Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
File:                     D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer (raw, json)
Hash identifier:          I6sIlZTqsZ+CqpR3nTYr9EldGx/GA1pixvRSnR25PFA=
Subject key identifier:   D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       1A576A1D1619B93BAFD088E50F1503979DD11A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:13:38 +0000
Certificate not after:    Tue 04 Mar 2025 18:18:38 +0000
Subordinate resources:    AS: 52241
                          AS: 52366
                          IP: 190.99.96.0/20
                          IP: 2803:b200::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jul 2024 00:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:57:6a:1d:16:19:b9:3b:af:d0:88:e5:0f:15:03:97:9d:d1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:62:16:4b:93:7b:23:a1:3c:11:e3:26:1c:d5:
                    57:c1:e9:b7:15:ee:dd:f2:9d:4e:ae:56:13:6e:ca:
                    f7:52:8f:34:1a:a6:b1:d0:a8:9e:26:84:33:00:56:
                    75:d2:ef:57:ac:6d:35:e4:0c:1f:25:a6:6d:92:6d:
                    ee:52:fc:84:0d:4a:13:8a:13:85:c6:c5:2c:1f:1a:
                    23:f0:34:68:9e:c3:9e:61:81:0f:16:76:30:45:f6:
                    5b:e7:87:ac:c4:74:91:f0:75:e3:de:2d:0c:69:54:
                    a0:d1:6f:d0:8a:8a:54:8c:2f:26:9d:e8:b2:89:57:
                    44:f0:bc:ab:1b:89:b7:10:24:09:48:a2:33:4e:62:
                    d0:61:36:69:85:dc:e1:7f:2a:d1:eb:30:22:72:da:
                    5c:9e:35:52:7b:41:45:d3:45:47:65:49:3f:52:38:
                    54:55:44:57:e0:6e:e1:ea:59:6e:a0:59:6b:90:08:
                    fc:a9:4e:4a:75:6b:6b:b0:65:ae:15:fb:4a:37:7c:
                    30:3f:b0:0f:d0:8a:36:23:35:f5:9f:14:b6:95:dc:
                    db:d4:9a:ea:60:ca:0a:66:2a:a2:3b:32:1f:00:2e:
                    10:85:47:dd:c8:d7:f1:51:37:0b:ef:96:ad:bc:24:
                    87:a6:ee:70:e6:7f:16:b3:b2:cf:ba:3d:a4:40:30:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.96.0/20
                IPv6:
                  2803:b200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52241
                  52366

    Signature Algorithm: sha256WithRSAEncryption
         d5:18:a8:42:ec:8f:01:34:73:d5:d7:8c:5d:d4:c4:64:f1:1e:
         59:34:06:c7:d0:78:12:bc:7f:ac:ac:8a:f4:04:d7:d3:29:38:
         56:e8:7f:e2:ec:6d:a7:cb:a6:19:b0:f2:4f:6e:4f:e8:8f:aa:
         0f:42:ae:9c:60:14:69:e4:97:5c:4c:3a:31:b0:5c:7c:47:3f:
         c1:8d:4b:84:55:ff:66:cd:4a:3e:eb:d6:75:8d:bb:e7:58:04:
         bc:66:c0:bb:dc:17:95:44:eb:1c:78:af:ac:68:b2:aa:6a:a7:
         3e:84:46:08:eb:92:b1:89:b0:d4:36:c2:4f:d2:a2:ff:80:06:
         cf:90:2a:43:c8:08:95:3e:e5:96:7a:c1:17:44:1f:7c:9d:01:
         ea:72:60:bd:f9:f8:61:06:43:47:05:9e:56:df:4b:04:dd:60:
         08:e7:77:f6:81:73:8e:80:c2:a2:95:81:b0:0d:30:e6:ef:05:
         7a:08:7a:8c:95:4d:48:ee:bd:b6:1c:f6:69:25:62:ae:15:fd:
         42:2f:16:e3:89:e8:f3:f7:93:c5:4b:8f:62:8e:ff:31:46:8a:
         9a:3f:ef:76:88:9c:67:48:d4:98:64:aa:20:db:be:e4:5c:8e:
         29:de:0e:0e:b5:91:74:7b:34:6d:66:51:4b:3c:54:2e:81:19:
         23:73:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 19:34:41 2024 by rpki-client on console-ams.rpki-client.org