$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer File: 07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer (raw, json) Hash identifier: mBXpkEYxxEYPy8Q6KR4y+h6R9GNmxtmYPDr7oE5JprE= Subject key identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5D75812C60FB6A220EE531F1E062140B0BEA1AF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:47:52 +0000 Certificate not after: Tue 04 Mar 2025 17:52:52 +0000 Subordinate resources: AS: 52255 IP: 186.0.160.0/20 IP: 201.159.56.0/21 IP: 2803:f100::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:75:81:2c:60:fb:6a:22:0e:e5:31:f1:e0:62:14:0b:0b:ea:1a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:47:52 2024 GMT Not After : Mar 4 17:52:52 2025 GMT Subject: CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:ab:c4:e3:31:18:97:fa:5a:77:76:11:18: 79:17:16:4a:f3:bb:e6:d0:14:65:ca:b3:ba:53:3a: 11:65:e1:c2:21:14:f3:07:ae:bb:c4:5e:0b:8a:a1: 43:ca:28:8f:c8:80:2d:ef:37:0e:de:fa:09:35:ff: db:a7:de:8d:1d:a5:04:e6:d0:3e:c8:42:7c:4f:53: 89:15:48:15:dc:e6:10:23:32:c0:6b:c1:cc:09:02: 89:38:d9:dd:b3:e0:2d:d9:1c:03:62:37:b3:10:5c: 75:f5:09:e1:ef:ac:ef:b7:58:52:00:4f:74:5f:51: 8b:12:18:a2:4b:f8:db:8c:aa:0a:35:1a:d8:6a:5a: a1:7c:9b:36:ef:00:d1:12:f8:6b:50:a7:e0:aa:61: f4:b5:c3:89:5a:5b:34:b0:de:b6:df:f1:73:12:eb: d9:b2:11:56:8a:35:75:26:ba:7b:55:7e:a8:31:ac: b9:c8:ff:50:83:2a:b3:a7:68:ea:7c:c1:45:6c:1d: fd:0b:ab:a4:2e:33:8c:d9:73:1d:87:7d:01:e1:78: c3:e0:13:d5:2c:42:b8:1a:e0:2d:4d:d1:54:49:79: 64:e8:5a:8d:de:cb:4b:cf:0c:3b:bc:d7:f7:87:5b: 5c:84:bd:aa:7c:02:fd:ca:73:e2:89:2c:a9:58:89: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.0.160.0/20 201.159.56.0/21 IPv6: 2803:f100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52255 Signature Algorithm: sha256WithRSAEncryption 06:3b:ce:14:61:2c:ca:9c:71:3f:4b:fb:16:ed:cf:07:85:8e: 47:da:c9:cc:c0:73:77:7c:05:8c:0b:87:67:39:ba:b3:b3:2b: a1:2f:de:ed:a5:61:74:21:ad:ea:42:90:9f:d8:bf:49:06:09: 90:43:67:7e:5e:83:e0:16:98:71:12:c4:9a:49:cd:aa:68:45: 5c:70:84:1a:df:a6:c1:7c:51:94:f3:a4:a2:f1:4a:ee:a0:b5: 08:e7:11:cb:27:d1:cc:bf:91:2a:dc:97:1b:df:38:96:92:fa: 59:b1:32:60:29:81:94:c2:87:56:8a:c2:3d:67:35:d1:08:83: 35:e3:a2:a5:1a:4e:1d:0e:d2:2a:a9:0f:8d:23:af:9b:3d:9b: e4:75:8c:da:3d:e6:db:5b:db:35:78:53:d6:54:1e:be:36:b3: fc:05:32:ee:b0:9b:35:c0:af:01:61:64:d8:01:6c:bb:55:a8: 04:98:1e:c5:77:1b:04:8d:38:de:76:62:8e:b4:11:4e:32:9d: 69:30:70:c3:14:34:d8:39:f1:f0:08:12:f7:4f:80:db:10:65: 65:57:70:0f:fb:b3:cc:4b:36:af:92:a5:65:7c:fb:e6:8e:1d: e5:13:36:20:63:57:5b:90:99:ae:3a:7b:f8:11:6a:99:ca:91: 4d:e2:66:c8 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUXXWBLGD7aiIO5THx4GIUCwvqGvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ3NTJaFw0yNTAzMDQxNzUyNTJaMDMxMTAvBgNV BAMTKDA3QTM5MkIyQTgxOTEzRDI3RjA0QjE2RTMzREE3OThFQTVFNEI4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwavE4zEYl/pad3YRGHkXFkrz u+bQFGXKs7pTOhFl4cIhFPMHrrvEXguKoUPKKI/IgC3vNw7e+gk1/9un3o0dpQTm 0D7IQnxPU4kVSBXc5hAjMsBrwcwJAok42d2z4C3ZHANiN7MQXHX1CeHvrO+3WFIA T3RfUYsSGKJL+NuMqgo1GthqWqF8mzbvANES+GtQp+CqYfS1w4laWzSw3rbf8XMS 69myEVaKNXUmuntVfqgxrLnI/1CDKrOnaOp8wUVsHf0Lq6QuM4zZcx2HfQHheMPg E9UsQrga4C1N0VRJeWToWo3ey0vPDDu81/eHW1yEvap8Av3Kc+KJLKlYiZN9AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHo5KyqBkT0n8E sW4z2nmOpeS4ozAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUFFM0ZBRjhCNDgxNDk4NzhGQTcyQzZD OEI4NUEzMTdERDBEQTY5NjY2MDgzNERFQTU5NzI1NDIwMDUwNjk4My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81QUUzRkFGOEI0ODE0OTg3OEZBNzJDNkM4Qjg1QTMxN0REMERBNjk2NjYw ODM0REVBNTk3MjU0MjAwNTA2OTgzLzAvMDdBMzkyQjJBODE5MTNEMjdGMDRCMTZF MzNEQTc5OEVBNUU0QjhBMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEugCgAwQDyZ84 MA0EAgACMAcDBQAoA/EAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMHzANBgkq hkiG9w0BAQsFAAOCAQEABjvOFGEsypxxP0v7Fu3PB4WOR9rJzMBzd3wFjAuHZzm6 s7MroS/e7aVhdCGt6kKQn9i/SQYJkENnfl6D4BaYcRLEmknNqmhFXHCEGt+mwXxR lPOkovFK7qC1COcRyyfRzL+RKtyXG984lpL6WbEyYCmBlMKHVorCPWc10QiDNeOi pRpOHQ7SKqkPjSOvmz2b5HWM2j3m21vbNXhT1lQevjaz/AUy7rCbNcCvAWFk2AFs u1WoBJgexXcbBI043nZijrQRTjKdaTBwwxQ02Dnx8AgS90+A2xBlZVdwD/uzzEs2 r5KlZXz75o4d5RM2IGNXW5CZrjp7+BFqmcqRTeJmyA== -----END CERTIFICATE-----Generated at Sat May 18 17:19:19 2024 by rpki-client on console-ams.rpki-client.org