$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer File: 5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer (raw, json) Hash identifier: UqrT+pj5eq5Sq0/F9orxwJJwA/BVK+bqK7GsHjD8oO8= Subject key identifier: 5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 18462A068AF4435BB6B76701C77DEA2FEC41E567 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:00:08 +0000 Certificate not after: Tue 04 Mar 2025 18:05:08 +0000 Subordinate resources: AS: 271818 IP: 181.233.60.0/24 IP: 2801:12:100::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:46:2a:06:8a:f4:43:5b:b6:b7:67:01:c7:7d:ea:2f:ec:41:e5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:00:08 2024 GMT Not After : Mar 4 18:05:08 2025 GMT Subject: CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:a1:ca:25:43:95:2a:14:01:e9:c2:05:44: 05:b7:e8:ca:ac:b0:5c:2f:b9:d2:38:e9:ff:1f:ef: 48:8a:71:c2:44:4e:bd:9c:98:cd:aa:9c:07:f9:ff: 71:a2:d3:08:7e:65:1a:3d:de:30:22:b4:13:67:d4: bd:e5:00:43:e5:af:16:33:01:43:9c:be:fe:b0:60: f4:c3:ec:94:1d:70:8d:0c:e9:03:a0:f0:bb:19:7e: 0a:04:17:0f:86:c0:bb:b0:66:fd:54:91:44:2d:c4: 47:76:da:ec:e3:37:c9:bb:7e:28:7a:38:18:18:3b: 34:a3:db:dc:47:95:c3:2b:9d:95:fe:2d:bc:11:38: f1:d9:4a:6a:2c:ee:15:31:71:a7:84:e5:55:5c:bd: c1:8b:09:40:6a:9a:f5:02:f6:1d:b4:56:c5:0f:a5: fd:5c:3a:7b:84:9a:28:a2:07:6c:21:c6:10:87:c6: a2:a1:d3:b6:35:db:54:0b:91:69:4b:8a:42:e7:4a: 8a:3b:4b:a4:f0:93:f2:d3:2c:43:da:98:70:3f:00: 29:ea:35:08:f8:a8:bc:bf:c4:2e:8b:e5:83:74:c0: 2a:0f:2e:9c:03:d8:9c:26:60:17:24:77:a4:0d:cf: 4f:d8:bf:8a:3a:8f:3a:4f:b6:03:56:df:c6:1b:0e: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.60.0/24 IPv6: 2801:12:100::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271818 Signature Algorithm: sha256WithRSAEncryption c1:1a:0b:c3:74:ff:b5:5b:b9:eb:ad:41:b3:91:cb:24:46:68: 72:83:de:be:fd:b5:9f:b2:8a:ba:49:bb:ab:57:ea:d2:da:6e: ec:ca:72:98:bd:76:ec:28:0b:a4:0b:4e:e7:20:1d:95:13:b6: b1:55:50:44:77:4a:94:fb:ba:91:04:8c:8d:03:29:73:41:40: 54:59:c3:66:94:71:38:fa:b3:f4:a2:4a:1f:23:61:35:05:25: 9a:e9:fd:79:d5:10:ed:47:2b:02:d1:2b:92:b4:ef:15:f8:0f: 56:95:9d:69:b6:07:1f:55:bc:e8:d6:9b:83:21:67:9f:22:10: 42:4e:b7:88:48:f6:1d:c6:34:15:00:ed:b7:93:71:d5:7b:26: 26:3d:c3:ca:0b:f1:54:f8:8c:a1:c6:e2:be:ce:fb:d8:ba:d3: d2:66:10:d6:fc:6c:81:80:a7:1a:7c:6a:96:88:22:99:7a:b5: 21:66:88:ce:b0:ca:8a:5e:14:b6:17:a1:8c:ec:fa:7b:1c:47: 02:f7:7a:61:c5:b1:28:77:e0:ee:e4:f8:0e:94:4c:c1:25:a0: e2:c6:71:11:d4:55:98:95:e8:e8:ed:57:ce:8d:49:37:9a:05: 76:9f:85:61:77:d1:e1:12:b4:83:42:d4:d4:e4:6b:94:31:eb: 11:e3:e2:e9 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUGEYqBor0Q1u2t2cBx33qL+xB5WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODAwMDhaFw0yNTAzMDQxODA1MDhaMDMxMTAvBgNV BAMTKDVBN0ZFNDM1MEQyQTA5RTkxNjQ2QzBERTZDNEEzRkE2N0NFQkJCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD+6HKJUOVKhQB6cIFRAW36Mqs sFwvudI46f8f70iKccJETr2cmM2qnAf5/3Gi0wh+ZRo93jAitBNn1L3lAEPlrxYz AUOcvv6wYPTD7JQdcI0M6QOg8LsZfgoEFw+GwLuwZv1UkUQtxEd22uzjN8m7fih6 OBgYOzSj29xHlcMrnZX+LbwROPHZSmos7hUxcaeE5VVcvcGLCUBqmvUC9h20VsUP pf1cOnuEmiiiB2whxhCHxqKh07Y121QLkWlLikLnSoo7S6Twk/LTLEPamHA/ACnq NQj4qLy/xC6L5YN0wCoPLpwD2JwmYBckd6QNz0/Yv4o6jzpPtgNW38YbDoCtAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaf+Q1DSoJ6RZG wN5sSj+mfOu7PTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDg1QzI3MTRCNjZCQkFEMjREQThBOUVE NkYwNTE2RUEwQ0IwMjc1ODFBMzYwMzMzN0IxNDAyQjNDQTk0ODg3MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODVDMjcxNEI2NkJCQUQyNERBOEE5RUQ2RjA1MTZFQTBDQjAyNzU4MUEz NjAzMzM3QjE0MDJCM0NBOTQ4ODcwLzAvNUE3RkU0MzUwRDJBMDlFOTE2NDZDMERF NkM0QTNGQTY3Q0VCQkIzRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAtek8MA8EAgAC MAkDBwQoAQASAQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCXKMA0GCSqGSIb3 DQEBCwUAA4IBAQDBGgvDdP+1W7nrrUGzkcskRmhyg96+/bWfsoq6SburV+rS2m7s ynKYvXbsKAukC07nIB2VE7axVVBEd0qU+7qRBIyNAylzQUBUWcNmlHE4+rP0okof I2E1BSWa6f151RDtRysC0SuStO8V+A9WlZ1ptgcfVbzo1puDIWefIhBCTreISPYd xjQVAO23k3HVeyYmPcPKC/FU+IyhxuK+zvvYutPSZhDW/GyBgKcafGqWiCKZerUh ZojOsMqKXhS2F6GM7Pp7HEcC93phxbEod+Du5PgOlEzBJaDixnER1FWYlejo7VfO jUk3mgV2n4Vhd9HhErSDQtTU5GuUMesR4+Lp -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:50 2024 by rpki-client on console-ams.rpki-client.org