Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
File:                     FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer (raw, json)
Hash identifier:          r7rRMm7VdfRA74A33syYRPR7plJqcCbT2vCeZ9hxDvs=
Subject key identifier:   FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       0BE692855472421D904A68F322CF2F2C79F75EC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 02:11:02 +0000
Certificate not after:    Wed 04 Feb 2026 02:16:02 +0000
Subordinate resources:    AS: 272038
                          IP: 181.233.180.0/22
                          IP: 2803:4d10::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e6:92:85:54:72:42:1d:90:4a:68:f3:22:cf:2f:2c:79:f7:5e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Feb  5 02:11:02 2025 GMT
            Not After : Feb  4 02:16:02 2026 GMT
        Subject: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:1a:e1:57:8b:29:c7:9e:44:a8:29:cb:e7:
                    fb:96:b7:ef:9d:c9:c2:49:12:a5:ab:74:f5:b5:b6:
                    37:23:4d:7d:c1:f1:2f:84:9b:99:c8:b6:5f:64:47:
                    ef:ed:b1:6e:14:9d:0b:4e:5b:06:37:45:67:ec:4c:
                    fb:e9:b7:3d:ca:8c:b2:61:48:e8:29:66:82:c1:c1:
                    4d:d9:86:7d:3b:a4:e5:4f:3a:82:04:e9:32:8e:74:
                    02:89:cd:5e:9e:07:47:d1:4c:56:2c:d3:c4:c0:aa:
                    cc:bd:72:b2:4e:44:4e:00:09:fd:bf:cb:e8:fc:a8:
                    81:20:34:50:e9:67:bf:29:77:75:9e:5b:7d:1a:83:
                    e5:5a:6a:6e:42:b3:85:2b:d3:83:52:03:91:2c:62:
                    3b:3f:fc:82:36:b4:cc:8b:58:e3:38:a8:4c:9f:31:
                    a5:82:f4:26:ca:60:b0:80:2f:e0:ab:b2:5a:fc:7f:
                    80:b5:bc:93:f7:05:8b:4c:72:3c:7a:42:ba:58:5d:
                    b9:05:bc:f4:2e:4c:29:34:08:54:b7:e3:25:1d:a0:
                    61:bc:8a:66:88:40:d0:3c:11:ce:89:5f:28:14:a4:
                    9d:0f:b6:d6:39:e3:55:55:39:f5:eb:6c:cf:23:f7:
                    69:b7:f6:84:77:c6:29:a6:62:02:1e:26:2d:5c:23:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.180.0/22
                IPv6:
                  2803:4d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272038

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:ba:18:47:eb:79:09:bc:7e:3c:da:64:bf:d3:3f:72:81:
         82:3a:d6:fb:a0:6e:92:ed:8e:da:8a:f6:53:7f:e2:45:41:7e:
         e2:d4:61:31:6f:de:84:86:fc:50:9b:4c:e9:ac:78:d6:a5:bf:
         6d:a3:88:1a:1f:d0:f2:8f:0e:53:70:22:91:3c:bc:36:e5:f9:
         24:b0:f5:71:22:6c:65:e0:62:9a:37:e1:bf:06:64:f1:66:ac:
         9e:4e:07:81:af:5f:ea:64:c7:27:a8:b7:b3:40:b9:10:58:3f:
         71:bd:a2:d7:05:14:92:8f:10:fc:0e:37:72:6d:17:47:0d:83:
         71:46:fb:9a:fa:26:28:c8:34:e0:ea:b0:0a:82:6a:31:69:f2:
         0c:fe:37:d3:3e:4a:0c:79:33:26:da:4f:c2:16:e4:a3:18:59:
         3c:b4:c0:40:f9:54:c6:23:b4:1b:07:16:6e:fc:9f:ad:d8:15:
         f8:28:21:97:c9:6f:26:a0:4a:fa:65:ee:d1:6c:bf:20:aa:7e:
         4a:72:ee:21:23:3b:f3:60:01:4f:a9:46:10:be:d1:f4:61:b9:
         d8:f8:8f:e1:c9:3f:b7:c4:c0:b7:a5:93:d3:28:1c:60:eb:4e:
         b5:c9:83:04:ce:d0:87:fd:7a:2f:79:74:4f:32:80:cf:e2:c8:
         b0:d9:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:00 2025 by rpki-client