$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172F9FB27327C9B0586968A8311D612A6A2D1067.cer File: 172F9FB27327C9B0586968A8311D612A6A2D1067.cer (raw, json) Hash identifier: YI8LOR7RsCAFfX7+LVroPckeu7NFToU1YrtlV+mngfQ= Subject key identifier: 17:2F:9F:B2:73:27:C9:B0:58:69:68:A8:31:1D:61:2A:6A:2D:10:67 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 580546E3E73140F0D4DD55F5656F0C0E1A257CA8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:41:18 +0000 Certificate not after: Tue 04 Mar 2025 17:46:18 +0000 Subordinate resources: AS: 262148 IP: 200.14.79.0/24 IP: 2801:0:80::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:05:46:e3:e7:31:40:f0:d4:dd:55:f5:65:6f:0c:0e:1a:25:7c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:41:18 2024 GMT Not After : Mar 4 17:46:18 2025 GMT Subject: CN=172F9FB27327C9B0586968A8311D612A6A2D1067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:9e:12:8f:ca:f8:17:a3:ac:92:c3:e3:0e: 84:c0:38:5e:4a:4c:af:b1:99:50:ad:e7:76:90:f3: 69:b2:43:47:e5:b5:3f:07:85:d1:ee:05:2d:d8:4a: 50:53:4e:33:dd:2d:4d:7a:10:7e:04:dc:57:56:db: cf:81:47:46:a2:4f:2f:49:84:c7:0a:47:f0:f0:86: 3d:3e:36:5b:cd:d2:b0:bd:8c:b9:11:a2:12:6a:f3: 54:98:76:e8:6a:93:27:87:2a:1a:29:16:fe:1d:17: f1:b8:0a:7d:89:30:9a:f3:8e:62:0e:37:aa:8c:3f: 55:28:8f:d3:c3:61:7f:22:8d:8d:9b:e7:f0:e5:94: 52:0d:aa:32:aa:20:fd:ee:dc:00:b8:d0:88:3a:d5: 20:39:12:10:ab:1b:be:b5:bf:ac:42:ef:f9:37:3e: b6:08:6c:51:fc:bb:84:7f:11:b8:93:f2:a3:bb:c1: 60:2d:61:85:42:10:34:5b:8d:eb:c5:a3:f7:41:30: 2e:e2:4c:5c:42:b5:6d:ec:58:ec:37:ea:2d:b8:2a: be:8f:d0:dd:5d:91:7a:a6:84:fb:01:47:e0:7c:53: e1:08:ed:27:19:e4:3d:01:33:3d:e1:8d:02:12:ae: 12:bd:40:2e:b5:0c:42:b9:8b:c5:27:04:6b:0d:c8: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:2F:9F:B2:73:27:C9:B0:58:69:68:A8:31:1D:61:2A:6A:2D:10:67 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.14.79.0/24 IPv6: 2801:0:80::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262148 Signature Algorithm: sha256WithRSAEncryption 97:e1:1b:28:b9:75:16:57:ca:31:80:6a:cb:e2:b3:48:50:a4: 51:c0:a9:69:e3:25:c4:0f:8c:bd:38:ed:38:23:0a:23:2e:e3: b1:f5:ef:93:0f:ca:6d:71:27:05:d6:8e:a4:46:8b:16:d6:8a: 0e:33:cd:b5:5b:85:0c:36:13:68:5a:bc:4d:af:7d:c7:2f:5e: 1e:f7:ab:1b:3c:ed:06:9a:80:4b:61:1e:03:c8:07:75:ff:18: 59:0b:f9:c4:8c:c0:83:d1:e2:2e:77:57:34:b8:fc:1d:f3:09: a2:75:7f:4e:54:ba:64:4b:8a:49:1b:70:01:5b:c1:17:d8:fc: ef:f1:67:2c:a2:53:dc:94:6b:73:a9:2a:54:4a:70:89:64:af: d6:5f:8a:39:64:af:8f:f2:4c:39:18:f8:cd:ef:c6:66:0d:10: 68:36:91:a4:81:4c:a1:7b:5f:1c:79:aa:39:e1:cc:41:c7:eb: b3:9c:fc:cc:e7:e0:ef:d9:45:ad:4e:15:13:4a:63:9e:d8:c5: 19:2e:02:f5:b7:a2:56:17:22:ba:4c:f6:0d:a5:00:dd:48:f8: 26:76:0f:80:a4:77:31:d6:0b:84:cf:96:e1:b3:1b:b9:68:23: 95:ff:72:9e:12:27:08:9d:8d:6e:58:22:c2:a0:bb:c6:a3:7d: 80:4c:af:6a -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUWAVG4+cxQPDU3VX1ZW8MDholfKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQxMThaFw0yNTAzMDQxNzQ2MThaMDMxMTAvBgNV BAMTKDE3MkY5RkIyNzMyN0M5QjA1ODY5NjhBODMxMUQ2MTJBNkEyRDEwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0p4Sj8r4F6OsksPjDoTAOF5K TK+xmVCt53aQ82myQ0fltT8HhdHuBS3YSlBTTjPdLU16EH4E3FdW28+BR0aiTy9J hMcKR/Dwhj0+NlvN0rC9jLkRohJq81SYduhqkyeHKhopFv4dF/G4Cn2JMJrzjmIO N6qMP1Uoj9PDYX8ijY2b5/DllFINqjKqIP3u3AC40Ig61SA5EhCrG761v6xC7/k3 PrYIbFH8u4R/EbiT8qO7wWAtYYVCEDRbjevFo/dBMC7iTFxCtW3sWOw36i24Kr6P 0N1dkXqmhPsBR+B8U+EI7ScZ5D0BMz3hjQISrhK9QC61DEK5i8UnBGsNyIJLAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXL5+ycyfJsFhp aKgxHWEqai0QZzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTcxOUVCRjc3Njg4OTlBNTE5RkFENkMy MzBEMDU2RjlEMzAyNDIxODk0N0M3QTk4N0EwOTNEMjI3Njg4M0NCNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNzE5RUJGNzc2ODg5OUE1MTlGQUQ2QzIzMEQwNTZGOUQzMDI0MjE4OTQ3 QzdBOTg3QTA5M0QyMjc2ODgzQ0I3LzAvMTcyRjlGQjI3MzI3QzlCMDU4Njk2OEE4 MzExRDYxMkE2QTJEMTA2Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyA5PMA8EAgAC MAkDBwAoAQAAAIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAAEMA0GCSqGSIb3 DQEBCwUAA4IBAQCX4RsouXUWV8oxgGrL4rNIUKRRwKlp4yXED4y9OO04IwojLuOx 9e+TD8ptcScF1o6kRosW1ooOM821W4UMNhNoWrxNr33HL14e96sbPO0GmoBLYR4D yAd1/xhZC/nEjMCD0eIud1c0uPwd8wmidX9OVLpkS4pJG3ABW8EX2Pzv8WcsolPc lGtzqSpUSnCJZK/WX4o5ZK+P8kw5GPjN78ZmDRBoNpGkgUyhe18ceao54cxBx+uz nPzM5+Dv2UWtThUTSmOe2MUZLgL1t6JWFyK6TPYNpQDdSPgmdg+ApHcx1guEz5bh sxu5aCOV/3KeEicInY1uWCLCoLvGo32ATK9q -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:46 2024 by rpki-client on console-fra.rpki-client.org