Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
File:                     FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer (raw, json)
Hash identifier:          w20dBnVolB4/TWRujh+3n6uHqhOGQi66afoGQ1+WXP8=
Subject key identifier:   FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       358C7CDBBD88BFF64CFC7A0F2F596B9E4E4FA1ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 18:07:59 +0000
Certificate not after:    Tue 04 Mar 2025 18:12:59 +0000
Subordinate resources:    AS: 272038
                          IP: 181.233.180.0/22
                          IP: 2803:4d10::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jul 2024 00:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8c:7c:db:bd:88:bf:f6:4c:fc:7a:0f:2f:59:6b:9e:4e:4f:a1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Mar  5 18:07:59 2024 GMT
            Not After : Mar  4 18:12:59 2025 GMT
        Subject: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:1a:e1:57:8b:29:c7:9e:44:a8:29:cb:e7:
                    fb:96:b7:ef:9d:c9:c2:49:12:a5:ab:74:f5:b5:b6:
                    37:23:4d:7d:c1:f1:2f:84:9b:99:c8:b6:5f:64:47:
                    ef:ed:b1:6e:14:9d:0b:4e:5b:06:37:45:67:ec:4c:
                    fb:e9:b7:3d:ca:8c:b2:61:48:e8:29:66:82:c1:c1:
                    4d:d9:86:7d:3b:a4:e5:4f:3a:82:04:e9:32:8e:74:
                    02:89:cd:5e:9e:07:47:d1:4c:56:2c:d3:c4:c0:aa:
                    cc:bd:72:b2:4e:44:4e:00:09:fd:bf:cb:e8:fc:a8:
                    81:20:34:50:e9:67:bf:29:77:75:9e:5b:7d:1a:83:
                    e5:5a:6a:6e:42:b3:85:2b:d3:83:52:03:91:2c:62:
                    3b:3f:fc:82:36:b4:cc:8b:58:e3:38:a8:4c:9f:31:
                    a5:82:f4:26:ca:60:b0:80:2f:e0:ab:b2:5a:fc:7f:
                    80:b5:bc:93:f7:05:8b:4c:72:3c:7a:42:ba:58:5d:
                    b9:05:bc:f4:2e:4c:29:34:08:54:b7:e3:25:1d:a0:
                    61:bc:8a:66:88:40:d0:3c:11:ce:89:5f:28:14:a4:
                    9d:0f:b6:d6:39:e3:55:55:39:f5:eb:6c:cf:23:f7:
                    69:b7:f6:84:77:c6:29:a6:62:02:1e:26:2d:5c:23:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.180.0/22
                IPv6:
                  2803:4d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272038

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:9c:95:05:c3:ca:7f:cd:d5:2a:c2:ac:cc:38:70:e2:09:
         e9:1d:61:bd:cf:b0:c1:9c:94:65:12:77:50:f3:64:72:ac:16:
         15:7b:2e:7f:bc:65:09:4c:52:48:c1:b5:73:36:6b:26:24:98:
         d2:40:f3:36:ce:f1:50:7c:0b:7c:4f:49:ce:06:8a:48:f4:81:
         e4:93:79:2c:c1:e2:20:37:65:b7:04:09:82:5c:80:c7:79:f7:
         4b:0b:2c:a0:5e:6e:9f:dc:ae:35:d6:3e:e3:58:4b:2e:10:5a:
         58:ed:1f:00:b8:cb:85:7d:2f:a0:0c:b0:d3:1c:3a:bd:0e:72:
         f7:31:06:7e:51:ae:4e:36:a7:6e:29:23:e7:51:75:16:f0:07:
         10:54:50:52:90:8a:2b:62:1e:95:05:16:67:a3:2e:8b:0b:7a:
         eb:1e:8e:7d:27:4a:2d:ce:3b:30:4f:a8:ae:47:c4:45:bb:00:
         9a:9c:d2:f4:a4:26:8e:05:26:9c:73:8e:4e:ab:d5:a2:bc:1d:
         f2:8b:77:24:ba:b4:8a:fc:e3:90:68:92:8d:6d:bc:f7:9d:19:
         c9:0f:b5:fe:33:79:62:84:c2:e0:77:d3:e2:ef:8c:3c:c4:b7:
         7b:dc:1b:a3:6c:40:f8:22:80:e3:ad:e2:92:98:0b:73:22:6d:
         76:01:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 07:20:06 2024 by rpki-client on console-ams.rpki-client.org