$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer File: 160B7951E0606756250A049D4BCA8B87E03112C2.cer (raw, json) Hash identifier: m/pfGBTM0bnAoXu9RN7wuNisAsNjJg+k7O0sPToWW3k= Subject key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7B150012390CC622CE59C6D0199FC6ADCBA1EB42 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:36:44 +0000 Certificate not after: Tue 04 Mar 2025 17:41:44 +0000 Subordinate resources: AS: 263236 IP: 66.128.32.0/20 IP: 2803:9680::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:15:00:12:39:0c:c6:22:ce:59:c6:d0:19:9f:c6:ad:cb:a1:eb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:36:44 2024 GMT Not After : Mar 4 17:41:44 2025 GMT Subject: CN=160B7951E0606756250A049D4BCA8B87E03112C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:30:c1:82:e4:a3:79:d1:93:32:93:70:a6: 84:ee:89:2a:86:55:de:ba:cc:4b:2c:03:2c:b7:c2: eb:b5:23:23:08:58:86:0a:fd:08:4c:bc:58:e7:98: 64:03:dd:53:f0:24:59:eb:08:62:a7:a1:8b:7a:de: 6e:5c:99:2a:ff:4e:11:65:1f:8b:09:cb:9e:45:4d: e0:75:71:cf:f3:f9:7f:f1:f9:1e:6b:02:fc:58:b0: ae:be:92:ba:89:b4:94:a9:49:78:da:cf:28:f7:2a: d2:51:73:53:73:0c:ff:8a:74:6f:0c:3b:be:a7:16: 65:4c:60:4b:f9:98:73:fa:25:b2:a4:a5:d1:23:9c: f5:71:3a:2f:a8:ad:20:c9:39:4c:3e:5b:0b:cc:80: 77:1a:cb:76:0e:b9:41:16:bb:ab:e0:6e:20:3d:e7: 99:f6:df:5a:16:6a:ff:5b:43:dd:b4:e1:2b:c1:99: af:44:2d:99:ef:53:9c:48:02:31:e0:ee:07:2f:8c: bc:df:6d:0d:bb:db:a3:3b:4f:b5:26:d6:93:c3:b1: 75:d6:be:ac:38:4e:c9:3e:c2:24:3c:59:0e:63:b1: 09:f9:18:1b:4e:c2:81:6a:67:fd:52:60:74:29:85: 69:bc:a0:3b:b7:4c:4a:e7:e8:ad:ec:d6:f6:d6:76: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.128.32.0/20 IPv6: 2803:9680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263236 Signature Algorithm: sha256WithRSAEncryption 1a:21:fa:f1:ec:45:66:31:44:d5:a7:9a:01:d5:66:ea:7b:db: 35:21:09:0d:ff:47:54:0f:d3:93:eb:e0:f9:3d:49:6e:d9:42: c1:a1:2c:4d:83:9f:ae:95:6c:f3:a2:d2:af:59:ac:3f:75:16: c5:9c:bf:16:84:91:6d:2b:80:01:04:2a:33:ec:d6:32:c8:22: eb:96:86:3e:bb:4a:42:d4:a3:89:68:24:95:65:05:08:5d:46: ac:ec:70:e0:bf:1f:b5:1b:c6:31:01:86:33:6a:b1:2e:12:f9: 05:b6:b9:6e:67:13:e4:ff:67:55:d0:a5:d8:08:3b:ed:14:dd: a3:26:9a:4b:34:ce:7f:83:91:41:77:aa:11:87:0b:ff:65:05: 5d:d6:04:2a:88:a1:cd:e7:ca:11:03:ef:84:9e:65:11:16:e0: 1f:17:a4:85:78:3a:bd:7d:15:1d:70:41:14:2c:ea:b0:44:39: 4b:ef:a8:08:92:17:91:17:21:45:e2:56:4a:f4:82:24:17:fc: 21:d7:d7:cc:c5:58:69:c9:18:51:13:0c:04:6f:7f:a7:17:73: 7e:5e:60:75:b4:e6:51:f5:cf:de:9e:b5:b3:99:a0:37:45:e0: 40:32:aa:1e:00:04:8f:20:5c:19:b6:ba:67:e2:73:88:8c:35: 6a:9a:a1:96 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUexUAEjkMxiLOWcbQGZ/Grcuh60IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM2NDRaFw0yNTAzMDQxNzQxNDRaMDMxMTAvBgNV BAMTKDE2MEI3OTUxRTA2MDY3NTYyNTBBMDQ5RDRCQ0E4Qjg3RTAzMTEyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV2TDBguSjedGTMpNwpoTuiSqG Vd66zEssAyy3wuu1IyMIWIYK/QhMvFjnmGQD3VPwJFnrCGKnoYt63m5cmSr/ThFl H4sJy55FTeB1cc/z+X/x+R5rAvxYsK6+krqJtJSpSXjazyj3KtJRc1NzDP+KdG8M O76nFmVMYEv5mHP6JbKkpdEjnPVxOi+orSDJOUw+WwvMgHcay3YOuUEWu6vgbiA9 55n231oWav9bQ9204SvBma9ELZnvU5xIAjHg7gcvjLzfbQ2726M7T7Um1pPDsXXW vqw4Tsk+wiQ8WQ5jsQn5GBtOwoFqZ/1SYHQphWm8oDu3TErn6K3s1vbWdtaBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWC3lR4GBnViUK BJ1LyouH4DESwjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTY4RTBBQ0I3NkNCRjM2Qzk1REY1RDk2 RTgwRDIwMEVGNkU3NDYxNTY1OEI0OTMyMTkxRTVGMTgyN0U0REFGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NjhFMEFDQjc2Q0JGMzZDOTVERjVEOTZFODBEMjAwRUY2RTc0NjE1NjU4 QjQ5MzIxOTFFNUYxODI3RTREQUY3LzAvMTYwQjc5NTFFMDYwNjc1NjI1MEEwNDlE NEJDQThCODdFMDMxMTJDMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQoAgMA0EAgAC MAcDBQAoA5aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQERDANBgkqhkiG9w0B AQsFAAOCAQEAGiH68exFZjFE1aeaAdVm6nvbNSEJDf9HVA/Tk+vg+T1JbtlCwaEs TYOfrpVs86LSr1msP3UWxZy/FoSRbSuAAQQqM+zWMsgi65aGPrtKQtSjiWgklWUF CF1GrOxw4L8ftRvGMQGGM2qxLhL5Bba5bmcT5P9nVdCl2Ag77RTdoyaaSzTOf4OR QXeqEYcL/2UFXdYEKoihzefKEQPvhJ5lERbgHxekhXg6vX0VHXBBFCzqsEQ5S++o CJIXkRchReJWSvSCJBf8IdfXzMVYackYURMMBG9/pxdzfl5gdbTmUfXP3p61s5mg N0XgQDKqHgAEjyBcGba6Z+JziIw1apqhlg== -----END CERTIFICATE-----Generated at Thu Nov 21 21:38:04 2024 by rpki-client on console-ams.rpki-client.org