$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer File: 107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer (raw, json) Hash identifier: jU828/X0oJbynxXAk3EWhsgeLyRDzSu+SLcAKtJhAXA= Subject key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2A19FD9B8AF20DA94D38BEF459DAA2A2FF8E3B3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:52:52 +0000 Certificate not after: Tue 04 Mar 2025 17:57:52 +0000 Subordinate resources: AS: 270086 IP: 177.128.202.0/23 IP: 2803:3be0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:19:fd:9b:8a:f2:0d:a9:4d:38:be:f4:59:da:a2:a2:ff:8e:3b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:52:52 2024 GMT Not After : Mar 4 17:57:52 2025 GMT Subject: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:5b:97:2a:24:21:44:f1:f5:15:e9:d2:35: c1:ee:c4:5b:2d:de:42:9c:72:23:0a:02:c8:bd:4f: 6f:c6:73:fe:2b:bf:b0:b7:12:83:f8:51:98:23:b2: 70:33:40:4a:f6:96:70:7b:ac:dc:eb:db:6e:bc:81: d3:19:90:29:fd:90:6f:db:10:eb:ab:35:a2:b8:37: f1:77:20:19:79:df:81:d8:95:0f:76:9f:fd:8a:e6: 99:aa:17:af:db:df:6e:1e:4e:f3:13:79:41:d1:4b: 92:d6:1e:99:00:51:72:4a:3e:35:75:b6:61:f0:29: f4:f5:35:4f:04:26:3f:95:82:e2:35:37:d8:e7:30: f0:42:53:94:c6:1e:66:d5:1e:de:42:ec:be:b6:11: 51:7e:a5:a6:2b:39:d9:e6:a3:32:0b:6c:99:f3:9e: c3:79:8c:6e:9f:e0:f9:b1:3d:00:64:d4:1f:d8:61: af:d3:49:69:ad:d0:ad:38:a0:06:9f:b8:36:58:14: 58:84:a1:04:44:9d:4a:22:03:7e:2a:37:0d:e9:62: 00:87:68:48:f0:1f:26:b1:00:cf:fc:fd:60:da:1f: 9c:d3:e5:5c:c7:cf:a0:02:ed:f9:6d:d6:cc:75:3e: ac:d4:68:84:6b:ca:e0:f0:b0:bf:36:4a:d1:b4:ae: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.202.0/23 IPv6: 2803:3be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270086 Signature Algorithm: sha256WithRSAEncryption 2e:95:d3:6e:c2:03:9e:4d:27:9e:9d:e1:1c:a3:4f:52:58:18: b6:b9:fb:cf:cd:2e:ee:a7:3f:65:25:70:6c:84:d5:32:4b:59: 75:02:02:4c:8f:29:15:15:c2:bc:f1:67:b6:29:5e:b3:3a:db: 87:d2:eb:b2:db:19:40:1f:6a:8b:50:6c:74:1f:56:73:3c:58: a7:ee:d0:02:05:0b:9a:4e:b0:e1:df:f6:59:ca:ac:36:a9:fa: f4:24:76:0d:5b:94:f4:54:65:57:0d:c6:f7:0d:cc:5b:d9:56: fa:99:7f:40:eb:5b:da:6f:8f:27:d0:6f:e5:7b:f8:46:f7:38: 04:6a:4b:a3:21:7d:20:c7:aa:1a:d5:2b:65:7b:c0:ca:11:2b: 23:00:78:85:35:64:55:85:b5:ca:05:21:8f:64:2a:17:73:19: a2:62:b6:63:41:ca:37:6e:73:2d:b9:c7:94:34:13:95:69:2d: c5:97:a9:ac:37:8a:c9:81:ce:b6:6b:fd:dd:f8:01:09:d7:6c: 01:e0:9c:04:89:5b:af:96:2b:21:bd:db:66:de:f5:90:68:e7: 77:2a:b7:fa:15:cf:1b:ab:e0:6f:9f:32:33:03:2f:0c:66:dd: 4a:cd:cc:e7:1c:e0:fa:4f:8c:a3:b2:6c:2c:b2:7e:63:c3:fc: a1:58:5c:10 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKhn9m4ryDalNOL70Wdqiov+OOz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUyNTJaFw0yNTAzMDQxNzU3NTJaMDMxMTAvBgNV BAMTKDEwN0UxOEYxNEM4RjMyQUYwOTc2NEI5OURCRTdBNkYwQjM5REI2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtluXKiQhRPH1FenSNcHuxFst 3kKcciMKAsi9T2/Gc/4rv7C3EoP4UZgjsnAzQEr2lnB7rNzr2268gdMZkCn9kG/b EOurNaK4N/F3IBl534HYlQ92n/2K5pmqF6/b324eTvMTeUHRS5LWHpkAUXJKPjV1 tmHwKfT1NU8EJj+VguI1N9jnMPBCU5TGHmbVHt5C7L62EVF+paYrOdnmozILbJnz nsN5jG6f4PmxPQBk1B/YYa/TSWmt0K04oAafuDZYFFiEoQREnUoiA34qNw3pYgCH aEjwHyaxAM/8/WDaH5zT5VzHz6AC7flt1sx1PqzUaIRryuDwsL82StG0rqM5AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQfhjxTI8yrwl2 S5nb56bws522zDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBCMzg4RUU1RDI3MzNEQjMzMURFRTFD NDEyRjMzQjlGRjEzMTkzRDYzREE2NzNGNDI2RkJCNzc2MzY4RDFERi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MEIzODhFRTVEMjczM0RCMzMxREVFMUM0MTJGMzNCOUZGMTMxOTNENjNE QTY3M0Y0MjZGQkI3NzYzNjhEMURGLzAvMTA3RTE4RjE0QzhGMzJBRjA5NzY0Qjk5 REJFN0E2RjBCMzlEQjZDQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBsYDKMA0EAgAC MAcDBQAoAzvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfBjANBgkqhkiG9w0B AQsFAAOCAQEALpXTbsIDnk0nnp3hHKNPUlgYtrn7z80u7qc/ZSVwbITVMktZdQIC TI8pFRXCvPFntileszrbh9LrstsZQB9qi1BsdB9WczxYp+7QAgULmk6w4d/2Wcqs Nqn69CR2DVuU9FRlVw3G9w3MW9lW+pl/QOtb2m+PJ9Bv5Xv4Rvc4BGpLoyF9IMeq GtUrZXvAyhErIwB4hTVkVYW1ygUhj2QqF3MZomK2Y0HKN25zLbnHlDQTlWktxZep rDeKyYHOtmv93fgBCddsAeCcBIlbr5YrIb3bZt71kGjndyq3+hXPG6vgb58yMwMv DGbdSs3M5xzg+k+Mo7JsLLJ+Y8P8oVhcEA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:02 2024 by rpki-client on console-ams.rpki-client.org