$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.cer File: 0B115B92FA7732A4FC9A6189945AAD4A0EB79286.cer (raw, json) Hash identifier: coyLrL0+KbANn18kZ8dnK836CVjUP1BceoLhKPqqeTI= Subject key identifier: 0B:11:5B:92:FA:77:32:A4:FC:9A:61:89:94:5A:AD:4A:0E:B7:92:86 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 406A10B6977E9AB47322F9031B3424FD2DCEC43C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:07:39 +0000 Certificate not after: Tue 04 Mar 2025 18:12:39 +0000 Subordinate resources: AS: 269953 IP: 190.89.128.0/22 IP: 2803:46e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Oct 2024 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6a:10:b6:97:7e:9a:b4:73:22:f9:03:1b:34:24:fd:2d:ce:c4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:07:39 2024 GMT Not After : Mar 4 18:12:39 2025 GMT Subject: CN=0B115B92FA7732A4FC9A6189945AAD4A0EB79286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:cc:e2:ec:8a:0d:36:ef:87:c0:c8:09:78: 6c:8b:79:97:60:8f:25:7f:ef:26:fa:04:ea:ef:de: ab:50:91:ed:e6:eb:a7:f6:1c:af:df:a1:62:ec:dd: 2c:d5:87:c0:27:28:2c:c5:87:74:34:a4:e8:7c:6b: a8:57:28:f3:b1:3b:60:eb:06:87:c2:2a:0e:a5:f6: 53:39:4d:97:fa:58:35:ce:12:b7:3b:1e:24:93:bf: e0:f0:d5:59:30:6b:70:38:2c:98:66:8f:34:5f:1c: 83:b0:39:2b:8d:5c:51:59:59:af:67:3c:4d:6c:30: 64:87:c2:c7:e0:71:80:8b:f6:0a:03:a8:90:95:11: c1:b1:4f:51:c0:c1:45:36:90:31:df:84:ce:76:10: eb:b1:3c:a6:b4:06:c2:1f:18:e6:b2:14:61:0b:ea: 4b:2d:07:79:08:e7:74:c3:7e:9e:1d:60:ad:c8:09: cb:a6:97:21:0f:f0:fa:43:d3:85:a3:5a:0b:da:c3: 73:3d:df:b5:84:97:fc:42:56:56:b9:44:34:ac:5f: 9a:48:2b:c9:b3:86:d3:fd:61:eb:8f:d2:38:1e:8a: 7a:27:19:55:7e:33:2f:75:8f:18:85:cd:d4:27:07: 79:ae:5a:6d:87:3a:73:9a:07:59:f4:1e:bd:2b:fc: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:11:5B:92:FA:77:32:A4:FC:9A:61:89:94:5A:AD:4A:0E:B7:92:86 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/34021A78FB5D4648059CD88D25A0259A33E12AC52BC9EE50011D4C7589721A90/0/0B115B92FA7732A4FC9A6189945AAD4A0EB79286.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.128.0/22 IPv6: 2803:46e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269953 Signature Algorithm: sha256WithRSAEncryption 41:c4:50:45:b8:cb:bd:7d:c4:96:28:17:57:4e:11:31:70:42: 71:8d:fd:ca:6b:51:dd:09:10:8d:ef:5e:96:cf:b3:61:1c:68: b7:6a:a3:80:c1:b5:75:3d:70:2a:e5:7d:b1:49:19:76:af:07: 65:51:7c:fd:48:8a:d0:ab:63:2a:f8:78:16:8b:e5:db:92:3d: 24:d0:31:84:e7:0f:6a:cd:0d:1d:d9:14:43:87:b4:50:03:4c: 30:1c:ae:6c:da:ac:77:74:98:00:da:09:be:b8:cd:a2:13:41: f4:96:ca:8f:9c:09:83:36:92:8e:b9:17:d9:62:65:cc:a6:9a: c0:57:10:c8:4a:a0:8e:21:ef:30:68:50:fd:fc:e4:fb:0e:21: 61:f8:cc:1d:48:79:38:1a:0f:1a:e2:d2:f2:5b:a9:4d:b6:f0: bf:f9:46:5d:8d:b4:0c:bd:3d:e7:14:1d:cf:1f:a1:d0:7f:72: c5:b1:e3:e8:21:21:b6:e9:37:16:15:90:ed:ad:bd:73:05:14: 9c:3f:11:8a:3f:80:31:3f:95:57:dd:8b:a9:47:5e:7c:cb:7b: 93:a8:0e:19:96:21:b5:9e:26:58:93:43:e5:e7:3b:44:bd:66: 42:c2:f3:8f:e6:7f:fb:bd:87:ae:10:da:60:6c:82:ad:a9:a3: d2:05:55:9e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQGoQtpd+mrRzIvkDGzQk/S3OxDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA3MzlaFw0yNTAzMDQxODEyMzlaMDMxMTAvBgNV BAMTKDBCMTE1QjkyRkE3NzMyQTRGQzlBNjE4OTk0NUFBRDRBMEVCNzkyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFczi7IoNNu+HwMgJeGyLeZdg jyV/7yb6BOrv3qtQke3m66f2HK/foWLs3SzVh8AnKCzFh3Q0pOh8a6hXKPOxO2Dr BofCKg6l9lM5TZf6WDXOErc7HiSTv+Dw1Vkwa3A4LJhmjzRfHIOwOSuNXFFZWa9n PE1sMGSHwsfgcYCL9goDqJCVEcGxT1HAwUU2kDHfhM52EOuxPKa0BsIfGOayFGEL 6kstB3kI53TDfp4dYK3ICcumlyEP8PpD04WjWgvaw3M937WEl/xCVla5RDSsX5pI K8mzhtP9YeuP0jgeinonGVV+My91jxiFzdQnB3muWm2HOnOaB1n0Hr0r/Jb9AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLEVuS+ncypPya YYmUWq1KDreShjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzQwMjFBNzhGQjVENDY0ODA1OUNEODhE MjVBMDI1OUEzM0UxMkFDNTJCQzlFRTUwMDExRDRDNzU4OTcyMUE5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNDAyMUE3OEZCNUQ0NjQ4MDU5Q0Q4OEQyNUEwMjU5QTMzRTEyQUM1MkJD OUVFNTAwMTFENEM3NTg5NzIxQTkwLzAvMEIxMTVCOTJGQTc3MzJBNEZDOUE2MTg5 OTQ1QUFENEEwRUI3OTI4Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvlmAMA0EAgAC MAcDBQAoA0bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQegTANBgkqhkiG9w0B AQsFAAOCAQEAQcRQRbjLvX3EligXV04RMXBCcY39ymtR3QkQje9els+zYRxot2qj gMG1dT1wKuV9sUkZdq8HZVF8/UiK0KtjKvh4Fovl25I9JNAxhOcPas0NHdkUQ4e0 UANMMByubNqsd3SYANoJvrjNohNB9JbKj5wJgzaSjrkX2WJlzKaawFcQyEqgjiHv MGhQ/fzk+w4hYfjMHUh5OBoPGuLS8lupTbbwv/lGXY20DL095xQdzx+h0H9yxbHj 6CEhtuk3FhWQ7a29cwUUnD8Rij+AMT+VV92LqUdefMt7k6gOGZYhtZ4mWJND5ec7 RL1mQsLzj+Z/+72HrhDaYGyCramj0gVVng== -----END CERTIFICATE-----Generated at Fri Sep 27 23:38:18 2024 by rpki-client on console-ams.rpki-client.org