Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
File:                     DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer (raw, json)
Hash identifier:          uoXl1QWRn23xEmedlKHIyguppW8frpuVLqMUE+dQ0jQ=
Subject key identifier:   DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       09FB3F9986FECC5EBFE8E213088E990F93080CF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 22:08:25 +0000
Certificate not after:    Tue 03 Feb 2026 22:13:25 +0000
Subordinate resources:    AS: 265842
                          IP: 45.224.203.0/24
                          IP: 45.225.40.0/23
                          IP: 2803:9220::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fb:3f:99:86:fe:cc:5e:bf:e8:e2:13:08:8e:99:0f:93:08:0c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 22:08:25 2025 GMT
            Not After : Feb  3 22:13:25 2026 GMT
        Subject: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:40:52:e6:81:03:05:07:d0:7b:5e:d2:22:
                    7a:5e:97:a9:5e:ce:9f:4e:04:bd:6c:9e:70:5c:33:
                    ed:55:51:b5:92:01:68:19:ae:b1:ba:98:1a:77:03:
                    45:bc:be:b8:0c:c4:bd:53:cc:29:38:7a:f7:9a:c9:
                    0d:d1:57:30:af:27:d5:b8:80:54:ba:09:a6:eb:29:
                    d5:91:38:36:58:27:96:3d:0e:11:38:af:f8:0a:aa:
                    92:34:71:b0:cf:b6:7d:74:15:e2:fa:b0:2b:83:f8:
                    87:ff:32:70:be:12:93:b3:76:89:4e:76:46:34:f1:
                    61:98:3c:40:6a:38:9a:3c:9d:12:f9:c8:d9:3e:34:
                    10:69:3c:d3:f7:6c:51:78:74:6f:20:aa:10:94:2e:
                    ac:d6:28:9c:e8:40:a7:cb:19:41:88:1f:aa:bb:b9:
                    fa:ba:c3:a8:f3:b2:eb:0c:46:34:36:c1:9f:c6:dc:
                    8c:27:b7:ae:25:e8:74:a0:9a:da:26:a3:09:a8:27:
                    2e:1c:78:32:03:7f:1e:df:d9:59:92:64:e7:b4:79:
                    b5:31:37:82:17:98:45:11:c1:9c:10:a9:bc:9b:b4:
                    bf:be:97:73:2e:c8:96:1e:0e:a3:b8:58:f7:14:5e:
                    11:82:3f:14:53:70:04:59:66:bd:e6:67:42:72:a4:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.203.0/24
                  45.225.40.0/23
                IPv6:
                  2803:9220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265842

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:43:15:7f:27:92:e1:90:c1:81:36:91:48:0b:96:01:99:
         9b:7f:78:eb:07:52:00:e0:9d:f7:5a:56:3a:3f:99:f9:69:77:
         d6:9d:81:fe:f2:c6:5c:8b:c8:8a:ad:93:11:ea:28:2e:8e:cf:
         ca:2c:0b:fa:a5:9a:88:5a:5b:0e:52:d2:eb:f5:10:e5:df:c6:
         50:57:57:2c:d3:70:56:dc:c0:06:c9:ae:9d:3f:5e:54:b6:2b:
         5f:a1:8b:9b:bb:5c:37:99:d2:90:50:97:8e:7d:78:57:1e:eb:
         53:30:39:fa:8b:86:0f:c5:41:02:84:86:66:66:4c:0a:51:61:
         83:1a:27:aa:23:a3:ef:7a:5b:c6:c6:e4:d1:2e:bd:51:87:43:
         37:bf:9a:32:c5:ac:df:71:54:5e:89:7f:c7:dc:42:3a:b3:97:
         80:5d:cb:cb:27:22:97:09:ee:dc:25:6c:fc:fe:3d:70:d2:d0:
         69:1a:0a:e5:2f:5e:63:0e:0e:4e:5e:09:9c:7b:04:3c:2d:70:
         90:ce:e5:b4:74:45:e1:29:30:d4:94:a6:ac:ae:fd:3d:14:5a:
         9d:69:95:aa:9b:e1:88:cd:8f:a3:0e:e0:01:6a:c8:59:ca:bf:
         28:c6:9b:2e:1c:9e:8c:f8:2f:15:fb:85:12:5b:e5:cf:78:ec:
         46:6a:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:47 2025 by rpki-client