$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73105CE27FB18C38E17C61063229FF66A2F65190.cer File: 73105CE27FB18C38E17C61063229FF66A2F65190.cer (raw, json) Hash identifier: dcu4KNznKZINQffNeXxknQe2GmCEmEJmnOEtIEvfKK8= Subject key identifier: 73:10:5C:E2:7F:B1:8C:38:E1:7C:61:06:32:29:FF:66:A2:F6:51:90 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5D529921A3E5A97C3E83DF5553F13FE0BD8C6FBE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/73105CE27FB18C38E17C61063229FF66A2F65190.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:49:56 +0000 Certificate not after: Tue 04 Mar 2025 17:54:56 +0000 Subordinate resources: AS: 264800 IP: 170.79.180.0/22 IP: 2803:64c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:52:99:21:a3:e5:a9:7c:3e:83:df:55:53:f1:3f:e0:bd:8c:6f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:49:56 2024 GMT Not After : Mar 4 17:54:56 2025 GMT Subject: CN=73105CE27FB18C38E17C61063229FF66A2F65190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:44:10:61:51:24:24:7a:02:5f:38:3f:44: 9c:55:7d:0f:2c:90:c8:6b:50:a0:e9:9a:60:ea:27: 65:95:04:e8:9e:70:01:39:28:4a:49:ac:eb:1f:bc: b2:f8:42:ad:ca:73:55:17:9b:e5:59:a0:8d:d8:27: 5a:09:c8:91:e4:0e:37:d4:f3:97:2f:1e:1e:bb:1b: 74:a9:89:8b:ff:ba:b5:c6:0d:b3:e9:c6:94:39:af: b0:5b:ea:a1:58:a9:df:42:f5:1d:d1:b5:1c:10:96: c6:e8:2b:73:11:7b:60:87:fd:07:d6:a6:a4:b9:9f: ea:cd:8c:33:01:4a:55:73:f2:91:a1:83:50:04:3a: 5d:ff:98:38:de:77:3a:92:f2:e1:ba:16:d6:63:7e: da:a7:40:bd:fb:b5:1b:8b:6b:f9:ea:06:f6:94:0f: e8:9d:d1:78:ea:a9:8b:96:b9:06:c4:6c:77:15:23: 14:df:25:2c:fd:c8:b8:a2:af:a4:d5:2f:f7:62:9e: c1:6c:8b:47:63:92:d2:36:64:3e:2c:7e:0b:40:71: 90:8b:67:4f:35:83:d6:dd:96:04:6d:55:3d:03:7d: f9:23:d3:17:5c:a3:5b:5e:77:d7:14:fc:d2:a0:46: 41:4d:29:e8:a2:cc:9b:3b:0f:b4:e9:64:57:05:b7: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:10:5C:E2:7F:B1:8C:38:E1:7C:61:06:32:29:FF:66:A2:F6:51:90 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/73105CE27FB18C38E17C61063229FF66A2F65190.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.180.0/22 IPv6: 2803:64c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264800 Signature Algorithm: sha256WithRSAEncryption e4:3c:ad:0a:d8:4d:88:9b:ca:71:e7:74:83:49:2c:5e:8d:b5: e0:26:3b:7d:79:b9:2e:a9:73:0e:74:92:12:95:fd:81:2c:fd: 12:61:7d:7a:8e:6c:58:56:70:79:3b:be:62:3d:a6:4b:5d:2a: bc:bd:02:aa:89:04:e3:ea:07:fb:7a:42:b4:63:62:de:b5:89: d0:d7:49:57:02:6e:36:6b:24:d0:c8:4a:cd:93:ee:1e:b1:94: 0d:d5:19:55:b9:d1:c1:c9:e0:94:74:36:9f:65:47:e5:d4:23: 29:98:ea:fd:ac:44:73:00:12:99:3f:d2:d9:81:94:d8:46:2d: 0b:4d:45:86:8d:06:2d:f1:7b:f3:df:12:8d:07:9e:56:d4:7a: 2c:94:e1:88:08:9d:e8:52:38:8c:d1:13:42:df:5f:31:4d:93: f0:0f:f5:0b:2f:bc:31:4b:fe:76:01:c7:a4:63:38:54:99:59: 67:cf:86:09:b4:84:64:b1:af:5c:4b:64:38:31:e5:f6:7f:a7: 29:4f:7f:b9:f6:c7:7c:2e:31:60:56:c3:a1:05:40:6c:9c:c2: 83:0f:6b:9c:6e:99:ba:f4:45:29:92:a4:6f:b3:46:c5:38:aa: 36:91:a8:f6:68:fc:39:68:7f:35:72:f8:03:76:99:7c:a1:78: 4a:93:b3:48 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXVKZIaPlqXw+g99VU/E/4L2Mb74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ5NTZaFw0yNTAzMDQxNzU0NTZaMDMxMTAvBgNV BAMTKDczMTA1Q0UyN0ZCMThDMzhFMTdDNjEwNjMyMjlGRjY2QTJGNjUxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXEQQYVEkJHoCXzg/RJxVfQ8s kMhrUKDpmmDqJ2WVBOiecAE5KEpJrOsfvLL4Qq3Kc1UXm+VZoI3YJ1oJyJHkDjfU 85cvHh67G3SpiYv/urXGDbPpxpQ5r7Bb6qFYqd9C9R3RtRwQlsboK3MRe2CH/QfW pqS5n+rNjDMBSlVz8pGhg1AEOl3/mDjedzqS8uG6FtZjftqnQL37tRuLa/nqBvaU D+id0XjqqYuWuQbEbHcVIxTfJSz9yLiir6TVL/dinsFsi0djktI2ZD4sfgtAcZCL Z081g9bdlgRtVT0Dffkj0xdco1ted9cU/NKgRkFNKeiizJs7D7TpZFcFt8oXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzEFzif7GMOOF8 YQYyKf9movZRkDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzkyOEE2Qzk5NkZDNkNEQjU4NkQ1RkZD OEZGQUU1NkE5OTBCNTU2RTQxMjZGQTRBRjNBRTFBMjc4RkMwRDJBNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zOTI4QTZDOTk2RkM2Q0RCNTg2RDVGRkM4RkZBRTU2QTk5MEI1NTZFNDEy NkZBNEFGM0FFMUEyNzhGQzBEMkE1LzAvNzMxMDVDRTI3RkIxOEMzOEUxN0M2MTA2 MzIyOUZGNjZBMkY2NTE5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqk+0MA0EAgAC MAcDBQAoA2TAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKYDANBgkqhkiG9w0B AQsFAAOCAQEA5DytCthNiJvKced0g0ksXo214CY7fXm5LqlzDnSSEpX9gSz9EmF9 eo5sWFZweTu+Yj2mS10qvL0CqokE4+oH+3pCtGNi3rWJ0NdJVwJuNmsk0MhKzZPu HrGUDdUZVbnRwcnglHQ2n2VH5dQjKZjq/axEcwASmT/S2YGU2EYtC01Fho0GLfF7 898SjQeeVtR6LJThiAid6FI4jNETQt9fMU2T8A/1Cy+8MUv+dgHHpGM4VJlZZ8+G CbSEZLGvXEtkODHl9n+nKU9/ufbHfC4xYFbDoQVAbJzCgw9rnG6ZuvRFKZKkb7NG xTiqNpGo9mj8OWh/NXL4A3aZfKF4SpOzSA== -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:51 2024 by rpki-client on console-ams.rpki-client.org