$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer File: 6655CE56746240FF392030404FA2DF5D579EA84E.cer (raw, json) Hash identifier: KO2a5mytTgWeGTwjltMMbv+/df7bjLAZovh2qEiY+i0= Subject key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2AE09BDF0E670493316A0C47A9BAF1CA8700F449 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:12:35 +0000 Certificate not after: Tue 04 Mar 2025 18:17:35 +0000 Subordinate resources: AS: 27925 IP: 181.42.0.0/15 IP: 186.9.0.0 -- 186.11.255.255 IP: 186.37.0.0/16 IP: 190.91.0.0/16 IP: 200.63.56.0/21 IP: 2800:330::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e0:9b:df:0e:67:04:93:31:6a:0c:47:a9:ba:f1:ca:87:00:f4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:12:35 2024 GMT Not After : Mar 4 18:17:35 2025 GMT Subject: CN=6655CE56746240FF392030404FA2DF5D579EA84E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:e1:dc:d1:61:7f:e3:82:22:bb:3d:d8:3c: 3a:21:fd:72:7e:ed:79:a7:a7:77:58:5e:4f:2f:03: 2c:36:ba:e2:40:f2:15:ea:9f:bb:17:4a:f5:5c:91: 81:1c:91:54:c3:9a:2e:84:03:bc:c4:16:3a:f2:27: 34:bc:09:2d:0e:06:42:36:ef:41:f6:a4:9f:83:a6: 71:53:df:7f:b4:c7:ab:59:10:84:4c:c0:13:7c:9d: ba:d2:04:c1:03:2a:1d:04:af:fb:97:98:b7:68:07: a7:8e:d9:22:51:5c:59:32:71:9e:f0:23:dd:e2:8e: f1:b6:a8:df:42:bc:58:f2:76:52:73:44:e4:55:b5: d1:70:2d:fc:f6:65:7a:87:2b:ca:71:a5:35:3b:00: 04:8d:04:3c:6e:7d:6b:38:98:e4:5f:cb:3d:78:74: 15:39:98:6c:41:96:7e:3d:de:60:1a:fb:5a:b4:eb: a0:9d:a6:93:5f:31:fd:ec:ae:ce:f6:b8:1a:c7:f7: 61:59:cb:44:65:18:6b:b2:44:66:55:2f:7c:42:0c: 94:94:b1:a9:2c:c7:46:9c:19:d9:56:4a:1d:ba:da: 46:2d:ff:16:1d:c8:1c:f1:8c:61:0a:20:1f:b9:8e: 09:9d:4d:4c:11:c8:43:ff:fc:41:79:0a:8d:bc:a6: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.42.0.0/15 186.9.0.0-186.11.255.255 186.37.0.0/16 190.91.0.0/16 200.63.56.0/21 IPv6: 2800:330::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27925 Signature Algorithm: sha256WithRSAEncryption 1d:5b:62:cc:81:a6:04:0f:83:d3:b2:10:f8:31:d4:4f:e2:65: 5e:79:8e:2c:49:da:34:af:07:3b:6c:5e:3b:64:48:b1:bb:9b: 55:b9:1b:c0:d9:2d:6b:ce:a0:03:5c:80:69:79:aa:09:6b:8a: 2b:b8:0f:49:2e:05:63:07:8d:dd:8d:4e:4e:25:40:b8:0a:1c: 2c:c0:5d:51:70:27:bb:e4:f9:a6:88:a3:d7:15:6a:5c:50:22: 44:ae:a0:7f:ab:80:59:f2:a4:85:8b:5a:77:63:03:26:b7:5a: 34:70:5c:c3:43:30:a1:be:2f:08:5c:a5:76:41:3f:86:6e:49: de:ab:58:4b:d5:9e:df:e6:7f:4b:8d:a1:c9:91:7a:81:50:03: 89:e4:b7:c9:88:52:05:51:99:4d:3b:91:60:de:a4:4f:aa:13: c5:5b:3b:b7:2a:4e:6f:af:9a:8c:3c:e3:3d:92:a4:06:ef:45: 67:8a:ad:6c:03:2b:1b:4d:cd:d2:0f:75:58:e5:ff:af:a8:42: df:2a:eb:e6:54:de:bb:d5:ab:94:f6:0e:a2:90:5e:38:3d:0a: ba:25:e2:3e:ca:6f:3a:ae:57:49:8a:9b:3d:44:ae:e0:67:2c: b0:00:46:68:29:04:a4:c9:94:dc:0b:a7:a5:5b:73:a7:75:2a: c4:16:58:02 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUKuCb3w5nBJMxagxHqbrxyocA9EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODEyMzVaFw0yNTAzMDQxODE3MzVaMDMxMTAvBgNV BAMTKDY2NTVDRTU2NzQ2MjQwRkYzOTIwMzA0MDRGQTJERjVENTc5RUE4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32eHc0WF/44Iiuz3YPDoh/XJ+ 7Xmnp3dYXk8vAyw2uuJA8hXqn7sXSvVckYEckVTDmi6EA7zEFjryJzS8CS0OBkI2 70H2pJ+DpnFT33+0x6tZEIRMwBN8nbrSBMEDKh0Er/uXmLdoB6eO2SJRXFkycZ7w I93ijvG2qN9CvFjydlJzRORVtdFwLfz2ZXqHK8pxpTU7AASNBDxufWs4mORfyz14 dBU5mGxBln493mAa+1q066CdppNfMf3srs72uBrH92FZy0RlGGuyRGZVL3xCDJSU saksx0acGdlWSh262kYt/xYdyBzxjGEKIB+5jgmdTUwRyEP//EF5Co28phNRAgMB AAGjggPJMIIDxTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmVc5WdGJA/zkg MEBPot9dV56oTjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4 QzREOEIwQzdCM0JBOTJGMDQ0QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0IzQkE5MkYwNDRB MEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQw NEZBMkRGNUQ1NzlFQTg0RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAnBAIAATAhAwMBtSowCgMDALoJ AwMCuggDAwC6JQMDAL5bAwQDyD84MA0EAgACMAcDBQAoAAMwMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm0VMA0GCSqGSIb3DQEBCwUAA4IBAQAdW2LMgaYED4PTshD4 MdRP4mVeeY4sSdo0rwc7bF47ZEixu5tVuRvA2S1rzqADXIBpeaoJa4oruA9JLgVj B43djU5OJUC4ChwswF1RcCe75PmmiKPXFWpcUCJErqB/q4BZ8qSFi1p3YwMmt1o0 cFzDQzChvi8IXKV2QT+Gbkneq1hL1Z7f5n9LjaHJkXqBUAOJ5LfJiFIFUZlNO5Fg 3qRPqhPFWzu3Kk5vr5qMPOM9kqQG70Vniq1sAysbTc3SD3VY5f+vqELfKuvmVN67 1auU9g6ikF44PQq6JeI+ym86rldJips9RK7gZyywAEZoKQSkyZTcC6elW3OndSrE FlgC -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:51 2024 by rpki-client on console-ams.rpki-client.org