$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer File: 87919A3C59C067523C21EF70A596F0B7F9C09798.cer (raw, json) Hash identifier: /Wxlp6FVt2sm8xHRAt04eUyd1BsKI2w3VegZ4CVElW4= Subject key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6B618E54920405ABD7E22CFCCAE7284674142E21 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:46:15 +0000 Certificate not after: Tue 04 Mar 2025 17:51:15 +0000 Subordinate resources: AS: 269806 IP: 45.186.4.0/22 IP: 2803:6b60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:61:8e:54:92:04:05:ab:d7:e2:2c:fc:ca:e7:28:46:74:14:2e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:46:15 2024 GMT Not After : Mar 4 17:51:15 2025 GMT Subject: CN=87919A3C59C067523C21EF70A596F0B7F9C09798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:e5:9c:b2:d1:e1:d0:52:01:32:f9:63:27: 85:7b:4c:a1:32:6b:e1:73:94:e7:ea:7a:72:a8:8f: f3:76:c8:cc:41:4b:5e:2c:43:1b:53:06:3d:20:89: 4b:6e:d3:0e:8c:61:cb:68:2b:2c:7d:e5:90:8f:ba: f7:d4:1f:07:bc:6c:0a:22:60:a0:49:95:c4:e3:e4: 5c:81:76:df:16:94:96:ce:a8:da:a0:63:fd:2b:34: 13:30:42:04:81:14:59:71:00:45:5e:3a:f9:27:65: 53:50:64:ad:4f:e5:6d:14:1f:30:19:14:1e:46:e2: 65:63:b4:d9:5c:30:84:35:d0:05:2e:6e:7e:07:09: 6d:2f:d9:25:8c:44:f9:e3:a0:84:95:5b:60:71:d8: d5:67:87:4b:e4:55:1d:7b:6f:51:24:d0:fa:14:3d: ea:bb:7d:f7:06:1b:a8:5a:a9:78:33:94:22:70:ef: ea:d7:3d:0e:f5:1a:c1:f8:52:f8:84:c1:6f:1b:6e: 11:2a:04:79:d9:43:92:f0:97:86:b2:e1:42:c0:a7: 55:a0:89:b4:ee:c4:8b:8d:56:61:55:a8:c9:c8:c3: 29:6d:43:97:a9:ee:50:47:34:e0:66:a3:86:6e:20: 0a:76:94:e6:41:90:74:8a:25:8e:42:53:42:73:a7: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.4.0/22 IPv6: 2803:6b60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269806 Signature Algorithm: sha256WithRSAEncryption d2:a4:31:f9:7b:92:40:52:e8:a8:a0:0c:7b:fa:46:ce:d2:85: a7:f8:02:89:e8:2d:5c:28:4f:08:01:c5:99:25:9c:39:e6:15: 61:30:18:5f:84:bd:28:48:51:b1:8c:88:c8:7d:0c:2a:6e:59: 2e:f2:9d:50:1c:99:2b:8f:06:a9:7f:ee:de:06:f1:df:8f:9d: 4c:49:69:93:cd:58:54:aa:3b:c1:82:46:e4:d6:d3:21:23:03: 7f:3d:80:2e:e0:8c:8b:75:6d:ee:94:27:2e:9f:ce:43:77:86: e7:54:5e:7f:95:e6:66:cd:43:00:86:15:a8:21:01:a1:94:b4: a3:53:31:56:06:87:4f:d2:58:4b:ca:79:97:ea:a0:53:9c:36: 93:6f:43:53:7d:cb:55:b9:52:32:6d:a7:2b:6b:e0:bd:f0:fd: 82:cf:62:f9:08:a3:ca:65:f6:e5:1e:ce:94:7c:c2:7b:b9:ba: b1:c0:78:c9:dd:00:3e:a3:b0:11:54:3b:96:a2:fa:ae:58:44: 97:68:a7:47:30:be:7a:03:c2:cd:a6:08:91:9a:00:fb:cf:f5: 1b:ff:72:f0:40:57:63:4e:aa:d0:b4:8a:64:ff:0e:58:97:83: 70:9e:1d:d7:81:0b:4d:98:3d:a5:d6:ec:28:55:d7:23:0a:94: b0:46:4d:5a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUa2GOVJIEBavX4iz8yucoRnQULiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ2MTVaFw0yNTAzMDQxNzUxMTVaMDMxMTAvBgNV BAMTKDg3OTE5QTNDNTlDMDY3NTIzQzIxRUY3MEE1OTZGMEI3RjlDMDk3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9uWcstHh0FIBMvljJ4V7TKEy a+FzlOfqenKoj/N2yMxBS14sQxtTBj0giUtu0w6MYctoKyx95ZCPuvfUHwe8bAoi YKBJlcTj5FyBdt8WlJbOqNqgY/0rNBMwQgSBFFlxAEVeOvknZVNQZK1P5W0UHzAZ FB5G4mVjtNlcMIQ10AUubn4HCW0v2SWMRPnjoISVW2Bx2NVnh0vkVR17b1Ek0PoU Peq7ffcGG6haqXgzlCJw7+rXPQ71GsH4UviEwW8bbhEqBHnZQ5Lwl4ay4ULAp1Wg ibTuxIuNVmFVqMnIwyltQ5ep7lBHNOBmo4ZuIAp2lOZBkHSKJY5CU0JzpysxAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHkZo8WcBnUjwh 73CllvC3+cCXmDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUYzRjk0MkFDNEJCNTM0RDUzNERGMzcz OTM3NzA3RjFGQzBCQThFN0RDMTI2N0VBNDk4QTQyMUM2RkUzQzcyRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FRjNGOTQyQUM0QkI1MzRENTM0REYzNzM5Mzc3MDdGMUZDMEJBOEU3REMx MjY3RUE0OThBNDIxQzZGRTNDNzJFLzAvODc5MTlBM0M1OUMwNjc1MjNDMjFFRjcw QTU5NkYwQjdGOUMwOTc5OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLboEMA0EAgAC MAcDBQAoA2tgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd7jANBgkqhkiG9w0B AQsFAAOCAQEA0qQx+XuSQFLoqKAMe/pGztKFp/gCiegtXChPCAHFmSWcOeYVYTAY X4S9KEhRsYyIyH0MKm5ZLvKdUByZK48GqX/u3gbx34+dTElpk81YVKo7wYJG5NbT ISMDfz2ALuCMi3Vt7pQnLp/OQ3eG51Ref5XmZs1DAIYVqCEBoZS0o1MxVgaHT9JY S8p5l+qgU5w2k29DU33LVblSMm2nK2vgvfD9gs9i+QijymX25R7OlHzCe7m6scB4 yd0APqOwEVQ7lqL6rlhEl2inRzC+egPCzaYIkZoA+8/1G/9y8EBXY06q0LSKZP8O WJeDcJ4d14ELTZg9pdbsKFXXIwqUsEZNWg== -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:51 2024 by rpki-client on console-ams.rpki-client.org