Certificate

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
File:                     946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer (raw, json)
Hash identifier:          011JIfeI6qptym0xyvh6JkC32F0zzUHurBZ4kpQGY5E=
Subject key identifier:   94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD
Authority key identifier: FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47
Certificate issuer:       /CN=FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47
Certificate serial:       26B196EBA000F48514B16FBCD43B7C75C1A4CCC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Oct 2026 19:34:18 +0000
Certificate not after:    Wed 25 Oct 2028 19:39:18 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Nov 2027 13:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b1:96:eb:a0:00:f4:85:14:b1:6f:bc:d4:3b:7c:75:c1:a4:cc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47
        Validity
            Not Before: Oct 28 19:34:18 2026 GMT
            Not After : Oct 25 19:39:18 2028 GMT
        Subject: CN=946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:a3:39:da:80:f5:6a:50:3a:00:ba:87:98:
                    9e:c7:ef:27:3a:f9:d3:6a:92:82:a4:a0:d5:f1:8d:
                    2f:6c:3c:de:37:fa:4e:a5:4b:86:5d:f9:42:2b:83:
                    e5:cc:76:b6:ed:45:d4:9a:64:f8:33:38:c8:03:d8:
                    e4:a5:29:29:35:bb:09:61:df:92:6c:b2:2e:bf:d0:
                    01:b8:c7:d6:c6:e0:c6:4f:16:c6:2c:66:3b:ba:b9:
                    c7:bf:f3:6d:90:38:33:7f:78:42:26:94:68:94:16:
                    ea:71:37:1a:0c:e5:e6:4f:26:69:14:12:c9:e8:a0:
                    af:c5:7b:f1:54:3d:fc:91:20:a1:d2:86:1a:74:ab:
                    5b:44:90:48:e0:ee:cb:75:8d:4d:39:c5:a7:5a:71:
                    b0:c2:93:69:bd:c9:d6:ee:74:bc:66:61:14:28:94:
                    3d:9e:88:58:e5:91:db:e2:14:c1:d0:4a:e7:dc:30:
                    64:35:72:93:b5:20:a1:fe:72:38:ae:88:a3:00:4c:
                    58:2d:6d:5c:e5:b0:83:b4:05:4e:73:94:ef:93:b2:
                    cb:c7:55:bf:31:fa:51:8b:e1:0d:53:03:a6:4a:d0:
                    a3:4b:7d:0d:43:b7:1a:de:75:67:ca:a7:fa:dc:95:
                    5a:7b:80:ae:11:b5:ef:e8:37:ed:1d:00:44:2e:98:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD
            X509v3 Authority Key Identifier:
                keyid:FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:d6:55:f8:81:60:af:b2:94:8d:a4:45:e4:85:de:37:b5:
         bf:64:35:1a:da:59:39:b3:06:7d:aa:b7:f5:1e:82:3f:4b:7d:
         39:cc:fb:df:97:1c:f9:19:21:0c:1a:2e:54:2d:dd:68:b2:bb:
         ce:78:57:da:a0:55:b6:6d:33:fa:af:83:d4:6d:99:b0:a4:68:
         cc:c7:01:fe:53:ae:73:03:82:92:2b:53:76:81:24:d3:54:68:
         e3:d9:9f:00:08:05:af:ad:c8:ad:c3:18:bc:c0:15:f7:4d:e9:
