$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer File: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer (raw, json) Hash identifier: Fao2zB/HkK/qurMPRyUm2ESGGFWnFASoQYDyvj0UBMw= Subject key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 43223519597E4079F70D38BC7693E179B3D51C15 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:58:04 +0000 Certificate not after: Tue 04 Mar 2025 18:03:04 +0000 Subordinate resources: AS: 269858 IP: 45.189.196.0/22 IP: 2803:30e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:22:35:19:59:7e:40:79:f7:0d:38:bc:76:93:e1:79:b3:d5:1c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:58:04 2024 GMT Not After : Mar 4 18:03:04 2025 GMT Subject: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b3:99:4e:47:3d:97:37:af:a9:5b:a9:06:fa: 4c:22:d0:46:bf:fd:68:50:90:4b:cf:6f:b0:a0:ac: 2d:9c:51:eb:a5:e3:88:6d:5d:fc:b6:8d:93:62:0d: a9:f4:52:54:4c:aa:3b:69:9a:7f:2b:66:16:70:bd: 29:93:1a:e2:f4:3a:ee:3f:87:70:83:96:ab:04:86: 53:16:b6:dc:66:2a:f6:ff:ce:b3:e8:92:ab:6d:f6: 9e:6c:a3:d9:ea:9d:70:ac:c3:0d:20:39:e6:02:a7: ca:5a:b5:93:52:00:24:f9:54:79:55:5b:70:4c:f0: 29:af:a8:0b:7d:67:4c:b1:e7:69:1c:50:83:bc:d2: 58:5c:ec:16:3e:f6:b9:ff:4e:d2:cd:6b:1d:54:2d: 78:14:06:9a:cc:c8:52:a2:77:59:73:c7:6d:28:70: 0d:5b:2d:bc:a1:4f:9c:0f:8c:1c:9e:00:53:23:c5: 6b:fc:61:3d:b7:e6:54:a8:37:fc:c5:45:5f:d8:17: d8:90:77:d1:e8:4c:58:56:f5:51:cd:69:22:be:9d: 82:8e:ab:07:d4:77:1b:0e:cd:8a:2e:e3:16:aa:95: 5a:f4:9f:fe:ec:65:0c:01:74:26:a0:18:8d:e5:31: 19:50:c1:9d:bd:cd:ff:1b:72:dd:23:35:33:7d:1e: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.196.0/22 IPv6: 2803:30e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269858 Signature Algorithm: sha256WithRSAEncryption 52:b5:17:d1:c8:30:78:62:a3:85:05:b7:2e:10:c1:e3:8f:e6: 7d:30:21:e6:de:d0:b7:0e:8d:5a:06:1f:d0:e0:23:c9:89:1b: fb:48:59:d9:78:bc:1e:68:e3:e6:9e:3b:5a:3c:1c:2e:7d:58: 7f:0c:62:4b:cb:e0:c7:42:c3:58:61:51:48:f6:9e:d7:f7:ac: d8:dd:7d:d3:c8:08:dd:4e:9c:90:8c:ae:79:53:7a:72:35:8c: e3:b3:8d:58:cb:64:02:56:98:c1:74:7f:0d:91:2b:ee:ef:94: ad:be:63:ce:85:55:94:24:76:c9:5b:02:49:ec:fa:21:cf:ff: 08:e7:cf:7d:97:7c:5d:1f:ca:48:be:48:bf:58:a1:f3:d6:ec: c4:c7:ba:58:52:3d:58:eb:0a:b9:fb:0d:4e:64:60:4f:07:c0: 79:60:69:1b:0e:b2:5c:a7:be:4b:a9:73:bc:37:75:c9:7c:dc: d8:bb:88:a1:65:0e:17:13:a9:7d:d8:fd:8b:b9:6e:0c:2d:1e: d9:d1:f6:29:1c:cf:f4:57:17:25:e9:84:52:ac:8a:d8:a3:1b: cf:21:09:be:2c:61:79:36:77:87:c2:0a:c4:7b:a6:0b:c7:54: 95:57:3c:26:92:93:8a:45:aa:35:ec:47:eb:9a:db:0a:6c:da: 8e:1f:38:af -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQyI1GVl+QHn3DTi8dpPhebPVHBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU4MDRaFw0yNTAzMDQxODAzMDRaMDMxMTAvBgNV BAMTKDBBOTdCN0Q5REJEMjcwQTU2MDY0QjU2MEUzMkM0NkE1RTJCRDg1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWs5lORz2XN6+pW6kG+kwi0Ea/ /WhQkEvPb7CgrC2cUeul44htXfy2jZNiDan0UlRMqjtpmn8rZhZwvSmTGuL0Ou4/ h3CDlqsEhlMWttxmKvb/zrPokqtt9p5so9nqnXCsww0gOeYCp8patZNSACT5VHlV W3BM8CmvqAt9Z0yx52kcUIO80lhc7BY+9rn/TtLNax1ULXgUBprMyFKid1lzx20o cA1bLbyhT5wPjByeAFMjxWv8YT235lSoN/zFRV/YF9iQd9HoTFhW9VHNaSK+nYKO qwfUdxsOzYou4xaqlVr0n/7sZQwBdCagGI3lMRlQwZ29zf8bct0jNTN9HkbJAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKl7fZ29JwpWBk tWDjLEal4r2FfTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjI4NDgwRjE4NTUwNjczQ0E3NDA0MkE5 NjFEN0Y1NzBFM0UzOTU2QUM4RUI0QUYyQkVCMTg4MkYzNzZDOTlFMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMjg0ODBGMTg1NTA2NzNDQTc0MDQyQTk2MUQ3RjU3MEUzRTM5NTZBQzhF QjRBRjJCRUIxODgyRjM3NkM5OUUzLzAvMEE5N0I3RDlEQkQyNzBBNTYwNjRCNTYw RTMyQzQ2QTVFMkJEODU3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb3EMA0EAgAC MAcDBQAoAzDgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeIjANBgkqhkiG9w0B AQsFAAOCAQEAUrUX0cgweGKjhQW3LhDB44/mfTAh5t7Qtw6NWgYf0OAjyYkb+0hZ 2Xi8Hmjj5p47WjwcLn1YfwxiS8vgx0LDWGFRSPae1/es2N1908gI3U6ckIyueVN6 cjWM47ONWMtkAlaYwXR/DZEr7u+Urb5jzoVVlCR2yVsCSez6Ic//COfPfZd8XR/K SL5Iv1ih89bsxMe6WFI9WOsKufsNTmRgTwfAeWBpGw6yXKe+S6lzvDd1yXzc2LuI oWUOFxOpfdj9i7luDC0e2dH2KRzP9FcXJemEUqyK2KMbzyEJvixheTZ3h8IKxHum C8dUlVc8JpKTikWqNexH65rbCmzajh84rw== -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:45 2024 by rpki-client on console-fra.rpki-client.org