Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
File:                     88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer (raw, json)
Hash identifier:          YVmpDQRzxZ86CvKVuV8mnb4rEg4H8ZypIza4BZUqwhA=
Subject key identifier:   88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       6153B2AE80DB439EB34D8A809D871F52C191B056
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Sep 2025 14:30:01 +0000
Certificate not after:    Thu 24 Sep 2026 14:35:01 +0000
Subordinate resources:    AS: 270221
                          IP: 2806:404::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:53:b2:ae:80:db:43:9e:b3:4d:8a:80:9d:87:1f:52:c1:91:b0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Sep 25 14:30:01 2025 GMT
            Not After : Sep 24 14:35:01 2026 GMT
        Subject: CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:9b:17:99:03:c3:a9:2c:44:7a:95:8e:9e:
                    6c:1a:00:88:c7:80:78:7b:c6:91:27:29:92:1f:08:
                    94:29:98:ba:9b:69:5e:5d:c3:95:ba:0e:92:e4:f8:
                    30:46:6b:2a:df:b2:df:f2:f0:fc:94:d2:50:63:04:
                    1c:85:99:e3:8a:c4:90:eb:e6:64:81:fd:d6:86:db:
                    84:23:f3:d7:ba:1e:c6:42:31:01:15:b1:13:80:c6:
                    6a:78:ce:2e:b2:2f:05:53:a1:95:ca:4f:0e:49:75:
                    a7:30:33:42:6b:89:67:39:9d:c8:33:aa:f3:88:56:
                    23:a1:cd:9c:1f:37:65:6e:0c:a0:97:17:ff:fc:32:
                    d6:0c:61:56:28:a5:b9:ce:8c:5b:a9:7c:ac:4f:93:
                    4e:b7:6d:5b:2f:bf:6e:27:75:81:06:90:ea:df:26:
                    a3:57:4d:11:8b:eb:3e:59:85:6a:75:ad:d7:82:dc:
                    d6:9c:e4:f4:1f:59:e8:d9:a1:8c:4f:e5:58:0e:29:
                    b8:20:f5:78:95:94:57:bd:97:4a:5e:f2:e3:dd:a7:
                    4c:97:bc:2d:14:7f:dc:e1:b5:db:f7:83:29:1d:a8:
                    d4:65:44:b4:3d:e2:e3:63:61:f8:c5:40:43:55:76:
                    ad:e1:e0:f1:02:6a:ad:26:43:b9:40:d4:37:55:49:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270221

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:12:41:1c:e5:7f:4e:ca:72:82:d7:3a:bd:13:4e:c0:94:
         12:14:85:ca:2a:3b:64:b5:a2:66:1c:fc:e2:d4:a8:02:2c:f0:
         42:05:c1:97:48:06:5c:21:7e:cd:81:82:f9:27:20:7e:db:bc:
         e6:9b:8a:d9:eb:6d:8f:de:03:77:87:08:10:3c:e7:6f:b7:ee:
         e6:89:c7:f2:1d:03:1e:5c:02:e5:9f:86:10:df:d0:76:90:f0:
         3a:11:87:70:47:fc:fe:27:8a:4a:88:ba:64:dd:cd:66:14:72:
         36:51:d9:41:0e:7f:27:b7:fa:9b:08:6b:34:a6:be:86:95:b3:
         f2:ba:03:45:e5:31:fb:5a:57:a2:32:c5:e4:d6:e4:05:7c:af:
         01:34:04:a0:d5:ce:bf:00:cb:1c:2a:47:b7:ea:fa:a4:be:cd:
         f6:6b:7b:93:da:7a:4e:15:9e:52:01:8b:d0:ee:9c:41:b5:6b:
         d7:0d:a4:8f:5b:5b:d7:f6:cb:2a:a5:24:84:64:50:b0:87:f7:
         e1:b3:a2:ba:ec:e1:b3:05:b3:66:99:fc:f5:38:c7:7f:28:84:
         58:d4:cb:24:40:de:b0:0c:98:8e:93:04:35:5a:8d:23:aa:a4:
         80:2b:bb:56:25:75:9a:18:b5:91:1a:78:69:43:5a:37:0c:4d:
         fc:d5:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:10 2025 by rpki-client