$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5480C1E4344F73887D57526E52F538CAFC912EC7.cer File: 5480C1E4344F73887D57526E52F538CAFC912EC7.cer (raw, json) Hash identifier: xxp/6nwCKbWRSgDCm2KR7U8bcXWTAkA4qST9mDY96l0= Subject key identifier: 54:80:C1:E4:34:4F:73:88:7D:57:52:6E:52:F5:38:CA:FC:91:2E:C7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 65FE9762A5E3A5BADE408CC5C6FEFAFE03DF2411 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9325905DE169CFCBF46A0E3C43FC066192E053FE296C2D5176E60E86A78CBA7A/0/5480C1E4344F73887D57526E52F538CAFC912EC7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9325905DE169CFCBF46A0E3C43FC066192E053FE296C2D5176E60E86A78CBA7A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:06:29 +0000 Certificate not after: Tue 04 Mar 2025 18:11:29 +0000 Subordinate resources: AS: 264718 IP: 200.10.174.0/23 IP: 2801:1d:9000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 05 Jul 2024 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fe:97:62:a5:e3:a5:ba:de:40:8c:c5:c6:fe:fa:fe:03:df:24:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:06:29 2024 GMT Not After : Mar 4 18:11:29 2025 GMT Subject: CN=5480C1E4344F73887D57526E52F538CAFC912EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:26:b5:31:b6:cd:8a:2d:11:e8:53:2c:49:4a: 20:34:22:3a:98:53:4c:f0:4a:5f:4a:63:36:c5:46: 6d:ab:90:0f:74:e1:b9:2f:ae:ff:4e:0b:75:04:2d: e4:e7:78:30:f1:6b:a7:cf:69:fc:31:51:4b:40:eb: 70:48:42:79:e2:55:95:b1:b1:06:1e:0e:4a:20:ef: 80:1b:31:7f:a4:b7:3e:cf:fd:d7:57:cf:dd:2e:8a: db:33:6d:42:57:15:a2:ad:1b:80:71:f2:47:c8:55: 61:6e:fd:02:36:bd:f0:b8:37:79:83:d7:0c:b1:04: a1:91:db:81:4d:ce:e7:ee:c9:86:14:2a:0a:8a:66: e6:12:13:5a:c4:f2:ce:b0:e0:b0:19:a9:5f:5a:68: 19:f5:33:fe:89:4c:df:73:61:f8:06:55:9d:c6:15: 05:12:78:03:cb:97:7b:a5:4f:dc:c9:7c:de:e5:58: 17:71:6f:1b:68:67:22:5a:2f:39:a7:0e:d7:da:59: 6b:e2:d1:90:a4:2e:fc:35:6d:e2:a8:c5:0c:c9:be: c9:5c:a6:8f:fb:bd:94:32:8a:ca:2e:8f:7d:b9:be: 1f:e0:52:05:3d:8a:4f:fc:36:25:fb:62:5d:4d:78: ed:7d:78:3a:09:f6:75:7b:a8:1d:4a:16:b3:7e:b0: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:80:C1:E4:34:4F:73:88:7D:57:52:6E:52:F5:38:CA:FC:91:2E:C7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9325905DE169CFCBF46A0E3C43FC066192E053FE296C2D5176E60E86A78CBA7A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9325905DE169CFCBF46A0E3C43FC066192E053FE296C2D5176E60E86A78CBA7A/0/5480C1E4344F73887D57526E52F538CAFC912EC7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.174.0/23 IPv6: 2801:1d:9000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264718 