Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer
File:                     EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer (raw, json)
Hash identifier:          cpfV9k8/GfDjDacNl9Z3xdQMEnPJx4r4yF/GMVuH7OI=
Subject key identifier:   EC:46:C0:89:D2:30:8D:ED:60:7F:14:05:A1:F7:AD:7A:94:C4:B4:1A
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       0ACB811C13EA390F32FE5C763E1E7BA67340399E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Oct 2024 16:25:01 +0000
Certificate not after:    Wed 15 Oct 2025 16:30:01 +0000
Subordinate resources:    AS: 272871
                          IP: 2803:da90::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:81:1c:13:ea:39:0f:32:fe:5c:76:3e:1e:7b:a6:73:40:39:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Oct 16 16:25:01 2024 GMT
            Not After : Oct 15 16:30:01 2025 GMT
        Subject: CN=EC46C089D2308DED607F1405A1F7AD7A94C4B41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:c7:e4:25:3c:43:00:f5:ef:1f:39:da:33:
                    c3:fa:80:35:4c:de:6a:64:2a:34:e7:9f:76:9a:07:
                    4a:47:fe:bc:c0:d4:98:a8:e0:d4:7e:77:ff:ee:47:
                    f3:45:ad:16:05:4b:88:2d:8d:99:e6:a8:ea:80:30:
                    3d:21:52:a8:bc:7e:87:09:47:04:da:2b:c5:97:55:
                    81:4b:71:f8:14:07:09:bc:20:84:9b:04:a3:51:f9:
                    51:8a:1b:2b:11:cb:36:37:7f:a9:9a:bb:09:58:83:
                    5a:38:f2:09:af:4a:30:77:65:9b:fb:48:0a:70:d5:
                    d3:81:a6:a1:7c:b9:ca:d9:53:3d:86:26:d3:29:40:
                    c2:58:fa:d9:5a:de:f2:c5:73:5b:bb:e1:38:77:15:
                    b5:7d:bf:81:51:4a:bf:0c:12:38:ed:a7:3a:fd:97:
                    61:ac:3d:1d:89:62:36:a1:c0:0e:4d:ba:d4:a1:9d:
                    ff:40:d4:c2:1c:6e:bd:6a:d6:d0:28:cd:c1:53:26:
                    8f:6f:fe:18:14:93:6a:ea:91:de:15:89:ff:31:93:
                    cb:2e:c3:ad:7e:e5:d7:6f:ff:da:76:90:eb:74:73:
                    fa:0f:66:3c:45:5a:be:b8:ba:7e:ca:46:7b:a3:4b:
                    17:8c:4d:2f:a4:ac:5e:80:5c:8f:06:ea:92:54:51:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:46:C0:89:D2:30:8D:ED:60:7F:14:05:A1:F7:AD:7A:94:C4:B4:1A
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272871

    Signature Algorithm: sha256WithRSAEncryption
         08:77:38:af:cd:b8:54:3c:51:4b:71:2f:ca:7f:0d:fd:0a:16:
         76:06:59:6a:94:2e:73:12:1b:38:61:c1:9c:97:57:22:9a:18:
         34:2a:5a:b4:0b:c7:73:98:0e:c3:e3:a9:71:97:07:c2:7b:b4:
         2c:7c:3f:e5:0a:b0:34:1b:56:d6:cd:45:16:2c:75:11:d4:16:
         bb:5a:6a:b9:f9:b1:07:43:a8:c8:52:3f:57:65:e8:d4:2a:7b:
         1e:66:8c:ec:78:29:2f:8f:2f:55:86:ef:8a:b8:b4:42:41:0d:
         1c:c7:1e:fb:b0:c5:dc:fa:65:27:24:fd:69:af:5e:ea:79:1d:
         8b:8e:83:05:26:46:6c:95:f4:43:78:6f:09:80:4b:ed:70:b7:
         79:62:32:34:56:79:73:8c:e7:0a:3e:e0:9b:75:47:e8:68:46:
         b9:45:51:2e:ce:14:5f:df:c4:3c:54:58:da:a2:74:a7:73:a7:
         6c:97:3a:20:b7:c9:fc:64:f5:0a:4e:47:87:27:86:c0:fa:70:
         10:39:a2:aa:cf:78:aa:20:cc:f5:c4:9c:79:e4:3c:b9:64:e7:
         10:8f:08:39:12:38:b9:9a:3e:86:09:66:79:89:be:75:e1:91:
         2d:b5:62:b4:f2:f7:6e:2d:4f:c9:c0:3d:7d:25:e6:04:16:71:
         79:ba:b9:4b
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUCsuBHBPqOQ8y/lx2Ph57pnNAOZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDEwMTYxNjI1MDFaFw0yNTEwMTUxNjMwMDFaMDMxMTAvBgNV
BAMTKEVDNDZDMDg5RDIzMDhERUQ2MDdGMTQwNUExRjdBRDdBOTRDNEI0MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vMfkJTxDAPXvHznaM8P6gDVM
3mpkKjTnn3aaB0pH/rzA1Jio4NR+d//uR/NFrRYFS4gtjZnmqOqAMD0hUqi8focJ
RwTaK8WXVYFLcfgUBwm8IISbBKNR+VGKGysRyzY3f6mauwlYg1o48gmvSjB3ZZv7
SApw1dOBpqF8ucrZUz2GJtMpQMJY+tla3vLFc1u74Th3FbV9v4FRSr8MEjjtpzr9
l2GsPR2JYjahwA5NutShnf9A1MIcbr1q1tAozcFTJo9v/hgUk2rqkd4Vif8xk8su
w61+5ddv/9p2kOt0c/oPZjxFWr64un7KRnujSxeMTS+krF6AXI8G6pJUUZcjAgMB
AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsRsCJ0jCN7WB/
FAWh9616lMS0GjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDRDQUY5MDc0RTM4QUQ2MzI3MEM0Rjc3
RjhDNEZBREJDNDJEQUQ0RjZBRjkwQTRFOUMxOUVGQUNCOEE4N0REQS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENENBRjkwNzRFMzhBRDYzMjcwQzRGNzdGOEM0RkFEQkM0MkRBRDRGNkFG
OTBBNEU5QzE5RUZBQ0I4QTg3RERBLzAvRUM0NkMwODlEMjMwOERFRDYwN0YxNDA1
QTFGN0FEN0E5NEM0QjQxQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPakDAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMEKecwDQYJKoZIhvcNAQELBQADggEBAAh3OK/N
uFQ8UUtxL8p/Df0KFnYGWWqULnMSGzhhwZyXVyKaGDQqWrQLx3OYDsPjqXGXB8J7
tCx8P+UKsDQbVtbNRRYsdRHUFrtaarn5sQdDqMhSP1dl6NQqex5mjOx4KS+PL1WG
74q4tEJBDRzHHvuwxdz6ZSck/WmvXup5HYuOgwUmRmyV9EN4bwmAS+1wt3liMjRW
eXOM5wo+4Jt1R+hoRrlFUS7OFF/fxDxUWNqidKdzp2yXOiC3yfxk9QpOR4cnhsD6
cBA5oqrPeKogzPXEnHnkPLlk5xCPCDkSOLmaPoYJZnmJvnXhkS21YrTy924tT8nA
PX0l5gQWcXm6uUs=
-----END CERTIFICATE-----