Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
File:                     8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer (raw, json)
Hash identifier:          y9hrIZ6XXzswxUCBW2VAqF+Dx6B+rIDVL5NDYlN+oNc=
Subject key identifier:   8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       6404D2448410191ABCADBE01751D291409CC0AAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 18:36:18 +0000
Certificate not after:    Wed 27 Jan 2027 18:41:18 +0000
Subordinate resources:    AS: 23243
                          AS: 262206
                          IP: 181.174.64.0/18
                          IP: 181.189.132.0 -- 181.189.143.255
                          IP: 186.189.192.0/19
                          IP: 190.106.192.0/19
                          IP: 200.49.160.0/19
                          IP: 2803:c800::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:04:d2:44:84:10:19:1a:bc:ad:be:01:75:1d:29:14:09:cc:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 18:36:18 2026 GMT
            Not After : Jan 27 18:41:18 2027 GMT
        Subject: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:c7:cb:36:7c:a6:cd:ba:e5:3b:33:94:d1:
                    d5:44:aa:e6:6a:d6:50:81:78:64:72:f5:bf:60:1c:
                    ae:6e:9c:8b:15:cd:07:07:f2:7f:01:e7:4d:c2:76:
                    9b:02:13:43:6e:ea:dc:e1:cb:ad:bd:2b:bf:ff:ee:
                    ba:f4:38:33:9b:89:02:71:23:9a:6c:05:4b:e4:27:
                    17:75:68:ef:06:35:a7:bd:a8:56:16:f5:65:a7:dd:
                    3a:a0:5b:63:12:63:23:1f:f7:bc:ed:92:59:91:46:
                    51:02:76:59:0a:79:a2:8d:27:3b:02:54:f9:e6:3b:
                    cd:5c:b5:c5:81:94:1c:9f:41:4a:26:33:9a:fe:d0:
                    6a:d3:db:4b:aa:ce:15:ca:94:8e:04:2b:f5:f1:df:
                    c0:b3:68:34:26:9f:28:6e:08:59:05:e9:78:93:51:
                    7b:50:cb:10:4d:03:78:2d:1b:19:c3:fd:25:91:eb:
                    56:dd:54:92:bd:c4:3b:2e:e3:6c:9b:07:32:76:8e:
                    58:79:a9:8b:50:ad:62:b2:1e:c4:50:7b:a0:75:6f:
                    7d:6e:de:c2:da:5a:87:f6:b5:ed:92:8b:45:4c:d0:
                    18:f8:3e:8b:eb:9c:8f:4c:08:73:67:37:da:89:24:
                    2b:9a:ff:b9:df:43:72:d2:4d:38:64:7a:5f:7d:79:
                    e4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.64.0/18
                  181.189.132.0-181.189.143.255
                  186.189.192.0/19
                  190.106.192.0/19
                  200.49.160.0/19
                IPv6:
                  2803:c800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23243
                  262206

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:41:2b:0b:1a:1b:44:90:87:55:84:24:db:17:52:f6:d4:
         89:ed:0e:c5:9f:72:8d:95:a6:b1:79:cc:7b:88:56:1c:cb:54:
         2d:5f:2a:38:2b:8c:65:bb:e7:b9:9e:26:53:7a:85:53:99:3e:
         75:23:9f:2a:0e:cf:9b:72:06:a5:3a:e5:59:50:90:f9:61:85:
         d7:fc:67:03:9d:1e:3d:6f:28:c1:db:0f:05:86:f6:5f:24:34:
         43:36:36:0b:df:db:99:7e:7a:ef:1e:c1:d6:94:4c:60:45:a5:
         80:7e:13:1d:9d:2c:89:73:67:93:e6:80:11:04:25:27:5d:75:
         8f:84:de:f6:59:98:d7:2b:1a:94:5a:7a:a4:ad:d7:53:77:4d:
         a7:54:c7:37:05:a2:4e:4c:84:fa:b9:7f:3f:8a:a8:21:ea:42:
         b9:49:2d:09:93:db:2e:8f:a9:94:a5:8f:83:72:3b:d2:c3:e7:
         42:d0:95:3c:10:45:09:37:97:2e:dc:be:a0:3f:de:24:83:21:
         94:6b:72:98:b9:c9:cd:88:e4:d6:88:e1:a5:a9:d0:8a:11:78:
         db:4e:e6:26:0c:fd:f0:74:83:1f:7f:d8:34:e4:9d:e8:a4:41:
         3e:0c:66:e8:d2:91:20:0b:a5:1e:3d:d5:c3:40:22:ed:b8:c2:
         e3:f7:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:02 2026 by rpki-client