Signature Algorithm: sha256WithRSAEncryption 1d:c5:1f:2a:6b:bc:ec:a7:2b:90:e2:36:73:62:22:f3:31:ea: 13:97:ec:71:1f:bc:8f:c7:a2:7d:44:a4:2e:e1:6d:41:e3:4b: cd:d7:1a:a6:83:52:b6:5e:c8:fe:25:dc:0e:2f:c0:f8:59:86: 6d:7d:32:e2:81:34:3f:af:38:20:ee:9a:27:02:f2:ca:10:06: 9f:44:14:a2:fa:c1:50:c0:74:0d:c7:a3:67:13:66:1d:bf:a4: 65:c3:50:50:07:11:e1:98:f3:c5:36:fc:86:0f:fc:ba:1a:ab: 06:bb:ff:70:3a:9d:87:95:94:fa:59:a1:b9:e6:dc:48:eb:30: d1:52:85:9b:d8:5d:bf:78:ed:79:1a:21:28:28:cd:14:ab:aa: ce:9c:44:4c:92:ed:91:a6:0e:91:92:81:6a:65:fc:7f:52:e2: 57:d0:9f:8e:38:2b:3b:b3:39:0e:80:40:a6:52:a3:05:80:26: b5:a8:e3:16:61:c8:4d:d0:c5:53:1a:96:23:42:1c:bb:42:f0: 7a:99:70:cf:cb:e5:42:a1:3c:a2:78:d2:e8:ef:2b:a8:26:0f: 23:24:7b:6d:73:5a:a6:60:ac:b9:67:73:c5:bb:10:31:ec:30: 7e:b0:33:a2:51:99:25:61:e3:64:05:dd:55:31:31:64:24:15: 71:54:4e:25 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUZf6XYqXjpbreQIzFxv76/gPfJBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA2MjlaFw0yNTAzMDQxODExMjlaMDMxMTAvBgNV BAMTKDU0ODBDMUU0MzQ0RjczODg3RDU3NTI2RTUyRjUzOENBRkM5MTJFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNJrUxts2KLRHoUyxJSiA0IjqY U0zwSl9KYzbFRm2rkA904bkvrv9OC3UELeTneDDxa6fPafwxUUtA63BIQnniVZWx sQYeDkog74AbMX+ktz7P/ddXz90uitszbUJXFaKtG4Bx8kfIVWFu/QI2vfC4N3mD 1wyxBKGR24FNzufuyYYUKgqKZuYSE1rE8s6w4LAZqV9aaBn1M/6JTN9zYfgGVZ3G FQUSeAPLl3ulT9zJfN7lWBdxbxtoZyJaLzmnDtfaWWvi0ZCkLvw1beKoxQzJvslc po/7vZQyisouj325vh/gUgU9ik/8NiX7Yl1NeO19eDoJ9nV7qB1KFrN+sMuZAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUgMHkNE9ziH1X Um5S9TjK/JEuxzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTMyNTkwNURFMTY5Q0ZDQkY0NkEwRTND NDNGQzA2NjE5MkUwNTNGRTI5NkMyRDUxNzZFNjBFODZBNzhDQkE3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MzI1OTA1REUxNjlDRkNCRjQ2QTBFM0M0M0ZDMDY2MTkyRTA1M0ZFMjk2 QzJENTE3NkU2MEU4NkE3OENCQTdBLzAvNTQ4MEMxRTQzNDRGNzM4ODdENTc1MjZF NTJGNTM4Q0FGQzkxMkVDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByAquMA8EAgAC MAkDBwAoAQAdkAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAoOMA0GCSqGSIb3 DQEBCwUAA4IBAQAdxR8qa7zspyuQ4jZzYiLzMeoTl+xxH7yPx6J9RKQu4W1B40vN 1xqmg1K2Xsj+JdwOL8D4WYZtfTLigTQ/rzgg7ponAvLKEAafRBSi+sFQwHQNx6Nn E2Ydv6Rlw1BQBxHhmPPFNvyGD/y6GqsGu/9wOp2HlZT6WaG55txI6zDRUoWb2F2/ eO15GiEoKM0Uq6rOnERMku2Rpg6RkoFqZfx/UuJX0J+OOCs7szkOgECmUqMFgCa1 qOMWYchN0MVTGpYjQhy7QvB6mXDPy+VCoTyieNLo7yuoJg8jJHttc1qmYKy5Z3PF uxAx7DB+sDOiUZklYeNkBd1VMTFkJBVxVE4l -----END CERTIFICATE-----Generated at Mon Jul 1 04:25:41 2024 by rpki-client on console-fra.rpki-client.org