Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
File:                     FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer (raw, json)
Hash identifier:          91suksqjfaf8nY9sCsQOQQz6eWtfhoPkcK1b1JGaXUc=
Subject key identifier:   FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       0A35D4E36BAFF2944EB48DFBDFA1EDA6A5316CE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 23:26:09 +0000
Certificate not after:    Tue 03 Feb 2026 23:31:09 +0000
Subordinate resources:    AS: 22080
                          AS: 61518
                          IP: 168.121.212.0/22
                          IP: 186.148.64.0/20
                          IP: 200.112.128.0/18
                          IP: 200.124.96.0/20
                          IP: 2800:a40::/32
                          IP: 2803:7540::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:d4:e3:6b:af:f2:94:4e:b4:8d:fb:df:a1:ed:a6:a5:31:6c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  4 23:26:09 2025 GMT
            Not After : Feb  3 23:31:09 2026 GMT
        Subject: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:57:52:27:56:89:8c:ff:05:de:de:fe:84:
                    c9:81:85:0a:e8:27:bc:f7:51:01:d4:7a:8f:d6:46:
                    18:bc:69:6d:8c:bc:88:32:f8:8c:7b:20:6e:0f:02:
                    7d:74:0b:6c:82:bd:2f:4d:ff:47:8c:ed:d7:9c:04:
                    fa:ab:db:1a:9f:93:fc:69:80:a6:ed:d1:a6:28:2e:
                    d4:e5:04:a5:fc:7f:76:e3:e1:a4:cd:b7:cb:73:33:
                    7c:2d:25:ab:ac:e3:35:92:b5:ea:70:e5:e3:c8:99:
                    6f:e2:24:fc:bd:12:9f:3c:f7:98:28:b4:42:34:fb:
                    e7:7d:32:29:87:01:49:fe:fa:01:54:d4:21:ec:c7:
                    54:cf:c8:b6:01:84:15:02:c1:d0:88:6d:5f:f2:93:
                    c4:d9:0f:50:52:33:db:00:ed:68:e4:6c:cb:94:d3:
                    84:40:ba:13:33:74:ff:b8:47:49:0f:6d:21:7f:8d:
                    19:24:65:f8:48:b7:c8:6d:90:19:f0:33:95:89:9f:
                    f2:4e:a8:46:ef:97:0f:50:5e:42:2c:a6:7c:c9:ca:
                    77:37:db:ca:47:1c:a8:ff:de:1d:0c:b0:9b:cd:4a:
                    8b:fb:f3:29:01:7a:88:33:a4:a4:3a:36:27:33:27:
                    be:2c:a0:45:7b:85:a4:49:1f:49:84:c7:7e:03:d3:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.212.0/22
                  186.148.64.0/20
                  200.112.128.0/18
                  200.124.96.0/20
                IPv6:
                  2800:a40::/32
                  2803:7540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22080
                  61518

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:74:b3:40:a0:c9:81:7c:24:e2:00:ba:1c:92:69:c7:d1:
         13:37:da:dd:83:de:00:cf:e6:86:c1:82:47:65:e5:14:2c:26:
         9d:4b:06:8e:61:59:81:de:b0:e6:0a:3f:7e:f4:ba:2d:e2:7d:
         cc:ae:11:2e:df:4c:f2:06:b1:41:b0:e9:ab:a9:e6:b5:16:c5:
         04:19:e6:83:1d:c5:a0:f4:c9:02:f6:d8:5d:47:6d:9d:1b:f4:
         0d:1d:af:76:2b:15:d3:b7:46:dd:75:62:c3:e4:ee:df:19:5d:
         1f:df:f3:63:95:de:6b:29:6c:e6:cc:88:96:9c:a5:e5:8d:d8:
         55:92:5c:94:32:fb:1e:16:bc:64:94:67:04:0c:41:0d:b4:9b:
         f8:02:63:de:35:9a:9d:f1:d2:e4:fd:7c:59:bd:eb:ea:33:8e:
         e6:45:67:b8:e1:91:46:f8:e9:fd:76:c2:ed:2f:5c:7b:0b:1c:
         9f:47:e1:29:bf:c5:f5:51:75:03:1d:f4:6f:12:3a:17:ef:80:
         a6:48:f6:06:10:3e:cc:08:99:c3:f3:ff:2e:10:25:b6:6c:2d:
         7f:a9:40:a4:d6:64:61:46:9d:6b:8d:ef:4f:37:66:49:9a:2b:
         8d:bb:5e:7f:61:06:77:4d:ab:c3:42:45:cb:fe:ff:50:b0:46:
         46:93:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:17 2025 by rpki-client