$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer File: B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer (raw, json) Hash identifier: wA7GNGgOPsY/d+Z8BhyIUd4eryiw5FvzTEEA5M4Rweg= Subject key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2EE3B0C22E5E60E1288C87D2B7AE129D6B58AD2A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:53:18 +0000 Certificate not after: Tue 04 Mar 2025 17:58:18 +0000 Subordinate resources: AS: 52295 IP: 190.211.244.0/22 IP: 2803:d410::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e3:b0:c2:2e:5e:60:e1:28:8c:87:d2:b7:ae:12:9d:6b:58:ad:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:53:18 2024 GMT Not After : Mar 4 17:58:18 2025 GMT Subject: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:d2:69:b6:9e:0c:8b:cf:6d:61:d3:d0:54: c4:61:eb:45:0b:ae:23:81:df:1c:07:15:a5:52:a4: d3:f3:f6:ba:64:c5:8d:ef:df:7e:50:71:2e:60:be: f4:e4:d7:2c:16:62:af:29:95:3e:8c:09:3e:cb:e8: 6f:a4:57:56:a4:94:11:af:c2:6f:4f:8f:1a:bd:43: 48:12:83:10:85:7b:5b:be:d0:e1:2a:66:3a:42:42: 42:57:03:0a:02:1c:28:b5:d6:84:c5:56:63:ae:7b: 37:ae:4f:d3:5b:63:ce:d3:46:82:b1:c4:17:0f:0c: 7a:bb:ee:de:c5:d6:95:eb:5f:4e:37:12:0a:78:aa: 0b:43:fb:13:67:38:a9:9f:bd:2a:36:eb:97:d7:37: fb:c0:8e:31:5c:aa:42:8b:21:b8:70:ab:e7:39:84: 11:da:2a:56:56:07:ea:0b:ae:0f:37:8e:74:52:18: f8:d6:fb:64:1b:1b:7b:db:e0:31:f3:59:de:d7:7c: 22:26:64:1f:18:a8:44:01:e3:93:48:b1:58:eb:57: 82:62:6f:4f:11:1f:b9:ee:d5:6d:88:27:51:72:fe: ca:06:21:bf:5d:6d:e0:4b:c2:ef:1a:bb:b7:65:b5: bc:5c:c4:e7:da:72:f1:05:69:a5:f9:a9:a7:2c:93: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.211.244.0/22 IPv6: 2803:d410::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52295 Signature Algorithm: sha256WithRSAEncryption 20:94:d0:37:d6:8a:14:c5:b1:62:e6:37:2f:6d:17:1c:45:c6: f5:1f:d2:3c:54:2c:e1:29:ce:3d:93:ed:61:9d:0c:8c:4d:13: ba:f6:d6:96:ce:38:86:ad:2a:59:6b:e8:54:d8:2f:65:04:fe: 15:db:8a:32:eb:09:fd:3b:eb:2c:67:90:ec:6e:30:a4:94:2f: ad:18:3a:5f:a5:20:01:95:9a:8f:9d:29:50:9e:6c:98:6d:5a: 55:9b:f3:2b:f8:82:65:a7:c4:a8:c5:8a:44:a4:c2:ad:e1:ac: e6:6a:78:f9:0e:b6:72:71:17:13:e5:fa:9e:fa:9b:8d:69:63: f9:d8:c5:1f:51:a4:36:92:86:55:bd:a0:8a:c8:15:5b:f5:07: 5e:3b:06:1c:b1:1b:26:df:08:66:d4:21:2f:51:3b:5e:e3:54: 96:3c:7b:07:c7:3e:67:d2:99:87:8e:6b:ba:bc:38:d4:15:04: 5c:a1:36:4f:1b:d2:20:07:cc:97:d8:5e:1f:48:0e:32:53:d9: 66:0b:7c:05:c7:3d:a6:f6:33:b8:17:7c:2e:16:a0:bf:bd:3e: ef:0b:9b:f4:a9:f2:56:c1:18:c0:91:9f:48:96:97:92:a2:df: 1c:16:4b:24:bd:dd:86:89:0b:b6:e9:15:00:6c:97:fd:ea:f6: 06:ab:20:04 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULuOwwi5eYOEojIfSt64SnWtYrSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUzMThaFw0yNTAzMDQxNzU4MThaMDMxMTAvBgNV BAMTKEIwNzczNTlDNDIxMEQ5NEZCQkU1M0VBOEEzODVDNDRGOERFM0EyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rNJptp4Mi89tYdPQVMRh60UL riOB3xwHFaVSpNPz9rpkxY3v335QcS5gvvTk1ywWYq8plT6MCT7L6G+kV1aklBGv wm9Pjxq9Q0gSgxCFe1u+0OEqZjpCQkJXAwoCHCi11oTFVmOuezeuT9NbY87TRoKx xBcPDHq77t7F1pXrX043Egp4qgtD+xNnOKmfvSo265fXN/vAjjFcqkKLIbhwq+c5 hBHaKlZWB+oLrg83jnRSGPjW+2QbG3vb4DHzWd7XfCImZB8YqEQB45NIsVjrV4Ji b08RH7nu1W2IJ1Fy/soGIb9dbeBLwu8au7dltbxcxOfacvEFaaX5qacskzibAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwdzWcQhDZT7vl PqijhcRPjeOibDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEUxMjJGQUYxNzMwQjg2MjNEOTk5RkIz MzhEQ0QyQUU5NzkzNDRCQkUxRDU0QjRBMTcwOUMwMDM1RjczRjg0OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRTEyMkZBRjE3MzBCODYyM0Q5OTlGQjMzOERDRDJBRTk3OTM0NEJCRTFE NTRCNEExNzA5QzAwMzVGNzNGODQ4LzAvQjA3NzM1OUM0MjEwRDk0RkJCRTUzRUE4 QTM4NUM0NEY4REUzQTI2Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvtP0MA0EAgAC MAcDBQAoA9QQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMRzANBgkqhkiG9w0B AQsFAAOCAQEAIJTQN9aKFMWxYuY3L20XHEXG9R/SPFQs4SnOPZPtYZ0MjE0TuvbW ls44hq0qWWvoVNgvZQT+FduKMusJ/TvrLGeQ7G4wpJQvrRg6X6UgAZWaj50pUJ5s mG1aVZvzK/iCZafEqMWKRKTCreGs5mp4+Q62cnEXE+X6nvqbjWlj+djFH1GkNpKG Vb2gisgVW/UHXjsGHLEbJt8IZtQhL1E7XuNUljx7B8c+Z9KZh45rurw41BUEXKE2 TxvSIAfMl9heH0gOMlPZZgt8Bcc9pvYzuBd8Lhagv70+7wub9KnyVsEYwJGfSJaX kqLfHBZLJL3dhokLtukVAGyX/er2BqsgBA== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:57 2024 by rpki-client on console-fra.rpki-client.org