Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
File:                     C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer (raw, json)
Hash identifier:          EhrkNTifeklfeQ0D5KYaHLldem57QaKzQhDIhwo3ChY=
Subject key identifier:   C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       2C0FE316BBD7FE0894DCD5CA4AC1CE21F277C65B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 10:16:21 +0000
Certificate not after:    Wed 04 Feb 2026 10:21:21 +0000
Subordinate resources:    AS: 266698
                          IP: 45.229.72.0/23
                          IP: 45.230.33.0/24
                          IP: 2803:4d20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0f:e3:16:bb:d7:fe:08:94:dc:d5:ca:4a:c1:ce:21:f2:77:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 10:16:21 2025 GMT
            Not After : Feb  4 10:21:21 2026 GMT
        Subject: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:8d:8b:1e:70:94:cb:4d:64:aa:4c:dc:97:
                    a8:8a:42:5e:54:be:79:c1:7f:53:4e:e4:9f:fe:f5:
                    35:17:c1:41:07:18:67:f1:46:cd:33:ae:42:15:75:
                    5b:9a:03:7f:f4:05:66:22:d1:c0:26:25:d4:0b:af:
                    a0:3e:36:6f:60:69:a5:ba:0d:54:01:2d:5f:6c:fd:
                    da:8b:6d:6c:d3:da:ab:2d:af:11:2e:1a:ac:2b:4c:
                    61:9c:3e:79:3d:49:21:7f:26:72:89:cb:f1:49:fc:
                    f6:c8:9d:38:aa:57:2f:76:93:a9:d9:b2:4b:60:07:
                    5d:ab:4a:35:17:a2:13:78:29:a1:48:03:f8:78:39:
                    ea:26:94:77:25:9c:45:35:11:cb:f4:7c:71:fd:72:
                    76:b0:6a:14:1e:ef:ef:f7:03:53:9a:e7:3f:26:e5:
                    68:19:5b:72:a4:58:90:dc:17:72:c7:27:b9:a7:7a:
                    57:da:02:80:c6:f9:01:a7:13:7a:df:89:0b:51:72:
                    2e:25:f5:4c:e9:d6:29:5e:e0:8f:c0:20:95:fe:c3:
                    76:19:77:c9:bc:02:78:95:c8:bf:8d:e7:d9:9a:95:
                    c9:c2:b7:4a:8f:38:9e:de:80:8c:7b:85:8a:43:31:
                    dc:46:4f:f0:4a:a6:23:00:2e:33:aa:64:09:7e:00:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.72.0/23
                  45.230.33.0/24
                IPv6:
                  2803:4d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266698

    Signature Algorithm: sha256WithRSAEncryption
         a3:c4:20:24:92:54:5b:d0:41:0d:91:fd:51:a1:87:8e:b0:71:
         75:3b:5d:88:78:12:7f:1c:3b:b3:14:f6:91:c6:83:71:88:4b:
         5f:ef:3e:da:73:b4:40:8f:1e:54:a3:99:c7:83:f3:56:f7:34:
         02:3a:a7:e4:e9:bf:5b:18:9d:24:76:9b:3b:0b:b1:f0:d4:51:
         fe:e9:33:1e:98:0a:ee:ee:c5:8a:c4:2c:ed:06:61:3b:4e:38:
         ea:7a:23:a1:83:37:e3:6a:f1:50:7c:c3:e5:a1:f7:de:b8:4a:
         23:7e:b3:2e:7a:78:ad:e0:f9:88:44:97:47:23:64:cf:b8:d6:
         c7:10:1a:bf:83:68:f5:49:9d:f6:10:f3:97:2b:3d:ad:34:01:
         ad:28:eb:ae:61:b9:5e:a1:f8:ca:95:45:56:70:91:ec:49:78:
         d7:d7:00:fd:e3:7e:e4:ff:00:fa:f8:c6:92:a8:7c:08:b9:c1:
         b2:44:2f:2e:ad:8e:36:e5:5e:c8:0b:58:b5:ca:92:1c:76:d6:
         3d:18:a1:43:d9:45:e2:00:82:c1:c8:85:9a:61:5a:53:23:09:
         83:45:72:fe:13:9c:7d:c0:c3:a3:f6:47:ca:55:5f:44:df:5d:
         b8:0d:dd:88:f9:36:82:ff:6e:e8:64:c6:d5:6c:f0:7c:49:f2:
         69:fd:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:24 2025 by rpki-client