$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer File: A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.cer (raw, json) Hash identifier: ZgPcmdIcufd/v1cp1fXvnl7td5yyARQyMbN4VzzmbSU= Subject key identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 71EF1C506C08F78AB8BD4B87AEA7E35A3D7F6770 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:55:17 +0000 Certificate not after: Tue 04 Mar 2025 18:00:17 +0000 Subordinate resources: AS: 271826 IP: 2801:1e6::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ef:1c:50:6c:08:f7:8a:b8:bd:4b:87:ae:a7:e3:5a:3d:7f:67:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:55:17 2024 GMT Not After : Mar 4 18:00:17 2025 GMT Subject: CN=A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:6c:bc:81:b4:d5:f8:c5:e0:5b:32:0c:84: 14:89:aa:82:a5:fe:fc:89:81:57:19:d7:05:58:16: b4:8a:e0:db:1e:5a:7a:f0:11:a8:36:b1:21:ed:d5: af:71:ce:6c:8d:83:ca:d3:d1:fe:fa:7b:8d:99:f5: 3b:d8:d2:95:b7:ef:8d:31:ec:c4:44:bc:4d:87:1d: 31:38:70:bf:b9:e0:a8:11:d5:df:c8:19:68:1c:a5: 79:c4:74:1a:c8:49:6d:f2:02:5d:9a:b5:1a:8f:95: 1d:29:dd:40:b9:09:f0:08:39:42:7b:0b:65:96:02: 48:89:a1:8a:1b:e1:b3:b1:24:df:64:32:d3:da:73: dc:38:d5:2a:cf:b2:90:6d:37:8b:df:04:a4:cc:d2: 04:9c:4f:eb:03:cc:44:43:d7:cf:0a:cb:80:97:6e: 1a:ce:d2:13:17:22:98:77:72:d6:e0:28:49:59:d5: 7f:94:6e:78:44:48:6b:27:2d:98:24:f9:f6:a3:c0: 94:5d:06:4f:82:bd:a0:9c:b4:5b:a5:eb:f7:89:75: 2f:e2:4d:85:97:03:7b:e8:92:1a:41:2c:a2:df:45: 88:0f:dc:1a:77:2d:12:31:d2:33:1a:1e:e4:53:23: 35:91:6d:ae:93:8e:9d:c0:61:40:a9:d2:ae:95:11: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:FF:2D:4F:4E:DF:D2:1B:3C:64:71:DD:71:AD:A6:01:76:FC:80:ED X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6F4F140D6E4683A9647618C3CAF81FE081E709FF9FCAE46347E7281AA87E32AC/0/A4FF2D4F4EDFD21B3C6471DD71ADA60176FC80ED.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e6::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271826 Signature Algorithm: sha256WithRSAEncryption 8a:48:3d:00:62:89:ae:cc:81:38:8d:65:c6:8d:a7:55:2a:33: 1a:3f:a3:f5:13:4a:43:cb:ad:a5:aa:dd:02:81:eb:ad:0b:ee: db:49:d6:ad:1e:33:75:9c:95:bd:ab:2b:60:42:11:45:22:b7: e7:4a:78:0d:48:5c:9d:92:bd:74:b0:ec:5f:f7:0f:d6:9a:64: b1:72:06:4e:d5:92:9e:b5:ca:08:ca:a3:f0:52:c5:eb:20:cf: 31:18:41:99:17:87:64:cd:4b:c3:fb:f6:ef:39:41:67:80:62: 26:66:5f:e4:22:e0:a5:d2:62:84:4e:eb:f0:db:04:ea:f2:87: 0b:ec:b8:40:47:9b:0b:0d:87:d5:78:11:a7:f1:4a:3b:67:2a: a9:72:79:a5:98:61:0f:ee:26:d6:18:37:50:35:f2:7b:f8:51: 13:80:bd:81:6e:f5:e3:13:cf:68:c0:e6:54:52:b7:9e:14:8c: e8:0c:38:a4:64:a1:f0:09:a5:93:c6:b9:e7:a7:c2:d7:ab:cd: cf:4e:41:b2:1e:f9:87:33:b9:c6:31:35:86:aa:9d:2e:e9:3f: f3:40:f5:9d:c0:16:cb:14:10:ba:7c:83:80:2d:bc:93:a5:03: 46:aa:2f:e3:cf:d5:16:53:1d:64:e1:27:73:47:ba:05:33:03: 75:af:b6:67 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUce8cUGwI94q4vUuHrqfjWj1/Z3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU1MTdaFw0yNTAzMDQxODAwMTdaMDMxMTAvBgNV BAMTKEE0RkYyRDRGNEVERkQyMUIzQzY0NzFERDcxQURBNjAxNzZGQzgwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXmy8gbTV+MXgWzIMhBSJqoKl /vyJgVcZ1wVYFrSK4NseWnrwEag2sSHt1a9xzmyNg8rT0f76e42Z9TvY0pW3740x 7MREvE2HHTE4cL+54KgR1d/IGWgcpXnEdBrISW3yAl2atRqPlR0p3UC5CfAIOUJ7 C2WWAkiJoYob4bOxJN9kMtPac9w41SrPspBtN4vfBKTM0gScT+sDzERD188Ky4CX bhrO0hMXIph3ctbgKElZ1X+UbnhESGsnLZgk+fajwJRdBk+CvaCctFul6/eJdS/i TYWXA3vokhpBLKLfRYgP3Bp3LRIx0jMaHuRTIzWRba6Tjp3AYUCp0q6VEURzAgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk/y1PTt/SGzxk cd1xraYBdvyA7TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkY0RjE0MEQ2RTQ2ODNBOTY0NzYxOEMz Q0FGODFGRTA4MUU3MDlGRjlGQ0FFNDYzNDdFNzI4MUFBODdFMzJBQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RjRGMTQwRDZFNDY4M0E5NjQ3NjE4QzNDQUY4MUZFMDgxRTcwOUZGOUZD QUU0NjM0N0U3MjgxQUE4N0UzMkFDLzAvQTRGRjJENEY0RURGRDIxQjNDNjQ3MURE NzFBREE2MDE3NkZDODBFRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEB5gAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl0jANBgkqhkiG9w0BAQsFAAOCAQEAikg9 AGKJrsyBOI1lxo2nVSozGj+j9RNKQ8utpardAoHrrQvu20nWrR4zdZyVvasrYEIR RSK350p4DUhcnZK9dLDsX/cP1ppksXIGTtWSnrXKCMqj8FLF6yDPMRhBmReHZM1L w/v27zlBZ4BiJmZf5CLgpdJihE7r8NsE6vKHC+y4QEebCw2H1XgRp/FKO2cqqXJ5 pZhhD+4m1hg3UDXye/hRE4C9gW714xPPaMDmVFK3nhSM6Aw4pGSh8Amlk8a556fC 16vNz05Bsh75hzO5xjE1hqqdLuk/80D1ncAWyxQQunyDgC28k6UDRqov48/VFlMd ZOEnc0e6BTMDda+2Zw== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:57 2024 by rpki-client on console-fra.rpki-client.org