Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer
File:                     FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer (raw, json)
Hash identifier:          8ftTAX9oOlGWi4eN2IWvIMq4Du/YYZCXzCxZ5Mu1AK0=
Subject key identifier:   FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       297F4BCF46188FB678437D35C1FF54015F42E318
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 04 May 2024 00:30:02 +0000
Certificate not after:    Sat 03 May 2025 00:35:02 +0000
Subordinate resources:    AS: 273160
                          IP: 2803:a250::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7f:4b:cf:46:18:8f:b6:78:43:7d:35:c1:ff:54:01:5f:42:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: May  4 00:30:02 2024 GMT
            Not After : May  3 00:35:02 2025 GMT
        Subject: CN=FFA82F2543024DC455E9D4141D3E8161CA368E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:63:3a:f7:83:58:07:a9:2a:c2:8c:55:6f:
                    ef:10:e2:14:8c:0c:8c:48:cd:7a:8e:5d:67:8e:4b:
                    05:ad:44:ea:08:00:ba:75:6a:eb:72:4f:e9:6e:75:
                    9e:b9:19:a7:ba:a8:d1:45:75:08:e7:b1:a6:b0:94:
                    c5:52:9d:78:5a:49:80:b4:82:58:20:79:16:ae:2f:
                    a9:4f:21:db:8f:45:06:11:f9:70:29:ff:0e:37:f3:
                    e8:26:7e:3f:ff:bc:5e:81:13:46:5e:8e:9e:39:76:
                    24:bc:ee:19:86:15:3e:63:57:39:0c:54:a8:29:96:
                    88:9a:03:41:4d:ed:fd:e7:d1:d2:85:d2:63:54:2e:
                    47:cd:eb:3d:91:62:49:1d:5f:f2:5e:54:c1:a2:e7:
                    9c:d2:94:e1:29:c7:6c:e2:65:1f:4f:e4:47:e5:79:
                    3d:51:aa:f5:df:85:60:8a:16:35:03:66:9a:28:7d:
                    2c:e6:30:5f:78:29:0c:7d:aa:17:12:5c:71:cd:59:
                    e6:a6:09:91:f4:85:f2:3f:e4:01:53:7c:91:2c:fc:
                    fe:ac:4b:61:79:5b:8a:6a:ef:47:c7:e3:84:2b:e2:
                    8a:03:b4:8f:62:4e:03:d7:06:f0:b5:5a:af:8b:58:
                    7a:b0:85:dc:9a:ff:49:c3:3b:b8:a5:91:66:f7:94:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273160

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:d5:da:c6:7f:6a:33:5c:16:ca:43:9a:39:00:a9:0e:51:
         7d:95:e5:40:a6:88:ec:76:4d:58:b2:0f:7a:5b:30:1a:75:fa:
         0e:f7:f8:c5:9e:91:d9:56:e9:f7:f8:7d:0b:7f:09:37:8a:ad:
         08:2b:d8:0b:e0:4c:5f:dd:b3:0f:6c:88:b3:62:fa:13:fd:f9:
         30:b5:62:e1:93:03:fc:73:18:1d:85:24:52:2d:94:94:8a:28:
         f7:69:ac:84:66:6d:c9:b2:83:1c:2c:ab:2e:32:65:58:9f:55:
         de:b3:65:fe:ca:d7:be:44:61:36:38:1f:98:1d:86:66:4a:30:
         50:76:b1:c9:05:a9:ba:d6:68:31:59:d1:0b:82:49:ac:9b:bb:
         86:e4:c8:d0:56:9d:c2:c9:79:be:7f:0d:32:02:ac:03:d9:57:
         01:02:12:d1:b5:69:98:53:2a:b2:a8:a3:fe:b9:74:a0:54:7d:
         9c:b4:56:06:fd:c4:5b:47:75:2a:5d:ac:2b:95:d3:57:fa:b7:
         4a:61:cc:42:c0:3c:bc:d5:df:25:ce:24:29:fe:97:2c:f9:4f:
         19:50:20:0a:9b:f3:20:95:76:0a:01:99:58:be:26:20:23:b0:
         ac:7a:df:af:15:52:5f:3a:7e:fc:85:2f:53:07:0b:23:d6:89:
         2f:48:64:29
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUKX9Lz0YYj7Z4Q301wf9UAV9C4xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNDA1MDQwMDMwMDJaFw0yNTA1MDMwMDM1MDJaMDMxMTAvBgNV
BAMTKEZGQTgyRjI1NDMwMjREQzQ1NUU5RDQxNDFEM0U4MTYxQ0EzNjhFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AmM694NYB6kqwoxVb+8Q4hSM
DIxIzXqOXWeOSwWtROoIALp1autyT+ludZ65Gae6qNFFdQjnsaawlMVSnXhaSYC0
glggeRauL6lPIduPRQYR+XAp/w438+gmfj//vF6BE0Zejp45diS87hmGFT5jVzkM
VKgploiaA0FN7f3n0dKF0mNULkfN6z2RYkkdX/JeVMGi55zSlOEpx2ziZR9P5Efl
eT1RqvXfhWCKFjUDZpoofSzmMF94KQx9qhcSXHHNWeamCZH0hfI/5AFTfJEs/P6s
S2F5W4pq70fH44Qr4ooDtI9iTgPXBvC1Wq+LWHqwhdya/0nDO7ilkWb3lKrtAgMB
AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/qC8lQwJNxFXp
1BQdPoFhyjaOjTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQ5NDc1MjE4QzA1NUU1NEM3QkRDNzM3
MTlCODYwQzA3RUI1MjY5MTc5OEU0MDc4MTFDMzczNTE4MUVFRTNEQy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDk0NzUyMThDMDU1RTU0QzdCREM3MzcxOUI4NjBDMDdFQjUyNjkxNzk4
RTQwNzgxMUMzNzM1MTgxRUVFM0RDLzAvRkZBODJGMjU0MzAyNERDNDU1RTlENDE0
MUQzRTgxNjFDQTM2OEU4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOiUDAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMEKwgwDQYJKoZIhvcNAQELBQADggEBAEds1drG
f2ozXBbKQ5o5AKkOUX2V5UCmiOx2TViyD3pbMBp1+g73+MWekdlW6ff4fQt/CTeK
rQgr2AvgTF/dsw9siLNi+hP9+TC1YuGTA/xzGB2FJFItlJSKKPdprIRmbcmygxws
qy4yZVifVd6zZf7K175EYTY4H5gdhmZKMFB2sckFqbrWaDFZ0QuCSaybu4bkyNBW
ncLJeb5/DTICrAPZVwECEtG1aZhTKrKoo/65dKBUfZy0Vgb9xFtHdSpdrCuV01f6
t0phzELAPLzV3yXOJCn+lyz5TxlQIAqb8yCVdgoBmVi+JiAjsKx6368VUl86fvyF
L1MHCyPWiS9IZCk=
-----END CERTIFICATE-----