         3f:a6:ba:42:8d:ef:19:6d:21:56:75:79:10:b4:c2:c0:47:be:
         eb:20:2c:57:d3:ef:a1:b7:f8:8f:9b:25:1a:c2:5e:a5:9d:9a:
         00:31:a7:09:48:21:1b:fd:1f:ea:70:3b:85:f6:52:2f:0e:e3:
         bd:69:0b:f5:d1:cd:96:b7:2d:90:6e:87:29:2e:9f:67:05:38:
         b0:c1:57:34:d1:b7:35:93:3c:6a:83:c0:ad:11:58:88:7e:c2:
         10:d3:a0:53:85:75:93:e3:1f:50:da:c1:d3:50:6b:14:cd:66:
         6e:0f:d8:77:96:e1:ac:7f:fb:11:2e:c0:51:69:f3:3b:3b:28:
         5d:53:4d:37:e2:1c:dc:20:61:66:eb:ff:9d:28:d0:c3:4a:17:
         fd:0e:64:57
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUJrGW66AA9IUUsW+81Dt8dcGkzMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4QTlDQjNFRDE4NEUxN0QzMEVFQTFFMEZBNzYxNUNF
NEIxQUY0NzAeFw0yNjEwMjgxOTM0MThaFw0yODEwMjUxOTM5MThaMDMxMTAvBgNV
BAMTKDk0NkRBRTg0NjRFN0M1ODFFOUJBNTc4N0Y3NENCREE5RENGNkY4Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/KM52oD1alA6ALqHmJ7H7yc6
+dNqkoKkoNXxjS9sPN43+k6lS4Zd+UIrg+XMdrbtRdSaZPgzOMgD2OSlKSk1uwlh
35Jssi6/0AG4x9bG4MZPFsYsZju6uce/822QODN/eEImlGiUFupxNxoM5eZPJmkU
EsnooK/Fe/FUPfyRIKHShhp0q1tEkEjg7st1jU05xadacbDCk2m9ydbudLxmYRQo
lD2eiFjlkdviFMHQSufcMGQ1cpO1IKH+cjiuiKMATFgtbVzlsIO0BU5zlO+TssvH
Vb8x+lGL4Q1TA6ZK0KNLfQ1DtxredWfKp/rclVp7gK4Rte/oN+0dAEQumKohAgMB
AAGjggMEMIIDADAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUba6EZOfFgem6
V4f3TL2p3Pb4zTAfBgNVHSMEGDAWgBT8ipyz7RhOF9MO6h4Pp2Fc5LGvRzAOBgNV
HQ8BAf8EBAMCAQYwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkM4QTlDQjNFRDE4NEUxN0QzMEVFQTFF
MEZBNzYxNUNFNEIxQUY0Ny5jcmwwWQYIKwYBBQUHAQEETTBLMEkGCCsGAQUFBzAC
hj1yc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9ydGEt
bGFjbmljLXJwa2kuY2VyMIIBcQYIKwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcw
BYZtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVB
QTFCMkM2OTBEMzRERDNBNDJFMEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFC
NjZCNDc4NkQ2MzJFNi8wLzCBpgYIKwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRv
cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw
QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvOTQ2
REFFODQ2NEU3QzU4MUU5QkE1Nzg3Rjc0Q0JEQTlEQ0Y2RjhDRC5tZnQwOQYIKwYB
BQUHMA2GLWh0dHBzOi8vcnJkcC5sYWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9u
LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgw
FjAJBAIAATADAwEAMAkEAgACMAMDAQAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDDAK
AgEAAgUA/////zANBgkqhkiG9w0BAQsFAAOCAQEAb5DWVfiBYK+ylI2kReSF3je1
v2Q1GtpZObMGfaq39R6CP0t9Ocz735cc+RkhDBouVC3daLK7znhX2qBVtm0z+q+D
1G2ZsKRozMcB/lOucwOCkitTdoEk01Ro49mfAAgFr63IrcMYvMAV903pP6a6Qo3v
GW0hVnV5ELTCwEe+6yAsV9Pvobf4j5slGsJepZ2aADGnCUghG/0f6nA7hfZSLw7j
vWkL9dHNlrctkG6HKS6fZwU4sMFXNNG3NZM8aoPArRFYiH7CENOgU4V1k+MfUNrB
01BrFM1mbg/Yd5bhrH/7ES7AUWnzOzsoXVNNN+Ic3CBhZuv/nSjQw0oX/Q5kVw==
-----END CERTIFICATE-----