$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer File: 013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer (raw, json) Hash identifier: V9tkBWdb7kwojyaWb8W1YS8JaitKPMR0ovmUxmgTsVM= Subject key identifier: 01:3C:9F:DB:57:2F:82:FE:BA:26:C5:CB:CA:43:21:F4:21:C0:20:91 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 55DE5989B1F98BD6938BEDA67B3DA0EC4088472F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:52:20 +0000 Certificate not after: Tue 04 Mar 2025 17:57:20 +0000 Subordinate resources: AS: 266871 IP: 45.239.36.0/22 IP: 2803:aaa0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:de:59:89:b1:f9:8b:d6:93:8b:ed:a6:7b:3d:a0:ec:40:88:47:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:52:20 2024 GMT Not After : Mar 4 17:57:20 2025 GMT Subject: CN=013C9FDB572F82FEBA26C5CBCA4321F421C02091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:6f:51:a8:dd:cb:dc:30:53:1c:61:77:b2: 2a:64:d6:98:83:19:9d:2a:82:2e:59:f9:96:cb:83: 2b:73:18:62:de:11:1f:b4:75:53:a3:2f:82:9c:ba: f9:9f:3a:84:f0:b5:11:36:34:bb:95:8d:ed:0f:73: a3:5c:74:94:d8:5f:4e:b6:8a:d9:bb:14:d7:15:e7: 58:87:3e:63:4b:bd:4f:a8:ad:69:81:e7:51:e9:54: 2b:f4:f4:f6:c4:96:c1:a8:d8:fd:35:10:c4:b9:7b: a3:87:7f:87:ae:61:29:c5:46:e9:2c:32:d7:bc:3e: 85:28:88:b8:23:29:07:3c:ee:d9:76:56:1c:34:b1: 60:34:b9:17:a3:4e:59:49:96:9f:74:64:7c:22:37: bb:01:65:da:79:5a:ae:32:f3:d5:82:59:d3:e4:e6: 22:f4:16:f4:0b:15:b0:d3:1f:99:70:db:56:f7:7d: 0e:b9:61:c9:0b:7c:28:ef:75:f2:1b:27:c7:1f:47: 6b:4e:fd:82:76:e6:cc:4e:f3:df:cf:c4:72:33:ae: 1f:a1:c1:44:7e:b2:64:a2:c4:46:99:5a:05:91:93: 25:d5:f7:2e:44:98:7b:72:ad:c6:c8:70:69:2a:c3: 06:00:e4:22:3f:e7:3c:99:49:96:ab:0a:f9:0e:9f: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:3C:9F:DB:57:2F:82:FE:BA:26:C5:CB:CA:43:21:F4:21:C0:20:91 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.36.0/22 IPv6: 2803:aaa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266871 Signature Algorithm: sha256WithRSAEncryption bd:5f:5c:ef:35:23:cb:02:21:e4:f6:da:48:97:62:a4:7f:50: 4f:71:f6:f3:46:fe:a3:53:29:b1:e1:94:17:9d:a3:87:52:48: 54:9c:c3:1f:18:33:fc:42:2b:37:6a:69:1e:1a:10:bd:2b:b5: 94:ae:f9:0a:4e:84:00:ae:22:16:56:ae:16:4b:e3:fa:dd:d0: 75:c7:a9:05:d7:b6:e2:34:71:1f:35:58:64:9e:20:a1:46:46: 85:f7:0a:f3:b2:dc:f6:3d:29:26:45:1e:72:51:14:cf:30:b1: b8:56:c4:57:1e:1a:59:db:3b:1f:9f:68:ca:11:a4:27:46:27: 4b:c6:d1:32:84:33:be:f9:8c:49:26:41:07:e1:09:76:1e:5b: 37:ad:c3:e1:65:f7:0d:33:39:52:83:b7:e8:ac:28:e7:2f:95: 25:40:72:06:1c:ab:ce:5b:5c:b6:db:50:5b:2b:bd:36:73:77: 26:72:5e:d9:e8:97:d6:16:3a:21:de:dd:30:6e:59:65:e2:6c: 7f:24:e7:a7:c7:9e:7b:f8:e0:0b:be:3f:02:d4:0b:aa:74:20: 9b:33:9c:ce:89:35:c9:f6:34:5e:9d:68:21:63:2e:6b:f5:28: 51:29:f1:89:93:1c:c5:e4:0a:66:c0:03:e7:74:05:c3:93:cd: 71:9a:d6:08 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVd5ZibH5i9aTi+2mez2g7ECIRy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUyMjBaFw0yNTAzMDQxNzU3MjBaMDMxMTAvBgNV BAMTKDAxM0M5RkRCNTcyRjgyRkVCQTI2QzVDQkNBNDMyMUY0MjFDMDIwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuW9RqN3L3DBTHGF3sipk1piD GZ0qgi5Z+ZbLgytzGGLeER+0dVOjL4KcuvmfOoTwtRE2NLuVje0Pc6NcdJTYX062 itm7FNcV51iHPmNLvU+orWmB51HpVCv09PbElsGo2P01EMS5e6OHf4euYSnFRuks Mte8PoUoiLgjKQc87tl2Vhw0sWA0uRejTllJlp90ZHwiN7sBZdp5Wq4y89WCWdPk 5iL0FvQLFbDTH5lw21b3fQ65YckLfCjvdfIbJ8cfR2tO/YJ25sxO89/PxHIzrh+h wUR+smSixEaZWgWRkyXV9y5EmHtyrcbIcGkqwwYA5CI/5zyZSZarCvkOn1SnAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBPJ/bVy+C/rom xcvKQyH0IcAgkTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0EyM0JGNEJGQjZBMzZDQ0Q0MTg1MDcw NUQzNDdFNkRDNTgxRkQ3RjAyMzc0NjdDNTAzRjVFQTc3NDVDM0RGMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QTIzQkY0QkZCNkEzNkNDRDQxODUwNzA1RDM0N0U2REM1ODFGRDdGMDIz NzQ2N0M1MDNGNUVBNzc0NUMzREYyLzAvMDEzQzlGREI1NzJGODJGRUJBMjZDNUNC Q0E0MzIxRjQyMUMwMjA5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe8kMA0EAgAC MAcDBQAoA6qgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSdzANBgkqhkiG9w0B AQsFAAOCAQEAvV9c7zUjywIh5PbaSJdipH9QT3H280b+o1MpseGUF52jh1JIVJzD Hxgz/EIrN2ppHhoQvSu1lK75Ck6EAK4iFlauFkvj+t3QdcepBde24jRxHzVYZJ4g oUZGhfcK87Lc9j0pJkUeclEUzzCxuFbEVx4aWds7H59oyhGkJ0YnS8bRMoQzvvmM SSZBB+EJdh5bN63D4WX3DTM5UoO36Kwo5y+VJUByBhyrzltctttQWyu9NnN3JnJe 2eiX1hY6Id7dMG5ZZeJsfyTnp8eee/jgC74/AtQLqnQgmzOczok1yfY0Xp1oIWMu a/UoUSnxiZMcxeQKZsAD53QFw5PNcZrWCA== -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:23 2024 by rpki-client on console-fra.rpki-client.org