Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3866720790FE6E72631F4DC662653F04D028366.cer
File:                     C3866720790FE6E72631F4DC662653F04D028366.cer (raw, json)
Hash identifier:          5smVcQR3zO9oVhWc9w8nz5+SUz2C2H1ORpHaYdvjVq0=
Subject key identifier:   C3:86:67:20:79:0F:E6:E7:26:31:F4:DC:66:26:53:F0:4D:02:83:66
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       746F281AA3132FDC74AF6881E047807EDDF031A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/C3866720790FE6E72631F4DC662653F04D028366.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 20:00:40 +0000
Certificate not after:    Wed 04 Feb 2026 20:05:40 +0000
Subordinate resources:    AS: 269753
                          IP: 45.182.236.0/22
                          IP: 2801:19:8800::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6f:28:1a:a3:13:2f:dc:74:af:68:81:e0:47:80:7e:dd:f0:31:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 20:00:40 2025 GMT
            Not After : Feb  4 20:05:40 2026 GMT
        Subject: CN=C3866720790FE6E72631F4DC662653F04D028366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:99:bf:19:16:22:aa:49:99:37:bb:59:5d:
                    b2:77:79:59:12:ee:af:6b:d2:10:60:fa:d3:28:94:
                    68:58:0d:2b:e1:b6:4c:e2:4b:16:f7:99:66:1c:42:
                    d6:f4:91:77:9c:04:10:ee:d9:1b:57:aa:88:be:8a:
                    14:cb:1e:f6:cf:c4:72:c8:df:6d:76:ea:d6:dd:44:
                    9f:f9:f7:4a:95:9c:fa:08:78:61:4d:68:69:01:68:
                    fc:18:cd:42:63:99:7c:bf:4f:da:ed:3d:4b:b5:d8:
                    3c:4e:37:e6:d8:d1:78:1e:45:6c:cd:04:77:ab:c3:
                    6e:9f:91:b1:20:1e:2d:80:49:70:c5:cb:e5:d1:6a:
                    b0:b7:f3:da:0a:e1:6d:c2:87:2d:e1:8e:ca:a7:b9:
                    65:f5:4b:2b:3f:7e:aa:9b:0c:17:e9:bd:75:e9:4b:
                    16:1c:c0:30:90:ad:1b:d1:58:81:25:b6:84:cb:52:
                    ac:fc:03:d8:69:1e:ad:ae:f3:f5:49:3b:80:b0:16:
                    32:5e:66:a7:94:50:6a:1e:ea:fb:7a:74:a0:59:f8:
                    b1:af:40:43:07:6d:22:6b:8f:1c:cc:0a:77:db:41:
                    39:88:a1:a1:22:d6:34:c6:68:68:fb:c7:d1:cc:85:
                    e1:4a:ab:8c:23:da:cd:f9:ed:a9:04:27:fb:0d:4b:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:86:67:20:79:0F:E6:E7:26:31:F4:DC:66:26:53:F0:4D:02:83:66
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/C3866720790FE6E72631F4DC662653F04D028366.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.236.0/22
                IPv6:
                  2801:19:8800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269753

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:14:d1:10:4d:09:ec:e5:7d:78:dc:cf:76:4d:a5:1d:ca:
         ac:a2:30:05:cc:ee:ac:df:47:bc:1b:02:ab:a7:c0:8c:42:11:
         b9:d3:5b:15:26:aa:6a:2d:18:2b:93:2b:f7:5d:9a:20:ac:3a:
         9f:bd:ae:94:96:05:0a:3c:93:af:b4:06:5a:f2:cb:83:45:32:
         7d:20:58:e9:c5:90:3e:bb:8e:82:93:87:f8:9c:ae:d7:d2:dc:
         f0:19:59:68:c7:41:da:0e:5d:d4:ba:f1:bf:74:36:3a:b2:2c:
         d8:39:e8:0c:6f:62:0a:d2:cd:db:e7:34:4e:73:b4:2b:33:ae:
         8c:16:a7:80:ee:cf:32:a0:23:0d:db:0f:05:f0:ba:81:3e:e9:
         6b:53:1e:ca:d2:19:61:9e:e6:26:d6:6b:5a:5b:77:7b:17:02:
         f7:77:6b:3b:fe:4f:90:71:b7:44:fe:2a:e3:3e:ff:25:3b:bb:
         53:56:fb:1c:08:b7:ef:d5:34:5e:8f:22:ca:94:49:d5:d2:f6:
         da:b7:86:14:2b:14:55:22:ed:ed:41:b4:36:cf:68:47:8a:42:
         ee:f1:1b:da:59:7f:0b:b9:74:13:26:99:7d:6f:2f:75:c8:d9:
         89:8e:9d:43:c8:be:a8:51:a8:e3:ac:97:04:dc:cc:a6:7d:ed:
         67:11:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:48 2025 by rpki-client