Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer
File:                     DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer (raw, json)
Hash identifier:          82brBFIC3m9JLWKSDGnAPmWSzHLPxVu6f4zd9Vb2Aoo=
Subject key identifier:   DA:08:59:29:B0:42:10:40:BC:F2:92:D3:D0:AE:C6:BF:DD:B2:69:AE
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       28FB9A5C054B678655742E11AB7B976165AEC6DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 21:14:54 +0000
Certificate not after:    Wed 04 Feb 2026 21:19:54 +0000
Subordinate resources:    AS: 267915
                          IP: 45.178.244.0/22
                          IP: 2803:7660::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fb:9a:5c:05:4b:67:86:55:74:2e:11:ab:7b:97:61:65:ae:c6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 21:14:54 2025 GMT
            Not After : Feb  4 21:19:54 2026 GMT
        Subject: CN=DA085929B0421040BCF292D3D0AEC6BFDDB269AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:1a:82:4c:71:bb:af:df:73:9f:22:e2:e2:
                    82:7f:9e:33:39:11:d9:fa:0b:5d:b5:3f:8a:2b:b1:
                    ad:a1:48:48:8f:2a:17:61:e6:da:da:dd:d1:1b:ad:
                    f3:e9:74:92:76:c7:01:4c:e3:e2:c5:7b:dd:15:3d:
                    56:f3:de:51:c6:24:03:74:77:fe:50:e7:2a:dd:2d:
                    f2:60:f0:dc:dc:1e:ed:d2:a7:83:72:a1:92:a3:90:
                    8f:d1:31:84:14:a4:34:3d:55:a0:5b:d5:d7:19:14:
                    c8:92:07:19:f9:75:86:4b:af:51:24:d9:3f:84:af:
                    fa:65:1b:ac:0c:23:0f:e6:8a:ed:da:e9:8d:97:21:
                    e8:3a:4e:ac:4a:bc:3e:f4:2b:bd:44:86:a1:22:24:
                    89:ca:de:fb:90:31:d6:6a:49:44:15:b9:73:5a:8b:
                    1b:9a:3c:1e:8d:51:1d:58:6d:42:63:1d:9d:4a:7f:
                    23:72:b2:66:fe:5f:9c:4c:a8:73:7b:91:69:51:b3:
                    2c:ac:a1:7c:75:97:65:59:ed:a9:ff:a8:37:7a:82:
                    72:0d:ce:6b:d2:37:d2:06:55:9a:94:a6:b4:a9:74:
                    f2:15:61:bd:56:61:13:37:7e:d2:a2:fa:05:2b:0d:
                    a6:4e:a0:5a:df:ef:65:14:a7:31:69:72:ad:5d:06:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:08:59:29:B0:42:10:40:BC:F2:92:D3:D0:AE:C6:BF:DD:B2:69:AE
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.244.0/22
                IPv6:
                  2803:7660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267915

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:e0:6f:92:dc:50:f5:19:1a:d5:e9:7a:b7:7c:4d:f6:db:
         88:c0:a1:88:3c:42:b7:d6:cf:38:8b:48:35:e1:09:66:6b:52:
         d1:49:31:e1:a8:27:ec:2c:f3:83:09:49:c6:42:0c:9d:bd:e9:
         fc:7d:a6:c4:45:36:88:ad:dd:6d:36:a2:53:f5:6d:aa:29:7d:
         3c:4a:e5:32:39:cf:46:92:8e:16:1a:f6:0c:31:c2:85:9e:80:
         2c:96:c7:b0:98:b1:fd:4d:c5:1e:6f:e2:a3:37:76:f3:23:a3:
         7a:ef:c0:ad:71:ce:80:62:10:2d:b2:a5:c2:31:da:a6:cc:3b:
         73:3d:c0:c5:70:e6:eb:28:b4:13:f3:e8:5d:84:50:93:7b:cf:
         e6:42:0d:a2:9e:f2:45:b5:cc:01:df:90:38:8f:18:74:6e:ea:
         f5:0b:6a:d8:a5:45:fc:80:ac:87:de:bf:76:f0:75:53:c0:34:
         7e:50:36:6f:4e:6d:a6:8b:de:d1:e5:61:78:a2:a7:15:42:55:
         5d:ec:c0:16:37:6d:f7:4c:82:16:26:7b:a7:91:65:af:06:70:
         b5:09:e4:5b:e8:5d:46:5f:45:3c:dc:d1:89:10:7a:63:91:fb:
         43:e2:4b:d2:30:8e:16:42:40:5b:32:5b:c2:05:22:c8:aa:5f:
         04:36:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:47:15 2025 by rpki-client