Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55321E2845B43924431AF187D47BBD4651E854AF.cer
File:                     55321E2845B43924431AF187D47BBD4651E854AF.cer (raw, json)
Hash identifier:          PsntK3IH9ObgSCDC4+xLbkEFyYunOXSs0DniUCdJQzI=
Subject key identifier:   55:32:1E:28:45:B4:39:24:43:1A:F1:87:D4:7B:BD:46:51:E8:54:AF
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       60409137303C075F817C9EB763C7E31391A72C3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/55321E2845B43924431AF187D47BBD4651E854AF.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 20:44:09 +0000
Certificate not after:    Tue 26 Jan 2027 20:49:09 +0000
Subordinate resources:    AS: 269850
                          IP: 2801:11:4800::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:40:91:37:30:3c:07:5f:81:7c:9e:b7:63:c7:e3:13:91:a7:2c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 20:44:09 2026 GMT
            Not After : Jan 26 20:49:09 2027 GMT
        Subject: CN=55321E2845B43924431AF187D47BBD4651E854AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:63:3e:0e:16:1b:1f:ad:63:a8:ea:fe:76:22:
                    00:8b:47:0c:e0:26:75:f5:93:4f:06:7d:ad:01:8c:
                    55:de:8e:d0:98:c7:e7:dd:75:c5:25:09:24:ae:9f:
                    33:cd:b8:93:10:b5:26:38:36:1b:28:5e:06:b0:ae:
                    7d:ce:d4:a2:02:47:37:47:9b:4f:f7:0b:40:37:fe:
                    23:82:9c:6e:1f:a2:b5:69:82:c9:ee:09:91:4a:db:
                    fb:fe:1e:8d:08:90:45:09:ff:a2:06:03:58:cf:dd:
                    be:3e:8c:5a:87:6d:a5:de:d6:d8:53:fa:ed:57:95:
                    83:17:c0:58:c6:02:78:37:86:81:73:56:53:b3:eb:
                    7f:20:5e:f4:58:8f:27:33:6e:71:7a:7a:ef:9b:1a:
                    02:7e:42:0e:6f:d0:db:d9:4d:d2:40:d9:86:dc:73:
                    1f:bf:75:cb:31:9d:89:eb:4c:98:05:e9:0b:7a:7b:
                    7e:59:4b:da:cb:de:cd:83:88:43:c6:d1:0c:cb:4b:
                    4e:1a:c3:65:0f:7c:b2:07:90:fc:d0:55:b5:35:09:
                    c7:7a:f5:c4:2e:43:0d:c9:b6:16:71:9f:59:19:84:
                    52:2d:17:0f:65:1b:11:86:7c:c2:40:0d:75:77:de:
                    07:7a:58:12:c2:41:92:3c:c9:fc:06:ca:aa:d8:b6:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:32:1E:28:45:B4:39:24:43:1A:F1:87:D4:7B:BD:46:51:E8:54:AF
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B517D385D60FE3764236B388AE708FACE8D1FC09166B8B8E87A9CBA01E111371/0/55321E2845B43924431AF187D47BBD4651E854AF.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:4800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269850

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:9f:c4:24:81:dc:ac:c9:5b:84:3d:04:72:5b:2d:80:47:
         56:1f:93:cb:5b:48:df:70:32:09:ae:14:41:fd:b0:6c:87:bf:
         1b:d0:12:17:fb:6a:6d:4b:9c:b2:62:bc:95:3f:a6:67:0f:a0:
         87:92:c6:0d:ff:b7:f3:c7:cd:02:01:b9:4d:95:08:85:06:a2:
         dd:96:fc:6b:09:dd:e3:bd:93:2e:e5:a1:84:da:27:94:85:10:
         1d:0e:c0:f4:76:b8:aa:e8:de:ce:a0:f5:5d:cf:ec:80:7d:ba:
         8b:0d:aa:72:8e:56:60:61:b7:b8:5a:fc:9c:ca:aa:58:35:1b:
         28:bb:b5:d0:39:f8:71:61:6a:90:95:43:ca:5d:cd:5d:51:d9:
         ff:73:14:ee:3a:a8:aa:00:3f:40:1d:e2:97:d7:13:16:70:9f:
         7a:39:29:b9:53:47:9d:66:57:36:7d:ff:98:f3:12:8a:bf:83:
         f7:bf:41:0d:0b:86:3e:1c:f8:ec:3e:94:4a:35:a0:af:5b:56:
         24:0e:7f:41:c0:76:3e:79:4a:cc:8b:1c:02:71:01:3a:1c:7c:
         df:10:61:fd:33:88:0e:36:db:06:7e:fd:80:32:a3:e4:95:e1:
         1a:8c:82:51:81:67:55:20:4e:43:da:07:27:15:d1:8c:16:97:
         67:3d:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:53 2026 by rpki-client