:66:d1:83:4a:20:25:40:
                    58:be:c1:7d:69:7c:9b:eb:cc:80:42:17:22:cb:bb:
                    76:a8:a7:c0:95:4e:03:1d:78:d0:ed:1e:d4:e9:b4:
                    13:c0:00:2f:5b:0f:57:9a:0f:5d:48:23:b0:89:74:
                    3d:11:64:4e:36:4d:e2:80:95:51:3c:28:1d:37:a4:
                    18:44:7b:a2:dc:28:9a:37:91:67:00:a1:48:35:1f:
                    bc:68:43:b4:1c:dc:86:0e:2f:ae:6c:76:fb:f7:50:
                    f9:81:10:cf:19:98:49:82:93:f9:95:d7:a9:35:1f:
                    5f:5b:6f:8d:69:22:24:ff:2c:e1:83:23:e2:10:e5:
                    e4:4e:5c:c9:88:59:03:53:0c:aa:f0:44:86:fc:40:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:94:D9:82:1F:37:9D:20:EA:36:D3:67:36:03:8A:CA:52:7A:99:32
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.215.0/24
                  168.196.208.0/23
                IPv6:
                  2803:67e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270101

    Signature Algorithm: sha256WithRSAEncryption
         a5:1a:fa:8e:bc:8f:0c:58:e4:cf:68:f7:b9:ad:61:f6:12:2c:
         ea:ef:51:7f:80:3d:29:4a:11:99:0d:c9:6a:3b:4b:62:fc:26:
         80:08:e8:8d:f4:ae:bd:82:62:47:83:40:49:8f:14:c8:cf:ce:
         06:90:2b:e3:0f:20:ee:e6:f1:02:ac:9c:33:dd:19:6d:b1:f7:
         99:77:8d:f5:b7:26:c8:aa:aa:72:a9:c2:5e:19:26:30:f8:c4:
         ad:f7:4c:e8:da:c0:5a:95:ee:fe:e1:96:06:2c:c9:4c:4e:ed:
         69:f2:54:61:ab:bb:e3:81:ca:b2:1e:dd:2c:01:81:de:97:71:
         6a:45:9b:6b:7b:04:fb:b7:36:b7:67:37:8a:a6:aa:ab:52:f5:
         07:fd:3c:d6:8f:08:0c:f5:e1:3e:17:4d:d2:ee:ce:ab:b2:bd:
         90:ea:37:cb:14:19:5b:f4:dc:6d:1a:06:e7:1b:d3:82:a1:a0:
         8a:94:9d:d1:c4:da:f6:64:29:b6:00:d9:37:cc:ae:78:13:09:
         1c:af:28:7b:97:97:f5:74:0e:a1:5d:e5:df:32:97:48:7d:fc:
         4e:46:78:f0:a2:71:a0:e3:08:d3:2d:0d:4f:27:6a:eb:a9:d4:
         ea:15:52:e2:e5:cc:45:2e:36:1f:4d:ef:6c:c4:65:df:1e:09:
         48:08:e4:4d
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgIUehERdrkbiyzDS0YeZp56pYfhkXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNTAyMDUxNjQxNTJaFw0yNjAyMDQxNjQ2NTJaMDMxMTAvBgNV
BAMTKEJEOTREOTgyMUYzNzlEMjBFQTM2RDM2NzM2MDM4QUNBNTI3QTk5MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6L371fjLbC8Rm6FTPamT/t1O
rxlMFatyx4PSspCFdwlykgMKKGrzfieZIL/FljFcrHEg1QZVJyd0itdxdPzBH5jj
OVxOWjiKREvRWdMisG/IX6LCQ6r6mSF32e5/knw4kRwf/05A+tnd1oRrIjwdZtGD
SiAlQFi+wX1pfJvrzIBCFyLLu3aop8CVTgMdeNDtHtTptBPAAC9bD1eaD11II7CJ
dD0RZE42TeKAlVE8KB03pBhEe6LcKJo3kWcAoUg1H7xoQ7Qc3IYOL65sdvv3UPmB
EM8ZmEmCk/mV16k1H19bb41pIiT/LOGDI+IQ5eROXMmIWQNTDKrwRIb8QO0vAgMB
AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9lNmCHzedIOo2
02c2A4rKUnqZMjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTM1OTdCMEU3MUI5MTA2QTk3RkUwNzMx
ODIxRjk3NEUyQTM5RTVGMTVGNDI0NEFFQTFEMDlBQjE1NkM2NTA0Mi8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81MzU5N0IwRTcxQjkxMDZBOTdGRTA3MzE4MjFGOTc0RTJBMzlFNUYxNUY0
MjQ0QUVBMUQwOUFCMTU2QzY1MDQyLzAvQkQ5NEQ5ODIxRjM3OUQyMEVBMzZEMzY3
MzYwMzhBQ0E1MjdBOTkzMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALQbXAwQBqMTQ
MA0EAgACMAcDBQAoA2fgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfFTANBgkq
hkiG9w0BAQsFAAOCAQEApRr6jryPDFjkz2j3ua1h9hIs6u9Rf4A9KUoRmQ3JajtL
YvwmgAjojfSuvYJiR4NASY8UyM/OBpAr4w8g7ubxAqycM90ZbbH3mXeN9bcmyKqq
cqnCXhkmMPjErfdM6NrAWpXu/uGWBizJTE7tafJUYau744HKsh7dLAGB3pdxakWb
a3sE+7c2t2c3iqaqq1L1B/081o8IDPXhPhdN0u7Oq7K9kOo3yxQZW/TcbRoG5xvT
gqGgipSd0cTa9mQptgDZN8yueBMJHK8oe5eX9XQOoV3l3zKXSH38TkZ48KJxoOMI
0y0NTydq66nU6hVS4uXMRS42H03vbMRl3x4JSAjkTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:01:47 2025 by rpki-client