$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer File: ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer (raw, json) Hash identifier: nMi9+XdbdBQAI6rjikfltNYlsD2+yUpQT+XYegq/Gt0= Subject key identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0D2F663C3F3E3007450973FFFFE4212834F34ED5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:07:17 +0000 Certificate not after: Tue 04 Mar 2025 18:12:17 +0000 Subordinate resources: AS: 262157 IP: 200.14.83.0/24 IP: 2801:0:420::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2f:66:3c:3f:3e:30:07:45:09:73:ff:ff:e4:21:28:34:f3:4e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:07:17 2024 GMT Not After : Mar 4 18:12:17 2025 GMT Subject: CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:31:53:69:38:13:5f:2b:18:ad:08:e2:43: 97:aa:03:9d:03:ba:91:8f:54:99:6a:a1:20:2f:40: 5e:33:12:3f:11:b1:eb:57:50:bf:f7:03:78:c6:75: de:a4:3f:e8:09:62:4c:1a:d9:9d:2a:2b:20:ae:a9: e1:c7:28:98:65:4b:b4:ff:be:30:b0:99:05:cb:24: c6:ad:11:c8:ea:f0:1a:16:99:68:66:ee:89:fe:d8: f8:9f:a6:43:57:35:11:30:6b:8f:a9:f0:e8:f2:b3: 18:59:78:f5:bd:87:d2:c2:1f:e0:03:f8:0a:ae:94: 3d:f7:34:33:af:0a:c4:68:2a:a1:9d:6e:a8:27:26: 23:89:0b:93:55:64:01:06:da:2d:4c:ed:6b:8c:d8: 39:4a:6e:c3:71:60:36:24:81:73:ed:98:31:ed:95: 78:50:2f:bb:60:25:90:64:f4:e8:1b:0d:cd:11:29: f5:b0:35:39:d2:dd:c3:3b:16:83:94:75:7e:93:ff: 51:b7:94:cd:46:31:f7:89:a9:73:55:61:f7:86:77: 17:f4:9c:58:d1:aa:13:c6:69:3e:83:37:6b:75:4e: d2:f6:a3:cc:19:00:31:b1:1b:79:0f:3f:62:eb:de: b5:06:81:ab:12:4f:9a:c9:2d:4a:0b:43:7e:f6:b0: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.14.83.0/24 IPv6: 2801:0:420::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262157 Signature Algorithm: sha256WithRSAEncryption 7f:b6:c6:82:76:58:e4:13:79:ba:d1:a3:f6:0a:e5:5f:a3:cb: e5:82:78:54:62:ec:f4:52:29:11:0f:de:23:e7:71:a5:0e:65: 48:2d:81:39:a0:05:e6:e1:ca:90:ac:23:bb:79:00:c5:37:0b: cf:1d:28:65:15:87:27:bd:d8:1e:ab:7a:b3:dc:44:3b:ad:f9: 7c:cb:67:4e:1d:af:22:24:a6:69:13:56:bd:11:de:5c:38:ae: bc:93:0d:f1:f8:3e:ac:ff:db:00:a8:98:55:47:28:ea:4f:2b: ca:fd:c5:71:63:4d:f9:60:4f:19:4a:4b:21:20:b7:04:2a:f0: 5a:31:6e:8e:39:4f:46:9f:ac:4f:fc:b5:c3:4a:f6:f1:47:42: 8d:08:6b:c1:31:b0:8e:41:b4:19:c9:46:fd:93:9c:06:ec:1f: 22:06:39:ec:17:34:72:07:06:f7:d7:cc:ec:f4:31:cc:20:01: ae:5c:e7:72:98:62:b3:9f:36:e2:67:b9:2d:f8:44:4d:32:51: a1:0b:eb:b9:72:cc:9c:83:04:36:eb:75:e2:f9:e5:da:ab:81: 76:94:e9:eb:05:41:7a:45:aa:8b:bd:b4:7f:a9:d6:7e:c9:2b: e4:bd:36:b7:32:af:a7:ab:a3:dd:c3:3b:d9:2a:9d:76:e9:07: 10:58:40:6c -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUDS9mPD8+MAdFCXP//+QhKDTzTtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA3MTdaFw0yNTAzMDQxODEyMTdaMDMxMTAvBgNV BAMTKEFCQ0E1QkZFODAzNzFENzRDODU4ODVGMzZBQTk3QkE2OThERkFFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6zFTaTgTXysYrQjiQ5eqA50D upGPVJlqoSAvQF4zEj8RsetXUL/3A3jGdd6kP+gJYkwa2Z0qKyCuqeHHKJhlS7T/ vjCwmQXLJMatEcjq8BoWmWhm7on+2PifpkNXNREwa4+p8OjysxhZePW9h9LCH+AD +AqulD33NDOvCsRoKqGdbqgnJiOJC5NVZAEG2i1M7WuM2DlKbsNxYDYkgXPtmDHt lXhQL7tgJZBk9OgbDc0RKfWwNTnS3cM7FoOUdX6T/1G3lM1GMfeJqXNVYfeGdxf0 nFjRqhPGaT6DN2t1TtL2o8wZADGxG3kPP2Lr3rUGgasST5rJLUoLQ372sINvAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSrylv+gDcddMhY hfNqqXummN+uAjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjYzQkJBOERBMUMxQjhEOTRBMThDM0Y5 QTM5QkYyOUVGNzZCMDQ5OUYyQUVCN0FFRUJFMDc2QUJDNDdGRTREOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNjNCQkE4REExQzFCOEQ5NEExOEMzRjlBMzlCRjI5RUY3NkIwNDk5RjJB RUI3QUVFQkUwNzZBQkM0N0ZFNEQ4LzAvQUJDQTVCRkU4MDM3MUQ3NEM4NTg4NUYz NkFBOTdCQTY5OERGQUUwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyA5TMA8EAgAC MAkDBwAoAQAABCAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAANMA0GCSqGSIb3 DQEBCwUAA4IBAQB/tsaCdljkE3m60aP2CuVfo8vlgnhUYuz0UikRD94j53GlDmVI LYE5oAXm4cqQrCO7eQDFNwvPHShlFYcnvdgeq3qz3EQ7rfl8y2dOHa8iJKZpE1a9 Ed5cOK68kw3x+D6s/9sAqJhVRyjqTyvK/cVxY035YE8ZSkshILcEKvBaMW6OOU9G n6xP/LXDSvbxR0KNCGvBMbCOQbQZyUb9k5wG7B8iBjnsFzRyBwb318zs9DHMIAGu XOdymGKznzbiZ7kt+ERNMlGhC+u5csycgwQ263Xi+eXaq4F2lOnrBUF6RaqLvbR/ qdZ+ySvkvTa3Mq+nq6PdwzvZKp126QcQWEBs -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:52 2024 by rpki-client on console-ams.rpki-client.org