$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer File: 87E86111F292762220D44761EC4E8B3C4F012F38.cer (raw, json) Hash identifier: gKHmTv7cJGh+qdeAY6t4rf2y3sJbVWjD/+yMNJ8Slrg= Subject key identifier: 87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 568A7E0A922EB69A0740D504436252C016363C61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:57:48 +0000 Certificate not after: Tue 04 Mar 2025 18:02:48 +0000 Subordinate resources: AS: 267885 IP: 45.177.16.0/22 IP: 2803:5a60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8a:7e:0a:92:2e:b6:9a:07:40:d5:04:43:62:52:c0:16:36:3c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:57:48 2024 GMT Not After : Mar 4 18:02:48 2025 GMT Subject: CN=87E86111F292762220D44761EC4E8B3C4F012F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:79:95:73:98:eb:da:26:b4:14:2d:99:34: ae:f0:66:7e:47:c7:56:70:99:2c:f0:f0:33:3b:a8: cb:da:b3:ac:13:64:94:22:46:69:dd:3c:15:3a:e5: d4:35:b9:5c:f5:a1:f9:9d:ac:89:dd:24:09:0d:72: f0:bb:e5:f9:d8:52:12:71:9e:df:18:01:e1:8a:0f: 62:e3:cc:4d:7c:96:f3:a0:c3:cc:00:18:ed:a7:82: 10:8b:64:73:f5:a9:83:ce:24:5a:01:05:c5:15:e8: 00:0e:63:d8:c8:16:b3:06:42:67:63:58:fd:58:d6: e7:1c:45:82:9f:19:cf:3c:21:bd:c8:75:ac:96:57: d7:09:ed:47:2e:5a:3a:2a:c0:69:46:1d:d0:ab:7e: a5:4c:3e:58:5f:07:8c:d1:55:3a:3a:2a:c8:e0:b7: 2a:93:bb:ad:1a:8e:f2:1e:28:0e:3b:a8:5c:11:49: 5f:68:47:71:56:c8:6e:b1:12:1c:ad:43:f1:b7:5a: 6d:c0:bc:1b:3d:39:72:58:4f:8c:58:af:27:10:9b: fa:ae:09:14:d4:ac:4c:49:5e:8b:2e:78:78:ed:c5: e0:f7:13:e5:4d:f1:21:06:cf:22:2e:66:49:70:73: c7:45:38:c4:b0:bb:04:a9:1b:ef:01:50:d4:6a:a6: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.16.0/22 IPv6: 2803:5a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267885 Signature Algorithm: sha256WithRSAEncryption c9:cf:b1:ea:3f:2f:5c:67:2c:65:65:76:6c:19:e2:1e:66:af: 9b:13:2e:bb:ce:f7:8b:2b:6a:74:8e:37:e1:da:8d:0b:47:d6: f1:4b:19:34:6d:c8:04:cd:eb:34:0b:5e:0b:25:4b:34:58:02: 9f:b1:89:86:37:8d:8a:9a:6b:09:b8:c3:ec:79:91:e4:f3:e2: af:0c:b5:8d:8b:f9:21:eb:1a:81:62:21:53:04:b2:48:61:ff: 1f:10:9b:e1:13:6d:4f:ed:10:e7:1a:89:ca:5b:85:ba:17:c0: 73:84:fc:7b:74:61:4a:04:45:d8:40:19:b6:fd:35:d7:f6:24: c4:99:ec:3e:b9:f2:d1:7d:88:89:09:fd:06:d5:84:a6:fc:25: cc:f3:a2:6e:d8:e8:9f:36:fa:04:8d:30:b5:13:78:3f:82:60: 2e:b5:21:0e:e9:5b:d5:01:2b:b6:ff:b7:b3:e1:8d:60:ed:d8: 15:8f:65:3b:0b:0a:50:78:3a:19:55:4b:ea:f5:fc:91:aa:0f: 96:bc:bd:2c:4e:84:22:0d:dc:a4:be:ae:14:43:08:14:5a:a4: b5:f4:79:15:1f:0d:77:b4:e7:1e:2f:cd:0c:24:9d:21:0d:71: ed:8b:75:1e:8e:46:16:31:d9:d3:9f:86:98:89:85:c1:c8:19: 28:0b:1d:a9 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVop+CpIutpoHQNUEQ2JSwBY2PGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU3NDhaFw0yNTAzMDQxODAyNDhaMDMxMTAvBgNV BAMTKDg3RTg2MTExRjI5Mjc2MjIyMEQ0NDc2MUVDNEU4QjNDNEYwMTJGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWnmVc5jr2ia0FC2ZNK7wZn5H x1ZwmSzw8DM7qMvas6wTZJQiRmndPBU65dQ1uVz1ofmdrIndJAkNcvC75fnYUhJx nt8YAeGKD2LjzE18lvOgw8wAGO2nghCLZHP1qYPOJFoBBcUV6AAOY9jIFrMGQmdj WP1Y1uccRYKfGc88Ib3IdayWV9cJ7UcuWjoqwGlGHdCrfqVMPlhfB4zRVTo6Ksjg tyqTu60ajvIeKA47qFwRSV9oR3FWyG6xEhytQ/G3Wm3AvBs9OXJYT4xYrycQm/qu CRTUrExJXosueHjtxeD3E+VN8SEGzyIuZklwc8dFOMSwuwSpG+8BUNRqpuvXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSH6GER8pJ2IiDU R2HsTos8TwEvODAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjQxOEE2REM1NDZEREUwNUQxNjBDRTg5 NDQ1MjBBNUVDN0NCMkUzRjJDNEYzNUUyM0RCOEYxRDBGQkFFNTREQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NDE4QTZEQzU0NkRERTA1RDE2MENFODk0NDUyMEE1RUM3Q0IyRTNGMkM0 RjM1RTIzREI4RjFEMEZCQUU1NERBLzAvODdFODYxMTFGMjkyNzYyMjIwRDQ0NzYx RUM0RThCM0M0RjAxMkYzOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbEQMA0EAgAC MAcDBQAoA1pgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWbTANBgkqhkiG9w0B AQsFAAOCAQEAyc+x6j8vXGcsZWV2bBniHmavmxMuu873iytqdI434dqNC0fW8UsZ NG3IBM3rNAteCyVLNFgCn7GJhjeNipprCbjD7HmR5PPirwy1jYv5IesagWIhUwSy SGH/HxCb4RNtT+0Q5xqJyluFuhfAc4T8e3RhSgRF2EAZtv011/YkxJnsPrny0X2I iQn9BtWEpvwlzPOibtjonzb6BI0wtRN4P4JgLrUhDulb1QErtv+3s+GNYO3YFY9l OwsKUHg6GVVL6vX8kaoPlry9LE6EIg3cpL6uFEMIFFqktfR5FR8Nd7TnHi/NDCSd IQ1x7Yt1Ho5GFjHZ05+GmImFwcgZKAsdqQ== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:56 2024 by rpki-client on console-fra.rpki-client.org