$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer File: D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer (raw, json) Hash identifier: 44b0ZqDfBLLM3YUF+mqCRxqyE+If6HIuBIg7zFy9+Ys= Subject key identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 32C8509F0AFDA4350383D6CD6EBAA9E158B7B390 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:58:25 +0000 Certificate not after: Tue 04 Mar 2025 18:03:25 +0000 Subordinate resources: AS: 267921 IP: 45.177.72.0 -- 45.177.74.255 IP: 2803:ce60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c8:50:9f:0a:fd:a4:35:03:83:d6:cd:6e:ba:a9:e1:58:b7:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:58:25 2024 GMT Not After : Mar 4 18:03:25 2025 GMT Subject: CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:bd:53:4b:4e:12:3f:14:27:7a:f5:ba:a1: 6e:42:77:95:8b:81:30:ce:b5:e1:09:5f:a2:42:85: 10:5a:b3:c3:e7:8c:4d:7c:ae:68:9f:69:b0:28:66: 30:03:77:b2:1e:b3:0b:da:66:6b:c4:a1:d5:58:ed: 7f:ff:86:2a:59:bf:fa:78:63:ba:38:a7:21:67:8b: 9a:ee:ea:bc:c0:f3:dd:43:b6:d9:b1:7f:1e:d6:58: 3f:6f:5f:ac:90:0d:9a:d0:b0:33:43:7d:41:1f:78: 62:5d:5c:4f:45:7b:f5:6b:e5:52:06:af:21:59:24: 9c:12:ce:ce:e0:d1:16:eb:ef:da:da:38:41:fc:79: 04:a6:ee:a5:9a:db:a8:ca:7f:e7:a9:46:30:c1:3b: dd:e4:b4:17:85:d3:31:02:d9:dd:cd:d4:df:7c:7c: bf:ad:e1:28:ee:df:c5:78:f4:f5:8a:35:b9:ba:3d: 51:92:26:08:f3:cc:ce:8d:74:ef:3b:69:0f:52:ff: 40:34:3c:91:74:cd:3f:b1:68:e4:cb:42:7f:7c:32: 5e:79:d4:9a:e7:da:6f:7b:d4:11:cf:56:7b:bb:40: d6:7c:3d:e0:74:22:96:a4:72:ff:cf:d5:2f:23:f6: 4c:4b:94:b8:7c:99:ac:3a:97:5c:d8:c8:1e:8e:ac: b0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.72.0-45.177.74.255 IPv6: 2803:ce60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267921 Signature Algorithm: sha256WithRSAEncryption 97:74:d7:fc:ee:3b:77:62:6d:6e:33:bb:f6:55:56:d6:f7:a9: 44:1e:a4:a2:05:9f:42:e3:9e:0a:b5:57:de:cc:cc:24:a9:42: 78:2e:71:7a:50:f2:26:de:16:f4:cd:22:31:87:31:dc:6f:46: 78:16:4f:d9:6b:42:66:f9:c9:8f:d3:19:b5:76:82:c8:61:58: 5a:85:b3:9f:54:8d:7e:bc:13:e1:ec:ab:7f:4c:64:3f:39:b9: 12:2b:9c:65:ac:85:d2:a2:6c:df:aa:83:f0:8a:15:6a:50:cd: 74:45:61:8a:87:73:e8:ce:48:52:61:be:ea:a5:00:61:e7:55: db:0c:d8:de:55:63:d0:a2:0e:f6:66:40:c7:04:02:35:e6:01: 6b:e3:62:13:be:fb:c2:8f:ee:6c:56:3d:d6:3e:28:86:63:00: 6e:2e:3c:a9:8a:74:76:56:af:00:6e:ff:fe:b1:29:2a:c4:7f: 4f:99:da:87:7e:62:aa:93:b2:14:aa:50:37:f4:d9:ce:f4:2c: b1:76:cf:09:6a:e5:71:93:18:eb:03:63:65:96:aa:fa:10:f5: c1:6c:e3:e0:74:c3:bb:e9:e0:eb:00:0a:5c:d6:ed:99:84:a4: 3e:84:68:8b:14:0e:ca:39:62:4f:ce:f9:a2:b5:e8:bc:6a:bc: 83:96:b5:2f -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUMshQnwr9pDUDg9bNbrqp4Vi3s5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU4MjVaFw0yNTAzMDQxODAzMjVaMDMxMTAvBgNV BAMTKEQ5MzFGRTQ0MjIyNDQyQkJERUREOEQ3Q0E0MkZEQUNGMUFCNzhBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1L1TS04SPxQnevW6oW5Cd5WL gTDOteEJX6JChRBas8PnjE18rmifabAoZjADd7IeswvaZmvEodVY7X//hipZv/p4 Y7o4pyFni5ru6rzA891Dttmxfx7WWD9vX6yQDZrQsDNDfUEfeGJdXE9Fe/Vr5VIG ryFZJJwSzs7g0Rbr79raOEH8eQSm7qWa26jKf+epRjDBO93ktBeF0zEC2d3N1N98 fL+t4Sju38V49PWKNbm6PVGSJgjzzM6NdO87aQ9S/0A0PJF0zT+xaOTLQn98Ml55 1Jrn2m971BHPVnu7QNZ8PeB0Ipakcv/P1S8j9kxLlLh8maw6l1zYyB6OrLC3AgMB AAGjggO3MIIDszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZMf5EIiRCu97d jXykL9rPGreKlDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQyMjA4QUMzMjk4RjhCRjFFRUI1RTlD NDE0MEYzNEVGRTM0NkM1Q0M2M0NCNjc4QjQ5RkEzRjc2Q0Q4MEJBNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RDIyMDhBQzMyOThGOEJGMUVFQjVFOUM0MTQwRjM0RUZFMzQ2QzVDQzYz Q0I2NzhCNDlGQTNGNzZDRDgwQkE0LzAvRDkzMUZFNDQyMjI0NDJCQkRFREQ4RDdD QTQyRkRBQ0YxQUI3OEE5NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMtsUgDBAAt sUowDQQCAAIwBwMFACgDzmAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBaRMA0G CSqGSIb3DQEBCwUAA4IBAQCXdNf87jt3Ym1uM7v2VVbW96lEHqSiBZ9C454KtVfe zMwkqUJ4LnF6UPIm3hb0zSIxhzHcb0Z4Fk/Za0Jm+cmP0xm1doLIYVhahbOfVI1+ vBPh7Kt/TGQ/ObkSK5xlrIXSomzfqoPwihVqUM10RWGKh3PozkhSYb7qpQBh51Xb DNjeVWPQog72ZkDHBAI15gFr42ITvvvCj+5sVj3WPiiGYwBuLjypinR2Vq8Abv/+ sSkqxH9PmdqHfmKqk7IUqlA39NnO9Cyxds8JauVxkxjrA2Nllqr6EPXBbOPgdMO7 6eDrAApc1u2ZhKQ+hGiLFA7KOWJPzvmitei8aryDlrUv -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:58 2024 by rpki-client on console-fra.rpki-client.org