Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
File:                     BF32AEE1B63DB0DF1296575D56FA963E24476012.cer (raw, json)
Hash identifier:          iNCTNMntSUfSVEWKqOPYaTxoPHr+wtmJh0DhMSQg3hg=
Subject key identifier:   BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       7C8536DE4E0FD98940C048DF7BB60BAE61C44FA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 01 Mar 2025 20:15:01 +0000
Certificate not after:    Sat 28 Feb 2026 20:20:01 +0000
Subordinate resources:    AS: 274048
                          IP: 2803:22d0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:85:36:de:4e:0f:d9:89:40:c0:48:df:7b:b6:0b:ae:61:c4:4f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  1 20:15:01 2025 GMT
            Not After : Feb 28 20:20:01 2026 GMT
        Subject: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:fb:55:e0:c5:41:9d:8c:df:ef:6d:df:87:
                    97:94:f4:e0:20:bc:43:3b:f3:d2:67:c7:fb:11:e5:
                    a6:d7:22:6d:63:3d:14:9a:ce:a3:1e:19:80:c3:29:
                    d0:c3:46:4b:9d:82:5d:67:73:28:94:aa:7a:d5:6a:
                    5d:87:80:5a:66:e3:00:50:62:74:af:49:e4:a5:41:
                    0d:dd:6d:64:6b:82:ee:69:7b:7c:2f:d8:ff:22:43:
                    cd:ac:e0:a9:e4:a9:a3:8c:e3:c1:17:b5:d1:f7:af:
                    d5:58:8e:b9:bb:cd:65:29:6b:ff:ac:b4:67:ad:a5:
                    6a:ac:08:85:69:d0:5a:2c:f2:c5:83:be:d4:02:d7:
                    8e:83:de:1d:ec:bb:23:82:db:1e:1b:b7:f7:6d:2e:
                    b5:72:59:be:7a:9f:dd:6f:94:82:93:44:9d:66:0d:
                    cf:07:fe:4b:2a:36:bb:90:0a:61:47:2c:68:01:04:
                    62:56:05:2f:50:65:a1:ac:c2:82:d9:1b:39:7a:aa:
                    3d:fd:94:a8:90:53:7c:29:83:77:c4:b1:ec:a6:7c:
                    fa:28:cb:92:e9:56:8f:ff:15:fd:63:6b:37:43:34:
                    f1:07:10:75:9c:13:c5:08:73:35:0b:f8:f9:f9:bc:
                    07:dd:ee:df:da:8b:78:01:9d:c0:db:c8:ca:db:0b:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274048

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:18:cb:56:73:08:86:fd:3a:c2:0f:3b:5a:a7:a5:77:73:
         84:e6:f0:60:87:61:fb:7c:15:6d:5d:fd:90:c3:10:36:ff:2f:
         73:c5:6e:27:61:da:c1:3e:d8:b7:62:b6:08:6c:0c:f8:ab:d1:
         0d:a7:38:82:62:6a:6e:1d:76:f9:49:7e:6b:3e:60:80:88:6b:
         2d:8a:ec:fc:6d:f9:fc:48:4f:fc:94:77:b4:17:c7:45:a8:9f:
         ff:38:c0:ea:f0:7c:67:83:2c:cb:5f:ec:2a:3a:1e:d8:10:3d:
         1b:72:2e:28:48:76:e1:6c:dd:89:32:ff:af:f2:20:f2:29:54:
         f5:30:16:b0:72:7c:99:97:c7:26:eb:20:0e:f7:81:47:57:20:
         9a:f1:23:f0:c5:67:f9:19:9f:7f:31:f5:1d:de:ba:86:d5:08:
         40:d4:49:8b:6b:b4:a2:cb:cf:85:a2:49:ca:b9:50:9d:32:78:
         01:15:9a:67:b7:e5:07:c2:45:af:64:96:07:9d:de:3f:0d:a3:
         3d:0c:15:08:16:73:05:eb:96:a9:7c:59:96:0b:13:a6:0d:a0:
         49:9d:54:51:45:9e:72:87:cc:ce:9c:25:88:6f:fe:83:df:b4:
         66:11:dd:9f:a4:24:8c:b6:ca:a0:bf:9a:4f:13:6e:b6:8e:3c:
         91:24:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:58:32 2025 by rpki-client