Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.cer
File:                     FA3847BD7C7BA2B2A0440A508951F5B224552F47.cer (raw, json)
Hash identifier:          hRqqHMFrJhZ6oaR8fIuSDxSPadMUKnbPTV0UvSjogG8=
Subject key identifier:   FA:38:47:BD:7C:7B:A2:B2:A0:44:0A:50:89:51:F5:B2:24:55:2F:47
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       717FEEC612452227E1EA88B3ACA196ADA3D57E17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Jul 2024 13:50:01 +0000
Certificate not after:    Wed 16 Jul 2025 13:55:01 +0000
Subordinate resources:    AS: 273237
                          IP: 2803:8150::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7f:ee:c6:12:45:22:27:e1:ea:88:b3:ac:a1:96:ad:a3:d5:7e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jul 17 13:50:01 2024 GMT
            Not After : Jul 16 13:55:01 2025 GMT
        Subject: CN=FA3847BD7C7BA2B2A0440A508951F5B224552F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:71:6b:9b:4b:df:1b:a8:7b:71:b5:75:84:
                    01:2b:7f:e7:90:15:82:aa:33:0d:d3:70:f4:ea:fb:
                    aa:3a:b2:9d:31:ad:9e:cd:41:32:17:0c:2d:cc:1c:
                    0f:14:5f:12:db:aa:34:02:ce:28:bf:54:5a:e1:3a:
                    f9:a3:39:d3:83:df:e2:c9:80:62:7e:cc:53:6c:78:
                    72:2e:1e:e5:5d:4b:10:9f:c6:c3:44:64:cf:8f:c5:
                    39:d5:e6:00:8f:b9:28:e0:ae:43:3b:65:f7:33:4d:
                    c9:7e:b7:42:bd:e6:ec:b2:67:43:73:97:d4:60:77:
                    d9:0e:c0:cf:e5:a9:8e:4a:25:16:bc:e3:9e:3a:c3:
                    5e:c6:29:15:c6:6e:84:7f:ce:34:37:d4:2c:16:a0:
                    0c:83:2d:f1:22:52:2c:2a:92:7a:9b:4d:79:b0:b2:
                    2f:f6:e5:d2:0f:77:91:c7:2e:a1:8a:33:bf:3d:49:
                    59:34:ae:eb:95:4f:b1:4e:56:49:4c:35:9b:ac:92:
                    af:07:f2:01:50:6a:d5:40:a0:ad:c9:b4:eb:9c:5a:
                    a2:5f:3d:97:50:fb:56:33:86:ce:18:c0:f6:fd:e7:
                    3b:b9:dc:b6:0b:39:7e:a0:44:43:01:c2:8d:c3:b4:
                    dc:cd:85:75:4c:00:45:9a:6f:ac:67:c8:9d:0d:fc:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:38:47:BD:7C:7B:A2:B2:A0:44:0A:50:89:51:F5:B2:24:55:2F:47
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E7A8361714B41C3A5F0655199A9C958CB58565B2EA3661FB0C822E5DCAA69083/0/FA3847BD7C7BA2B2A0440A508951F5B224552F47.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8150::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273237

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:aa:eb:62:77:33:f6:eb:b9:13:0f:f0:d6:d7:74:cd:e2:
         43:ee:8f:e8:7b:07:69:7f:e0:0d:6c:07:eb:57:48:18:ca:46:
         05:62:77:d7:4b:4f:cd:88:e5:78:d3:27:2a:02:98:eb:3f:ad:
         dd:f9:64:40:3e:82:30:05:7c:4b:53:50:ea:48:92:e4:f0:ba:
         53:14:ab:f2:e3:b4:ba:85:25:46:37:d9:b8:1a:0b:55:eb:67:
         f5:16:4f:14:be:d8:20:a9:28:d3:0d:fe:84:00:4d:29:e2:6b:
         23:1f:9a:43:be:7b:69:e0:ea:d9:d1:d6:a2:2c:ae:8a:91:3c:
         bf:20:7e:6f:f3:27:aa:93:55:e3:eb:bc:88:75:69:f1:07:bf:
         7d:ff:3f:a4:3c:9f:2d:89:be:d9:19:c5:b4:fc:77:b5:d7:14:
         32:c8:41:3f:ec:90:2f:3f:7e:33:34:04:5b:51:1b:65:85:93:
         3c:78:4b:26:a0:4f:1d:7b:11:aa:e7:1f:d3:b8:30:7d:17:28:
         1e:6d:b7:88:0d:b9:fd:ee:fa:db:e4:4f:ec:ef:e3:79:69:df:
         24:83:59:63:3e:36:71:e5:b9:76:0a:4d:ab:04:39:6e:13:f7:
         a9:c9:b2:82:e9:a2:bb:92:5b:99:ea:91:25:bb:ef:89:e9:a4:
         84:7d:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----