$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer File: 2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer (raw, json) Hash identifier: Sg62bd4rh48k8XIAWKVZQ6vxiyPqfDdnQzrcIdOYvZA= Subject key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 34287105CB0BF182BA8224F993A5D385EDF07100 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:13:19 +0000 Certificate not after: Tue 04 Mar 2025 18:18:19 +0000 Subordinate resources: AS: 27789 IP: 190.93.0.0/19 IP: 190.93.64.0/18 IP: 200.12.240.0/21 IP: 201.221.64.0/19 IP: 2800:70::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:28:71:05:cb:0b:f1:82:ba:82:24:f9:93:a5:d3:85:ed:f0:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:13:19 2024 GMT Not After : Mar 4 18:18:19 2025 GMT Subject: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:8e:28:5b:87:8f:e4:18:fa:68:f4:68:e8: 64:32:06:48:2c:41:3a:22:0a:f0:f9:a3:22:ed:d0: 72:4b:d8:59:10:2f:32:b0:52:96:99:a6:b7:61:65: 3c:4b:2f:7b:f9:04:1f:15:a4:1b:43:40:c6:a2:f6: 3d:ff:bc:f9:98:87:64:9f:5e:43:aa:1e:71:50:43: 00:48:81:57:64:ab:6f:c1:46:da:bc:ff:a2:09:f2: a4:3e:b6:ed:1e:5d:41:64:45:65:61:77:1f:94:b5: cf:26:be:17:d2:f6:2d:01:64:e4:5c:72:8a:13:11: 16:34:23:7f:ad:67:8b:56:56:bc:da:14:20:1a:ec: 42:d9:80:5e:11:64:ac:6c:39:77:43:f5:e3:00:0b: bd:7d:cf:24:05:dd:33:90:33:26:ed:c0:92:cb:ce: 29:1f:9d:95:05:62:2b:f3:b4:42:9e:ea:98:10:ed: 61:ac:83:c1:81:56:f9:6a:41:2b:8a:73:08:77:a8: 98:8d:30:06:65:54:0b:33:05:b1:91:51:6f:1d:42: 2d:85:a3:6c:e9:fa:8d:12:8f:42:a1:02:66:95:ff: 1b:a8:ae:8d:a0:c7:8f:b2:17:b7:82:dd:e5:59:c2: 5c:98:1e:94:6d:46:10:6d:c5:1f:72:02:2f:1d:55: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.93.0.0/19 190.93.64.0/18 200.12.240.0/21 201.221.64.0/19 IPv6: 2800:70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27789 Signature Algorithm: sha256WithRSAEncryption a5:92:52:92:7e:bf:12:8a:87:ba:b5:a0:f3:74:58:6c:b5:68: 04:8d:b8:00:b0:a7:8f:68:38:12:20:40:bb:6c:5a:55:10:f8: d9:fd:49:8b:bf:e6:c1:e4:ea:64:96:9c:e7:a3:f8:a0:ba:7c: 39:4c:d9:31:f0:82:7b:2a:13:7f:7b:95:51:37:1e:ca:03:2d: 74:b6:06:80:74:7f:7a:c3:52:00:15:7c:9d:17:e9:c5:93:dc: 09:01:10:a8:ca:4a:31:ec:31:59:48:da:04:03:f9:85:86:71: 30:5e:a4:f0:c6:09:47:65:96:99:68:36:93:ac:64:0d:f7:33: 95:02:44:ae:94:93:d2:67:bc:f7:1f:cf:f8:61:15:aa:66:3c: 03:5e:66:55:a1:a9:95:96:47:45:81:1d:0e:1f:0d:e4:d6:32: 62:99:63:fc:12:f2:65:d1:29:f5:75:f1:45:f3:1b:0c:8b:12: 65:99:01:f5:80:cd:9b:72:a3:ae:a9:4a:53:0b:00:71:c6:14: 00:52:6e:2c:5e:15:45:e4:1c:e8:3e:a0:1a:3a:da:f1:fd:3f: a7:ae:02:2b:fb:2d:f6:34:f0:c0:8a:f0:ed:06:5a:a8:e3:56: 20:0b:de:a3:c4:2d:0c:0f:56:1a:ca:40:14:7c:d8:08:d4:71: 75:17:b3:98 -----BEGIN CERTIFICATE----- MIIGtjCCBZ6gAwIBAgIUNChxBcsL8YK6giT5k6XThe3wcQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODEzMTlaFw0yNTAzMDQxODE4MTlaMDMxMTAvBgNV BAMTKDJFNzM3NEZENDI4MzFCRERCNjI4NkRBOEI4QTFENURCQURBNTlCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1o4oW4eP5Bj6aPRo6GQyBkgs QToiCvD5oyLt0HJL2FkQLzKwUpaZprdhZTxLL3v5BB8VpBtDQMai9j3/vPmYh2Sf XkOqHnFQQwBIgVdkq2/BRtq8/6IJ8qQ+tu0eXUFkRWVhdx+Utc8mvhfS9i0BZORc cooTERY0I3+tZ4tWVrzaFCAa7ELZgF4RZKxsOXdD9eMAC719zyQF3TOQMybtwJLL zikfnZUFYivztEKe6pgQ7WGsg8GBVvlqQSuKcwh3qJiNMAZlVAszBbGRUW8dQi2F o2zp+o0Sj0KhAmaV/xuoro2gx4+yF7eC3eVZwlyYHpRtRhBtxR9yAi8dVY8LAgMB AAGjggPAMIIDvDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuc3T9QoMb3bYo bai4odXbraWbJjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5 MDcyMTBENjVENTQxOUE3N0M2NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1NDE5QTc3QzY0 MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4 QjhBMUQ1REJBREE1OUIyNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFvl0AAwQGvl1A AwQDyAzwAwQFyd1AMA0EAgACMAcDBQAoAABwMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAmyNMA0GCSqGSIb3DQEBCwUAA4IBAQClklKSfr8Sioe6taDzdFhstWgEjbgA sKePaDgSIEC7bFpVEPjZ/UmLv+bB5Opklpzno/igunw5TNkx8IJ7KhN/e5VRNx7K Ay10tgaAdH96w1IAFXydF+nFk9wJARCoykox7DFZSNoEA/mFhnEwXqTwxglHZZaZ aDaTrGQN9zOVAkSulJPSZ7z3H8/4YRWqZjwDXmZVoamVlkdFgR0OHw3k1jJimWP8 EvJl0Sn1dfFF8xsMixJlmQH1gM2bcqOuqUpTCwBxxhQAUm4sXhVF5BzoPqAaOtrx /T+nrgIr+y32NPDAivDtBlqo41YgC96jxC0MD1YaykAUfNgI1HF1F7OY -----END CERTIFICATE-----Generated at Thu May 16 22:33:53 2024 by rpki-client on console-ams.rpki-client.org