Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
File:                     F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer (raw, json)
Hash identifier:          P9aTVkVRHV1R5Hg/OqBD0U1sM86XBGQZWF7jMGTr7OU=
Subject key identifier:   F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       19D3E2716677B0D3AC209BC9022D0A473A0DD772
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 21:20:16 +0000
Certificate not after:    Tue 03 Feb 2026 21:25:16 +0000
Subordinate resources:    AS: 265709
                          IP: 45.6.212.0 -- 45.6.214.255
                          IP: 2803:5c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d3:e2:71:66:77:b0:d3:ac:20:9b:c9:02:2d:0a:47:3a:0d:d7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 21:20:16 2025 GMT
            Not After : Feb  3 21:25:16 2026 GMT
        Subject: CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:72:11:c5:2d:15:f0:51:6e:3e:68:52:2e:
                    b9:ea:9c:85:cb:eb:e6:0f:f6:83:60:42:37:f3:0b:
                    42:35:c7:07:74:4e:90:71:be:13:a4:b4:30:db:3c:
                    f2:13:73:5f:c1:e1:79:93:52:af:30:9a:a7:93:df:
                    fa:4c:11:4c:09:1b:50:75:6e:4e:e1:af:0e:5e:ef:
                    7c:6a:9b:60:36:20:13:95:b5:83:76:00:87:53:40:
                    e5:d6:57:fb:ea:8e:3f:78:30:ef:e4:6d:00:74:ba:
                    21:5a:25:0c:4d:5d:67:2d:64:86:6c:30:09:0d:7f:
                    0f:f2:82:e2:f6:e9:ff:22:e8:c8:f8:45:2e:0f:e9:
                    14:bd:e0:1a:a6:64:cf:f4:81:d1:de:ab:a7:a8:86:
                    96:dc:2f:e5:b8:03:e0:96:c3:8c:d5:a6:3c:c8:09:
                    cb:01:e1:12:49:d0:fe:1f:16:34:b2:23:fc:6b:ed:
                    6d:de:f7:cd:8c:a3:8f:d3:d0:21:4a:48:83:92:4c:
                    5b:e2:c9:e9:87:ed:0e:42:d9:6f:25:bf:33:17:ac:
                    77:20:f2:a9:49:13:9a:5b:5a:32:c1:38:ea:ae:98:
                    6f:9b:0d:b6:16:d7:7c:61:ae:97:10:4b:21:e5:c2:
                    b4:58:d2:d8:97:e5:c2:a1:3c:f5:a1:83:32:27:9f:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.212.0-45.6.214.255
                IPv6:
                  2803:5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265709

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:77:2f:26:96:48:0e:c4:4a:17:e8:6a:12:77:5c:35:7c:
         c0:60:cd:54:c8:bf:dd:64:5b:95:0c:31:9b:13:f2:ea:20:bd:
         9c:99:9e:4e:60:27:fc:c0:c6:4a:f6:4e:5c:1c:22:3d:0f:97:
         be:ef:fd:10:71:55:4f:4d:37:2e:fc:fe:77:0f:43:44:6f:d6:
         1f:55:17:1f:2e:7b:8e:b4:5f:c7:44:75:35:13:d0:d8:0b:46:
         f0:02:0a:cb:c1:09:64:f6:02:62:fc:76:ca:f3:3c:33:ce:7e:
         8f:1b:53:89:c0:84:7b:bb:df:d4:d3:d8:94:b9:f2:cc:cb:a8:
         c6:18:2f:a6:44:fb:e6:77:cf:ed:1a:03:73:5b:24:bb:0e:83:
         be:d4:c5:75:0e:aa:8d:5e:f4:b4:31:d4:ac:d8:6e:8a:37:aa:
         66:a8:31:35:95:97:dc:db:c9:9e:a5:f5:e9:f3:18:ea:ec:40:
         b6:c6:01:d8:00:2b:35:24:f4:52:f8:0b:00:fd:e8:4d:bb:3f:
         20:79:4a:03:56:71:fd:85:eb:49:7e:ed:1b:18:01:9a:54:f9:
         d5:23:0e:8d:53:fa:16:5f:26:dc:1d:c0:a3:12:9b:ba:0c:a3:
         c6:f3:51:b0:e8:07:1a:3b:c2:70:f8:4a:d3:2b:b7:26:16:4f:
         bf:67:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:57:11 2025 by rpki-client