Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer
File:                     DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer (raw, json)
Hash identifier:          zBW4j5caUK4WPpLVU2JALH3oVATJGpuylWudyR32prA=
Subject key identifier:   DA:08:59:29:B0:42:10:40:BC:F2:92:D3:D0:AE:C6:BF:DD:B2:69:AE
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       6F428EC343D2AA9E6653BBCCD616A08A37063866
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 17:45:26 +0000
Certificate not after:    Tue 04 Mar 2025 17:50:26 +0000
Subordinate resources:    AS: 267915
                          IP: 45.178.244.0/22
                          IP: 2803:7660::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:42:8e:c3:43:d2:aa:9e:66:53:bb:cc:d6:16:a0:8a:37:06:38:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 17:45:26 2024 GMT
            Not After : Mar  4 17:50:26 2025 GMT
        Subject: CN=DA085929B0421040BCF292D3D0AEC6BFDDB269AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:1a:82:4c:71:bb:af:df:73:9f:22:e2:e2:
                    82:7f:9e:33:39:11:d9:fa:0b:5d:b5:3f:8a:2b:b1:
                    ad:a1:48:48:8f:2a:17:61:e6:da:da:dd:d1:1b:ad:
                    f3:e9:74:92:76:c7:01:4c:e3:e2:c5:7b:dd:15:3d:
                    56:f3:de:51:c6:24:03:74:77:fe:50:e7:2a:dd:2d:
                    f2:60:f0:dc:dc:1e:ed:d2:a7:83:72:a1:92:a3:90:
                    8f:d1:31:84:14:a4:34:3d:55:a0:5b:d5:d7:19:14:
                    c8:92:07:19:f9:75:86:4b:af:51:24:d9:3f:84:af:
                    fa:65:1b:ac:0c:23:0f:e6:8a:ed:da:e9:8d:97:21:
                    e8:3a:4e:ac:4a:bc:3e:f4:2b:bd:44:86:a1:22:24:
                    89:ca:de:fb:90:31:d6:6a:49:44:15:b9:73:5a:8b:
                    1b:9a:3c:1e:8d:51:1d:58:6d:42:63:1d:9d:4a:7f:
                    23:72:b2:66:fe:5f:9c:4c:a8:73:7b:91:69:51:b3:
                    2c:ac:a1:7c:75:97:65:59:ed:a9:ff:a8:37:7a:82:
                    72:0d:ce:6b:d2:37:d2:06:55:9a:94:a6:b4:a9:74:
                    f2:15:61:bd:56:61:13:37:7e:d2:a2:fa:05:2b:0d:
                    a6:4e:a0:5a:df:ef:65:14:a7:31:69:72:ad:5d:06:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:08:59:29:B0:42:10:40:BC:F2:92:D3:D0:AE:C6:BF:DD:B2:69:AE
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.244.0/22
                IPv6:
                  2803:7660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267915

    Signature Algorithm: sha256WithRSAEncryption
         51:db:b8:d1:33:65:43:d7:6e:b1:67:38:c7:01:85:87:92:24:
         e4:e1:b9:44:e2:58:f9:12:a0:71:1d:07:02:dc:3e:8d:bd:db:
         7a:66:e8:67:58:91:a3:b8:7b:e2:ee:58:6a:be:02:82:b2:1a:
         e4:a8:25:e0:59:78:c5:1c:df:16:1f:e8:62:fb:8a:46:26:cd:
         3a:bc:76:ff:93:5e:de:41:1e:cc:b7:0c:3e:90:03:34:8e:1b:
         1b:c7:a2:92:56:87:c5:7e:3e:59:47:20:4c:dc:8b:b3:77:25:
         4d:d7:55:6c:ef:11:d2:bf:7d:05:a0:ad:c8:a2:ff:c8:57:fc:
         2f:ff:69:ea:32:67:78:59:c0:88:52:25:4d:f4:b8:75:b7:f5:
         b4:ea:3c:bf:ad:15:57:d9:30:eb:b6:3c:11:50:11:2e:f7:11:
         a7:50:54:94:74:b1:fd:b2:9a:38:d7:78:5f:b5:b4:7d:45:e1:
         e0:34:e3:6e:4a:18:85:99:f4:69:49:9b:8a:e3:03:03:f6:26:
         a2:80:da:f2:26:a5:9b:5b:0e:89:38:50:7e:3d:f3:a4:f5:0c:
         ab:cc:5a:a1:2a:7d:6b:a7:df:1f:f5:25:b9:28:b9:36:55:e9:
         95:75:60:af:fd:93:7b:52:fd:54:74:e8:d2:79:40:a0:a7:9c:
         b1:73:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 14:08:14 2024 by rpki-client on console-ams.rpki-client.org