Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D746D75B817C987CF5174C6C1F75102E45E1979E.cer
File:                     D746D75B817C987CF5174C6C1F75102E45E1979E.cer (raw, json)
Hash identifier:          FEWYHTt8/YTt1HyMRAGiMcZXLX83k7BYIE8H+LMNBTo=
Subject key identifier:   D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       39D288B696B51DFE468F99B75F32107552E1548F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:40:34 +0000
Certificate not after:    Tue 04 Mar 2025 17:45:34 +0000
Subordinate resources:    AS: 272987
                          IP: 2803:d90::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d2:88:b6:96:b5:1d:fe:46:8f:99:b7:5f:32:10:75:52:e1:54:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:40:34 2024 GMT
            Not After : Mar  4 17:45:34 2025 GMT
        Subject: CN=D746D75B817C987CF5174C6C1F75102E45E1979E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:26:cf:44:80:9a:c0:ef:9b:09:9f:9f:1f:93:
                    9e:e6:f9:96:c5:8c:9e:e0:d4:6a:45:48:24:b4:35:
                    aa:ed:0e:78:5c:84:00:49:a4:ee:78:f2:c9:8a:ce:
                    c2:f6:a1:f7:04:c0:92:dd:52:d0:4e:9d:23:66:d5:
                    27:3d:23:b7:42:70:8d:04:b8:d9:6a:aa:03:ea:d3:
                    5b:48:da:9a:03:bc:5d:0a:05:07:b7:c6:a6:13:b7:
                    6a:da:d8:b6:12:7a:3f:92:d9:12:4d:92:e9:d9:11:
                    62:e6:0d:56:f1:64:9f:d7:c1:66:59:b1:0d:93:13:
                    ab:3b:96:6b:f9:50:49:de:91:62:3e:1f:fd:e6:07:
                    a2:2f:5d:10:e5:53:59:5b:22:44:33:b0:04:fb:2b:
                    cb:e6:9c:6d:91:f6:ed:96:11:87:9b:52:4d:f6:65:
                    85:93:61:35:ec:d3:cb:31:24:20:19:9d:fa:31:af:
                    11:67:84:e2:a7:9b:4d:cb:76:8e:b2:c0:80:df:e1:
                    6e:cd:6b:66:13:a8:ef:cc:97:70:49:09:9b:c4:d4:
                    14:8f:27:f1:f4:68:b3:e9:be:f8:21:b6:bf:bf:f4:
                    1d:c5:d5:17:b0:5d:73:d6:a8:bc:2a:5b:e8:8f:13:
                    99:cd:4b:3a:87:69:31:5a:64:69:27:20:b7:80:fb:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:46:D7:5B:81:7C:98:7C:F5:17:4C:6C:1F:75:10:2E:45:E1:97:9E
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0FE0112D344171721BDEF05EA8B349CEF91D80070D224487CB16358B117AE1/0/D746D75B817C987CF5174C6C1F75102E45E1979E.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272987

    Signature Algorithm: sha256WithRSAEncryption
         bf:9e:8b:31:15:2d:8e:07:89:be:a7:be:e4:b8:53:b0:b2:74:
         b5:c4:b2:56:d8:23:ad:96:bd:4a:e1:13:3a:c8:f8:fb:fc:c7:
         73:18:9d:c3:26:6f:1a:15:12:85:4f:60:cb:0d:14:54:99:fd:
         d0:a6:58:1f:bd:13:13:bb:c2:fb:0a:15:4d:f8:99:e6:23:6d:
         ff:52:70:c6:b4:7d:7f:68:67:8d:47:e3:c2:af:e1:45:10:f9:
         0b:52:b3:bc:71:fd:d4:9e:1a:bf:a2:91:1e:78:d4:8c:5b:1d:
         f7:ee:41:9b:62:13:7a:e5:3c:a4:4d:6e:8a:f3:4d:35:3c:d7:
         f0:63:bc:a9:28:7b:72:37:ea:bb:50:74:cb:18:2d:81:e1:3f:
         42:be:2a:3b:04:f9:36:d5:2b:27:86:7e:99:a1:9c:a1:33:3f:
         eb:d8:5e:91:f3:24:bc:39:3c:6d:b2:42:fe:88:cc:33:c1:6e:
         ac:dd:07:42:0a:96:8f:55:01:e1:a2:72:cc:f8:af:b6:ae:2b:
         2a:8d:02:e7:3a:b7:0c:79:15:2b:50:a2:6c:ad:cf:db:5c:c6:
         06:f0:d0:78:5b:cd:f5:f7:20:46:9a:a3:f7:69:88:70:4d:07:
         75:af:1b:c8:a3:33:1d:60:c5:35:29:32:d4:6c:00:a4:2e:c2:
         3f:58:17:18
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUOdKItpa1Hf5Gj5m3XzIQdVLhVI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDAzMDUxNzQwMzRaFw0yNTAzMDQxNzQ1MzRaMDMxMTAvBgNV
BAMTKEQ3NDZENzVCODE3Qzk4N0NGNTE3NEM2QzFGNzUxMDJFNDVFMTk3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJs9EgJrA75sJn58fk57m+ZbF
jJ7g1GpFSCS0NartDnhchABJpO548smKzsL2ofcEwJLdUtBOnSNm1Sc9I7dCcI0E
uNlqqgPq01tI2poDvF0KBQe3xqYTt2ra2LYSej+S2RJNkunZEWLmDVbxZJ/XwWZZ
sQ2TE6s7lmv5UEnekWI+H/3mB6IvXRDlU1lbIkQzsAT7K8vmnG2R9u2WEYebUk32
ZYWTYTXs08sxJCAZnfoxrxFnhOKnm03Ldo6ywIDf4W7Na2YTqO/Ml3BJCZvE1BSP
J/H0aLPpvvghtr+/9B3F1RewXXPWqLwqW+iPE5nNSzqHaTFaZGknILeA+x7dAgMB
AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXRtdbgXyYfPUX
TGwfdRAuReGXnjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEMwRkUwMTEyRDM0NDE3MTcyMUJERUYw
NUVBOEIzNDlDRUY5MUQ4MDA3MEQyMjQ0ODdDQjE2MzU4QjExN0FFMS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80QzBGRTAxMTJEMzQ0MTcxNzIxQkRFRjA1RUE4QjM0OUNFRjkxRDgwMDcw
RDIyNDQ4N0NCMTYzNThCMTE3QUUxLzAvRDc0NkQ3NUI4MTdDOTg3Q0Y1MTc0QzZD
MUY3NTEwMkU0NUUxOTc5RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMNkDAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMEKlswDQYJKoZIhvcNAQELBQADggEBAL+eizEV
LY4Hib6nvuS4U7CydLXEslbYI62WvUrhEzrI+Pv8x3MYncMmbxoVEoVPYMsNFFSZ
/dCmWB+9ExO7wvsKFU34meYjbf9ScMa0fX9oZ41H48Kv4UUQ+QtSs7xx/dSeGr+i
kR541IxbHffuQZtiE3rlPKRNborzTTU81/BjvKkoe3I36rtQdMsYLYHhP0K+KjsE
+TbVKyeGfpmhnKEzP+vYXpHzJLw5PG2yQv6IzDPBbqzdB0IKlo9VAeGicsz4r7au
KyqNAuc6twx5FStQomytz9tcxgbw0HhbzfX3IEaao/dpiHBNB3WvG8ijMx1gxTUp
MtRsAKQuwj9YFxg=
-----END CERTIFICATE-----