Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.cer
File:                     D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.cer (raw, json)
Hash identifier:          FRM85T/22LBCJjZa3KTMXfy6xaTNToaF3N1gW2/ZNr0=
Subject key identifier:   D9:2D:E7:48:3F:5F:22:40:F2:99:79:B8:39:2E:8D:7A:BF:8F:9B:B1
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       5817B83C877C7DCDDC766DF4C9BA246FCF86BD61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:41:49 +0000
Certificate not after:    Tue 04 Mar 2025 17:46:49 +0000
Subordinate resources:    AS: 264752
                          IP: 168.195.36.0/22
                          IP: 2803:9f40::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:b8:3c:87:7c:7d:cd:dc:76:6d:f4:c9:ba:24:6f:cf:86:bd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:41:49 2024 GMT
            Not After : Mar  4 17:46:49 2025 GMT
        Subject: CN=D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:a0:c7:a8:d6:c3:b6:49:e9:c2:86:b2:ff:
                    b3:77:66:b2:72:41:bd:91:92:5d:51:ba:fd:95:e8:
                    b1:b2:73:cb:f4:32:ed:17:0a:fd:a3:52:9d:0d:80:
                    3c:09:62:3b:41:e2:6a:b6:ed:f0:3c:c7:3d:dd:c2:
                    d9:3b:01:ec:d4:dc:4f:03:b0:70:89:ab:b7:84:55:
                    6e:4e:c5:84:b1:a8:81:09:b4:5d:24:53:fc:35:79:
                    6b:5f:cc:20:1f:7b:7c:b5:c8:f8:85:d6:10:88:a9:
                    a5:da:e0:97:4d:a1:d2:5a:3a:a0:f7:2b:b6:eb:9a:
                    e9:34:2c:ba:7a:16:ac:16:60:fc:5c:d6:65:0b:48:
                    cc:96:f0:6d:4b:af:e9:00:e3:2e:f5:a0:81:dd:d7:
                    74:4c:a6:7c:a1:ac:42:6b:77:d1:0e:87:fc:29:ba:
                    b6:5a:de:01:3e:99:e7:fb:e4:50:bd:ad:25:ff:4f:
                    fe:41:1e:83:50:70:f6:e0:6d:59:f8:72:85:0c:03:
                    2b:36:10:fb:e6:9d:3d:dd:29:52:cc:6d:0a:c8:34:
                    61:c4:ee:58:8c:fb:0f:0e:16:54:10:7c:b8:58:88:
                    dc:36:8d:99:c2:19:d4:fc:bb:98:6d:27:b5:d6:15:
                    30:9b:f9:07:a0:fd:61:61:68:5f:ac:11:2f:e1:7a:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:2D:E7:48:3F:5F:22:40:F2:99:79:B8:39:2E:8D:7A:BF:8F:9B:B1
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.36.0/22
                IPv6:
                  2803:9f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264752

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:4d:48:ab:9d:05:c5:85:23:8b:39:14:d3:80:2d:6e:2e:
         3f:f2:25:a2:c1:b2:eb:0a:95:2c:57:14:18:ec:c5:9b:e5:d8:
         cf:af:6b:45:f2:9e:75:f1:a7:72:b3:b1:14:9e:9b:aa:df:ff:
         9a:82:29:24:2c:46:36:c6:ce:ed:d2:b1:30:be:6c:84:b6:32:
         52:8d:41:de:1d:b3:50:cc:2e:4f:1d:81:0a:62:88:7b:bd:fa:
         19:fc:67:99:66:53:11:8a:4a:7c:a9:92:e3:30:25:fa:73:6f:
         10:57:60:e4:32:71:76:33:6b:3e:cc:f3:6e:4d:47:b2:c6:73:
         53:8e:04:cc:fd:54:77:4e:76:73:ee:cf:c5:d6:ab:54:4f:3e:
         5f:c3:75:36:75:41:90:bf:ec:40:4a:af:3c:fc:78:79:a5:70:
         76:21:40:ea:25:c8:ce:ea:f4:76:8e:d5:0b:aa:aa:b6:da:81:
         fb:c7:32:2c:bf:69:42:52:23:0c:bc:a2:de:cf:52:a2:f2:fb:
         d1:c9:07:99:06:7b:72:b3:f9:90:22:2d:2c:1b:6b:33:61:b7:
         21:13:57:82:26:6e:17:9a:d0:b5:56:9e:42:fd:ef:ee:da:31:
         2e:c8:71:9c:1c:94:ab:fa:19:8e:2b:41:f5:53:9b:8e:ff:4e:
         98:ae:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 07:10:10 2024 by rpki-client on console-ams.rpki-client.org