$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer File: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer (raw, json) Hash identifier: HXtHW3j3ssNFxgo7fc7xWGVmh8IsHwivQxWPZA/JnAs= Subject key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0E21954EADDA3D25B196CD2764E7F3C155722C37 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:51:47 +0000 Certificate not after: Tue 04 Mar 2025 17:56:47 +0000 Subordinate resources: AS: 262234 IP: 131.108.232.0/22 IP: 170.245.56.0/22 IP: 179.49.112.0/21 IP: 2803:db00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 05 Jul 2024 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:21:95:4e:ad:da:3d:25:b1:96:cd:27:64:e7:f3:c1:55:72:2c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:51:47 2024 GMT Not After : Mar 4 17:56:47 2025 GMT Subject: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:50:c9:d9:db:3e:cc:58:1a:35:6b:32:58: 2e:7b:b5:09:42:b9:a8:cd:9b:66:64:df:ad:51:03: 93:2a:74:72:03:59:d9:18:5f:ae:fb:5f:1e:74:01: b1:06:23:92:1d:50:35:4b:20:b4:6e:3f:47:a5:d5: c0:3a:ee:64:50:f8:ad:8f:fb:e8:85:99:f4:7d:ef: 3d:6a:85:4c:3e:af:1b:52:8f:c4:90:e6:cb:a7:c6: e8:e8:65:c3:77:d5:30:12:04:17:cb:f1:67:04:2f: 6c:fe:3d:af:42:f4:e1:d3:47:bb:f4:12:4b:80:66: 53:7a:86:ff:db:7e:0b:b4:67:8b:6a:f2:52:45:88: 77:14:b1:b8:2a:38:6b:e4:89:23:80:f5:ca:fb:d3: 72:85:37:35:7f:ef:26:c7:37:e4:22:9b:73:a0:7c: aa:c9:7c:55:40:25:3a:e8:83:28:9d:bb:2b:b0:d0: 0c:8d:0c:2f:25:e6:ec:75:0d:a8:e7:3c:3f:ae:0d: 57:7e:92:5c:5d:cf:b2:31:c2:5a:f0:99:67:21:e4: b0:09:3f:05:2d:56:45:49:86:b7:a4:5d:14:88:f9: 3f:34:55:bb:45:51:cc:78:fa:de:8b:40:0d:1c:f5: 63:1e:15:a7:8d:73:9c:6b:94:4c:1d:dd:c9:07:38: 90:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.232.0/22 170.245.56.0/22 179.49.112.0/21 IPv6: 2803:db00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262234 Signature Algorithm: sha256WithRSAEncryption 1c:f5:ee:cd:71:77:cd:0d:11:02:71:f4:2d:6a:e3:b1:d8:a4: 67:34:c6:72:7c:a6:0d:f8:10:99:9e:0e:5a:26:92:3d:9c:3b: 81:e5:60:61:5b:12:94:7c:c9:71:f0:00:b8:a8:23:c3:c7:02: 47:65:1d:37:2a:f2:f4:a6:16:b9:5a:8a:86:88:31:01:cc:d8: 82:b1:55:8d:fd:f7:a1:bd:23:88:7b:fd:4d:bf:be:6c:08:33: b0:63:25:e2:6f:59:51:54:61:ae:98:04:d5:7f:b2:ec:0f:86: 49:e6:ad:96:49:83:ef:1d:a7:b6:55:c6:5a:d1:ac:09:28:f7: cb:2a:61:36:0e:c8:fc:d7:c4:45:b3:3c:59:c2:84:97:6a:0f: 50:68:b4:b9:69:6f:03:1f:8c:79:4a:f4:25:78:d4:12:03:7a: bf:ac:64:10:67:bf:75:b2:90:99:50:6a:0a:49:74:89:17:a0: 4d:f4:e6:5f:35:3e:00:c2:46:f0:46:b7:f4:7c:99:00:51:c4: 06:c0:a8:32:76:d0:17:61:a6:48:ed:c7:8f:7c:10:fd:63:62: fa:0a:62:48:bb:c2:b2:44:07:eb:ef:d1:14:e3:6a:44:b7:34: 6a:f8:06:06:3a:1e:07:c0:e0:57:a7:91:f1:65:df:de:7e:d6: a8:5b:3a:7b -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUDiGVTq3aPSWxls0nZOfzwVVyLDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUxNDdaFw0yNTAzMDQxNzU2NDdaMDMxMTAvBgNV BAMTKDIyMEFFNDI2M0VDNDUxMEJERUVEQTkwQjJFNTZGNTBDNjM5MTlERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmVDJ2ds+zFgaNWsyWC57tQlC uajNm2Zk361RA5MqdHIDWdkYX677Xx50AbEGI5IdUDVLILRuP0el1cA67mRQ+K2P ++iFmfR97z1qhUw+rxtSj8SQ5sunxujoZcN31TASBBfL8WcEL2z+Pa9C9OHTR7v0 EkuAZlN6hv/bfgu0Z4tq8lJFiHcUsbgqOGvkiSOA9cr703KFNzV/7ybHN+Qim3Og fKrJfFVAJTrogyiduyuw0AyNDC8l5ux1DajnPD+uDVd+klxdz7IxwlrwmWch5LAJ PwUtVkVJhrekXRSI+T80VbtFUcx4+t6LQA0c9WMeFaeNc5xrlEwd3ckHOJCRAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiCuQmPsRRC97t qQsuVvUMY5Gd8DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTI3QjczMzlBNTdGMkE0RDE5OEJCRDZD NUQ1RjY0Q0UxQUY4MTRCNDA5MzU0NzcxQTIzMEEyRjAyMTk4NTM5Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMjdCNzMzOUE1N0YyQTREMTk4QkJENkM1RDVGNjRDRTFBRjgxNEI0MDkz NTQ3NzFBMjMwQTJGMDIxOTg1MzlGLzAvMjIwQUU0MjYzRUM0NTEwQkRFRURBOTBC MkU1NkY1MEM2MzkxOURGMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCg2zoAwQCqvU4 AwQDszFwMA0EAgACMAcDBQAoA9sAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQA WjANBgkqhkiG9w0BAQsFAAOCAQEAHPXuzXF3zQ0RAnH0LWrjsdikZzTGcnymDfgQ mZ4OWiaSPZw7geVgYVsSlHzJcfAAuKgjw8cCR2UdNyry9KYWuVqKhogxAczYgrFV jf33ob0jiHv9Tb++bAgzsGMl4m9ZUVRhrpgE1X+y7A+GSeatlkmD7x2ntlXGWtGs CSj3yyphNg7I/NfERbM8WcKEl2oPUGi0uWlvAx+MeUr0JXjUEgN6v6xkEGe/dbKQ mVBqCkl0iRegTfTmXzU+AMJG8Ea39HyZAFHEBsCoMnbQF2GmSO3Hj3wQ/WNi+gpi SLvCskQH6+/RFONqRLc0avgGBjoeB8DgV6eR8WXf3n7WqFs6ew== -----END CERTIFICATE-----Generated at Mon Jul 1 04:25:39 2024 by rpki-client on console-fra.rpki-client.org