Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
File:                     CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer (raw, json)
Hash identifier:          QVdEIBfCqooo0Zrib4x1815kZS2bS8W9sLiK1u1jmmw=
Subject key identifier:   CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       76FDAC1AF3DECC793CEE12682DB26033F4FF62EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:55:30 +0000
Certificate not after:    Tue 04 Mar 2025 18:00:30 +0000
Subordinate resources:    AS: 18678
                          IP: 179.1.0.0 -- 179.1.143.255
                          IP: 179.1.176.0 -- 179.1.255.255
                          IP: 190.90.0.0/16
                          IP: 2800:310::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fd:ac:1a:f3:de:cc:79:3c:ee:12:68:2d:b2:60:33:f4:ff:62:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:55:30 2024 GMT
            Not After : Mar  4 18:00:30 2025 GMT
        Subject: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:40:ca:65:0a:a7:bc:d2:fb:29:d4:bd:79:
                    b5:46:03:16:2b:1f:48:ce:ca:be:f2:c7:d7:21:51:
                    c5:dd:d6:c1:db:51:f6:23:ab:a8:04:6b:ba:4d:a7:
                    44:b7:34:e5:80:8e:7e:c9:6b:1d:64:17:06:01:ff:
                    58:92:4d:f9:cd:69:0e:8d:b5:7c:e3:1c:74:c3:3a:
                    a2:c1:a8:92:11:51:28:e9:b6:a7:26:ec:03:28:0f:
                    66:f0:87:11:7e:dc:db:73:0b:cb:03:cf:d5:04:2f:
                    cb:44:4c:3d:6c:65:5e:8f:84:e2:d2:b4:60:ee:7c:
                    63:29:cd:11:c4:f1:77:a1:53:36:54:69:90:56:12:
                    d0:66:5e:df:bc:c4:28:87:cb:24:02:31:5c:cf:7a:
                    f1:cb:dc:b1:8a:4f:58:82:8d:c3:b7:19:02:b7:03:
                    1d:31:d5:aa:13:c4:b5:9f:43:29:94:e6:9f:58:c4:
                    6f:2c:2c:a9:b9:03:6d:f5:9d:52:47:29:2e:d4:11:
                    5b:2f:6d:be:e0:d4:08:42:3b:ba:8c:31:bc:99:2c:
                    c5:fe:fa:47:3a:45:28:b8:4f:be:93:b6:58:ba:bc:
                    38:56:f5:66:28:da:af:86:c8:34:fa:21:54:66:c6:
                    5f:d4:12:28:97:c9:2f:b3:ed:a8:f2:e1:73:80:08:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0-179.1.143.255
                  179.1.176.0-179.1.255.255
                  190.90.0.0/16
                IPv6:
                  2800:310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18678

    Signature Algorithm: sha256WithRSAEncryption
         74:33:c5:0e:94:2a:ea:b7:6b:72:82:d6:d3:40:fe:9f:4e:86:
         1b:ca:05:83:22:0a:84:37:09:21:ec:3c:21:01:dc:87:69:83:
         4b:d1:05:53:92:88:34:69:8b:c4:1f:54:69:6f:92:5b:af:32:
         37:ad:44:a5:1c:56:da:1b:bc:91:bf:ea:b8:05:29:d4:eb:44:
         3f:18:7d:d2:15:44:4c:a4:d8:50:11:20:22:26:fa:fb:e4:a4:
         32:a0:16:83:44:5f:59:26:40:63:e2:3b:f6:a3:00:39:d9:1b:
         0e:d6:81:62:74:56:f4:46:2f:34:a4:fa:d4:1b:fa:25:dd:d7:
         39:27:3b:ae:c5:15:22:57:b1:bb:6d:31:9f:f0:b6:d1:83:8c:
         bd:8e:6e:4d:31:55:98:65:ed:1c:3c:7a:4c:45:08:b6:e1:9a:
         18:32:25:72:34:64:a2:36:80:4b:d2:e0:27:90:0f:3b:56:cf:
         7b:88:91:c8:8d:5c:33:23:77:90:90:16:8e:84:30:67:f6:2c:
         2f:0c:89:a8:7f:d1:33:01:0b:81:30:42:72:1f:4d:12:79:d1:
         cb:c6:ee:8d:bc:d8:9e:f2:0d:d6:5b:2f:00:0c:1c:bb:c4:38:
         89:8e:46:d8:25:ee:5d:12:68:02:1c:6f:f9:8b:22:d8:ea:3a:
         0e:fd:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:57:18 2024 by rpki-client on console-fra.rpki-client.org