$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18F32445C7470480959C29EE05393EE1A6A424C0.cer File: 18F32445C7470480959C29EE05393EE1A6A424C0.cer (raw, json) Hash identifier: 0Qzv09rIN7wFCPfYUFdGz1u77UoISGB/TEf0B/G1u4o= Subject key identifier: 18:F3:24:45:C7:47:04:80:95:9C:29:EE:05:39:3E:E1:A6:A4:24:C0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 499DE7FC7E02500D3BF34CAC382FEE276E2B77C6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:50:02 +0000 Certificate not after: Tue 04 Mar 2025 17:55:02 +0000 Subordinate resources: AS: 27779 IP: 200.0.175.0/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9d:e7:fc:7e:02:50:0d:3b:f3:4c:ac:38:2f:ee:27:6e:2b:77:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:50:02 2024 GMT Not After : Mar 4 17:55:02 2025 GMT Subject: CN=18F32445C7470480959C29EE05393EE1A6A424C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:3d:19:87:fe:ac:87:f8:32:34:8c:04:6e: 40:d7:5d:aa:82:87:f3:d7:5c:57:3c:b9:43:57:42: b5:39:09:e0:4f:54:41:a6:7e:e7:32:8a:56:6e:df: b0:3d:ac:bd:91:30:fd:fe:b2:48:67:ac:77:97:df: 7e:0a:32:11:dd:52:3c:5c:f5:30:73:e6:12:39:fe: 64:fe:c4:4e:91:1f:96:2c:1c:8e:af:ac:92:3c:86: d7:d9:32:10:11:fa:db:3d:4c:1c:be:a4:4e:14:de: 9a:6b:d4:a0:c3:2d:b7:a2:c1:2d:c1:27:7f:70:c7: df:1b:3b:15:b2:c7:97:e0:72:91:10:9c:40:eb:96: 4f:5e:44:fb:65:3c:59:71:14:4f:48:dc:55:24:94: 33:b3:3f:9f:e3:55:e7:1d:74:20:4b:56:67:32:17: 1a:84:d0:b2:d4:b0:20:20:07:63:9b:83:17:39:76: e8:35:08:c9:ff:a7:d4:b2:e1:74:d2:fd:44:61:48: 2a:40:e9:0d:bd:71:d0:b0:05:6d:1b:b4:6b:ae:92: 07:b2:43:a6:18:41:7a:e8:56:6b:0a:ca:a1:45:0a: 57:3a:ba:56:d0:a3:15:8c:e2:48:6b:df:38:d9:32: 25:b0:c1:a1:0e:13:0f:8b:b3:31:c9:4d:d2:2e:79: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:F3:24:45:C7:47:04:80:95:9C:29:EE:05:39:3E:E1:A6:A4:24:C0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C8BBC76F0E1960A76D8E9F6CF5A25B71D79A953A5150A80C8617755B517EC5AC/0/18F32445C7470480959C29EE05393EE1A6A424C0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.175.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27779 Signature Algorithm: sha256WithRSAEncryption 4f:c4:3d:d2:b0:d1:fa:c6:c4:41:5a:cc:29:b4:18:e6:5f:6f: 2d:d3:9f:1f:9b:5d:1d:9e:da:20:8f:2a:89:63:6d:e6:6a:0f: 1e:59:09:8a:d4:ce:c9:cd:8a:51:15:b2:0b:81:bb:e3:16:c3: 89:32:95:6f:df:ff:de:cc:63:24:7f:85:56:51:26:6d:28:a2: 02:ae:30:cd:e0:a1:9d:55:cc:ca:b0:51:47:51:f3:82:50:10: c2:ac:01:59:54:ac:96:8f:af:b7:73:fd:99:06:4b:6f:fd:c6: 5e:97:e5:76:aa:12:78:cd:ca:f2:29:ec:18:ba:e1:c6:24:dd: b1:31:d4:32:a3:c1:d2:84:d0:29:c0:fa:76:98:bb:8d:3a:ed: 80:bc:6e:57:6a:19:07:fd:a8:38:e8:9b:26:a2:f6:80:8c:c2: c2:8b:4e:97:af:3e:60:93:9a:1d:25:d7:35:80:8b:d5:17:5a: 96:f1:88:90:6f:8c:76:e8:ae:e5:cf:64:ae:2a:7e:d4:cd:fd: 5f:a5:7c:4d:1c:2b:dc:84:3f:b1:05:e4:02:56:6a:e6:9d:e0: 36:da:9b:f0:e2:b9:db:9e:ed:3c:b7:8c:f4:a5:bf:af:8e:20: 44:61:30:4b:d4:59:59:68:4b:72:4e:1b:11:6f:be:8b:a7:b1: 06:95:b8:c6 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUSZ3n/H4CUA0780ysOC/uJ24rd8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUwMDJaFw0yNTAzMDQxNzU1MDJaMDMxMTAvBgNV BAMTKDE4RjMyNDQ1Qzc0NzA0ODA5NTlDMjlFRTA1MzkzRUUxQTZBNDI0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+z0Zh/6sh/gyNIwEbkDXXaqC h/PXXFc8uUNXQrU5CeBPVEGmfucyilZu37A9rL2RMP3+skhnrHeX334KMhHdUjxc 9TBz5hI5/mT+xE6RH5YsHI6vrJI8htfZMhAR+ts9TBy+pE4U3ppr1KDDLbeiwS3B J39wx98bOxWyx5fgcpEQnEDrlk9eRPtlPFlxFE9I3FUklDOzP5/jVecddCBLVmcy FxqE0LLUsCAgB2Obgxc5dug1CMn/p9Sy4XTS/URhSCpA6Q29cdCwBW0btGuukgey Q6YYQXroVmsKyqFFClc6ulbQoxWM4khr3zjZMiWwwaEOEw+LszHJTdIueX2VAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQY8yRFx0cEgJWc Ke4FOT7hpqQkwDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzhCQkM3NkYwRTE5NjBBNzZEOEU5RjZD RjVBMjVCNzFENzlBOTUzQTUxNTBBODBDODYxNzc1NUI1MTdFQzVBQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOEJCQzc2RjBFMTk2MEE3NkQ4RTlGNkNGNUEyNUI3MUQ3OUE5NTNBNTE1 MEE4MEM4NjE3NzU1QjUxN0VDNUFDLzAvMThGMzI0NDVDNzQ3MDQ4MDk1OUMyOUVF MDUzOTNFRTFBNkE0MjRDMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyACvMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmyDMA0GCSqGSIb3DQEBCwUAA4IBAQBPxD3SsNH6 xsRBWswptBjmX28t058fm10dntogjyqJY23mag8eWQmK1M7JzYpRFbILgbvjFsOJ MpVv3//ezGMkf4VWUSZtKKICrjDN4KGdVczKsFFHUfOCUBDCrAFZVKyWj6+3c/2Z Bktv/cZel+V2qhJ4zcryKewYuuHGJN2xMdQyo8HShNApwPp2mLuNOu2AvG5XahkH /ag46JsmovaAjMLCi06Xrz5gk5odJdc1gIvVF1qW8YiQb4x26K7lz2SuKn7Uzf1f pXxNHCvchD+xBeQCVmrmneA22pvw4rnbnu08t4z0pb+vjiBEYTBL1FlZaEtyThsR b76Lp7EGlbjG -----END CERTIFICATE-----Generated at Fri May 31 20:32:52 2024 by rpki-client on console-ams.rpki-client.org