$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer File: 139F22949A3A148A31827A973EA0FF67A3A095E8.cer (raw, json) Hash identifier: zfPDe2V6RRx1+YjiodQTzV305iXOAwVAfVjtZM+J5Xc= Subject key identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4B30E308B0BFCE4E31389A482AAF938DF3A2349A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:13:37 +0000 Certificate not after: Tue 04 Mar 2025 18:18:37 +0000 Subordinate resources: AS: 264658 IP: 167.250.212.0/22 IP: 170.83.236.0/22 IP: 170.231.248.0/22 IP: 2803:4540::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 May 2024 20:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:30:e3:08:b0:bf:ce:4e:31:38:9a:48:2a:af:93:8d:f3:a2:34:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:13:37 2024 GMT Not After : Mar 4 18:18:37 2025 GMT Subject: CN=139F22949A3A148A31827A973EA0FF67A3A095E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:9a:a6:78:a9:4c:ea:80:f5:56:be:e4:53: 9c:e3:5a:c9:8a:da:db:16:d9:e3:e1:2a:ab:f0:63: f7:24:dd:c1:c7:9a:45:1f:09:8d:70:26:2a:34:ca: 18:75:7e:88:8e:37:bc:fd:f7:9e:c9:f5:3e:3f:49: 9e:1b:a1:b4:25:7a:61:f3:24:d3:c0:31:90:5a:e1: 4c:e2:e4:90:27:be:88:0a:5f:48:d4:9a:90:a3:11: 12:de:c0:47:0d:60:43:0e:d8:36:bb:25:9a:29:35: fa:49:0b:f1:90:6e:49:cf:3b:0d:3e:cd:05:62:7a: 0b:47:f5:87:a7:8c:c8:2b:a2:a7:e5:c2:25:4f:ec: f3:5c:1d:8e:dd:0d:58:40:ac:12:43:5e:a1:a4:53: 4c:63:c8:6d:54:73:9c:90:e4:5d:44:76:54:0e:01: 93:e2:d7:2e:2c:ec:c2:60:32:f1:c0:93:2c:1a:fc: f4:64:f6:79:aa:b2:a3:dd:8d:52:4a:bd:54:38:1f: c9:d2:3b:1d:a5:86:aa:c0:03:69:46:51:8c:10:78: 5d:61:dd:3e:f6:e5:c3:a3:3f:1f:b3:4a:e4:25:08: 2e:c5:37:3e:c4:07:4c:c5:bf:99:a7:c6:20:20:4f: 5e:19:6b:98:dd:bf:3d:ef:ac:d0:9e:95:2b:2c:e3: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.212.0/22 170.83.236.0/22 170.231.248.0/22 IPv6: 2803:4540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264658 Signature Algorithm: sha256WithRSAEncryption e2:82:47:bd:92:22:cf:59:6a:65:1d:94:51:55:1e:54:63:7e: 02:d2:8b:27:b4:66:e6:5a:83:ad:01:55:8b:47:e2:ba:2c:1e: 54:8f:6c:e2:df:ba:8e:c2:1c:42:36:26:21:8b:12:1b:62:10: 46:2e:ee:6a:e4:1f:0c:11:3a:f4:60:91:01:31:92:59:65:2c: 7a:54:68:94:5b:51:5c:0c:cb:12:15:dd:45:56:e5:dc:79:52: d6:28:af:df:f5:49:a3:2b:75:39:e4:48:1f:4f:21:8f:7a:d7: f4:cf:44:3f:57:4f:e4:00:b2:7b:20:c1:79:b0:b9:d5:27:36: de:52:bc:9a:a8:6d:3a:ad:5b:36:17:27:37:c8:dc:35:e0:29: 7f:92:a2:66:1b:1e:ab:97:3f:ca:f1:d5:6c:5a:84:42:60:30: 1d:f0:cf:a0:b3:cb:45:0f:5f:6b:7e:44:b8:e3:9c:93:fb:ae: 13:72:74:64:88:65:4c:0f:74:2f:89:b8:9e:a0:1e:e0:b7:8f: 85:c0:eb:ae:4e:06:24:0b:12:d9:d4:1c:1a:94:1b:c5:95:56: c0:c2:63:ea:7a:b0:b2:89:ec:88:fd:b2:36:ac:b3:e0:db:ff: bf:bb:be:1e:c6:86:6c:ad:b3:5b:ca:cc:be:93:ba:53:ff:6a: 71:d2:13:b8 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUSzDjCLC/zk4xOJpIKq+TjfOiNJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODEzMzdaFw0yNTAzMDQxODE4MzdaMDMxMTAvBgNV BAMTKDEzOUYyMjk0OUEzQTE0OEEzMTgyN0E5NzNFQTBGRjY3QTNBMDk1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruJqmeKlM6oD1Vr7kU5zjWsmK 2tsW2ePhKqvwY/ck3cHHmkUfCY1wJio0yhh1foiON7z9957J9T4/SZ4bobQlemHz JNPAMZBa4Uzi5JAnvogKX0jUmpCjERLewEcNYEMO2Da7JZopNfpJC/GQbknPOw0+ zQViegtH9YenjMgroqflwiVP7PNcHY7dDVhArBJDXqGkU0xjyG1Uc5yQ5F1EdlQO AZPi1y4s7MJgMvHAkywa/PRk9nmqsqPdjVJKvVQ4H8nSOx2lhqrAA2lGUYwQeF1h 3T725cOjPx+zSuQlCC7FNz7EB0zFv5mnxiAgT14Za5jdvz3vrNCelSss4637AgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTnyKUmjoUijGC epc+oP9no6CV6DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdFNjlBRjlBMTRFNUI5NzM4RDI0NzlE N0I4ODczMkY3MUUyNTVCNzdEN0JEMkNCRDkyNzEyNkVCOTMyMkZBOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0U2OUFGOUExNEU1Qjk3MzhEMjQ3OUQ3Qjg4NzMyRjcxRTI1NUI3N0Q3 QkQyQ0JEOTI3MTI2RUI5MzIyRkE5LzAvMTM5RjIyOTQ5QTNBMTQ4QTMxODI3QTk3 M0VBMEZGNjdBM0EwOTVFOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCp/rUAwQCqlPs AwQCquf4MA0EAgACMAcDBQAoA0VAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ 0jANBgkqhkiG9w0BAQsFAAOCAQEA4oJHvZIiz1lqZR2UUVUeVGN+AtKLJ7Rm5lqD rQFVi0fiuiweVI9s4t+6jsIcQjYmIYsSG2IQRi7uauQfDBE69GCRATGSWWUselRo lFtRXAzLEhXdRVbl3HlS1iiv3/VJoyt1OeRIH08hj3rX9M9EP1dP5ACyeyDBebC5 1Sc23lK8mqhtOq1bNhcnN8jcNeApf5KiZhseq5c/yvHVbFqEQmAwHfDPoLPLRQ9f a35EuOOck/uuE3J0ZIhlTA90L4m4nqAe4LePhcDrrk4GJAsS2dQcGpQbxZVWwMJj 6nqwsonsiP2yNqyz4Nv/v7u+HsaGbK2zW8rMvpO6U/9qcdITuA== -----END CERTIFICATE-----Generated at Wed May 22 16:48:19 2024 by rpki-client on console-fra.rpki-client.org