$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer File: 1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer (raw, json) Hash identifier: b//eB/cc7XKJEroRvbYs32fcP6+O7fdG+T4IETTFaoE= Subject key identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 17B21F1CAAC1C7C82EBF3BEC8550447192606D4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:53:24 +0000 Certificate not after: Tue 04 Mar 2025 17:58:24 +0000 Subordinate resources: AS: 263196 IP: 143.202.136.0/22 IP: 186.148.80.0/21 IP: 2803:4b00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b2:1f:1c:aa:c1:c7:c8:2e:bf:3b:ec:85:50:44:71:92:60:6d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:53:24 2024 GMT Not After : Mar 4 17:58:24 2025 GMT Subject: CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:1c:e3:5e:e7:33:82:97:19:fa:59:ac:80: 6a:68:70:f7:7c:6b:55:91:f2:e5:ac:54:fb:4d:d2: 8c:89:69:93:fd:5d:db:84:93:da:c1:be:0f:8c:12: 12:e8:9d:ae:12:0d:7f:f8:b3:ec:14:28:87:29:62: 54:9c:88:c7:05:2b:13:79:db:27:ee:33:eb:16:e7: bd:35:8c:8f:04:e1:5b:89:57:ba:d2:30:01:7b:b5: c7:ed:c7:9c:a3:e4:05:58:6b:20:b9:a0:c4:69:ec: 6d:14:f6:1e:09:24:63:38:b8:18:58:aa:9d:41:3b: 96:18:e4:ad:5d:de:ee:73:4d:da:19:45:99:bf:b2: 2f:4e:db:c0:b1:20:7e:85:40:c6:5f:9a:fb:5d:a6: 20:12:ed:98:a6:08:8c:7b:b4:1b:2f:a0:7d:d9:bd: 62:48:b7:d3:63:14:75:c5:da:72:74:cf:95:15:eb: 07:9a:6f:a4:a9:b0:6c:64:63:23:a6:54:b1:a1:e0: 7e:c0:f5:8a:a8:3f:ff:a5:19:08:f0:99:84:3f:e7: 15:47:aa:70:6b:74:77:37:98:40:99:e7:f7:51:77: 4b:5f:87:42:8a:df:41:8d:87:08:82:41:c0:86:7c: 5a:1a:e2:f2:e5:e6:fb:d4:a5:b4:76:1d:43:6c:4b: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.136.0/22 186.148.80.0/21 IPv6: 2803:4b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263196 Signature Algorithm: sha256WithRSAEncryption 48:10:1d:74:44:26:bf:b1:89:13:7d:0d:93:ed:03:58:01:51: 08:8d:41:7d:b7:98:47:97:e9:19:34:8d:0e:3a:3a:96:53:c5: 00:fa:fd:88:98:6e:a6:72:5a:73:88:c2:a1:22:82:79:7c:f9: 46:cd:99:de:f3:84:f6:e3:9a:7b:d7:c5:eb:41:76:ff:6a:f2: 22:ad:4d:19:f1:2f:ce:f6:53:ad:57:59:d8:6f:ca:2a:e7:c6: 9f:7c:a3:b4:ee:03:f9:3e:ac:82:2a:64:b8:92:9b:9b:12:55: 39:4f:7f:be:08:94:7b:9e:78:ed:25:26:54:a5:aa:0d:02:08: 5b:5e:dd:c7:18:30:6b:0a:d6:aa:fe:2a:93:73:da:d9:79:7d: 08:e8:e5:f5:2c:61:46:85:af:64:6b:c4:d6:8d:0f:66:17:f6: 04:9c:12:f5:66:31:94:fe:ed:db:bd:3e:bc:5d:7d:07:62:81: c7:2d:75:e1:98:b0:c0:94:38:b6:2d:7c:2e:00:85:81:1b:bb: d2:d5:31:da:63:96:b0:c6:e2:03:3e:fd:9d:5d:3e:74:5a:84: 5c:c0:84:a2:a0:b3:88:c5:9c:57:00:da:05:ac:b9:2b:db:60: 6e:67:33:d3:4c:37:f5:3c:d8:be:e0:c4:f9:0f:50:b7:cc:01: 65:e5:45:36 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUF7IfHKrBx8guvzvshVBEcZJgbUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUzMjRaFw0yNTAzMDQxNzU4MjRaMDMxMTAvBgNV BAMTKDFCRjZBNEQ3QzBGOTU0RDdERTk0RUY0MTdDRDQ1M0I4QTQyMTc4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZhzjXuczgpcZ+lmsgGpocPd8 a1WR8uWsVPtN0oyJaZP9XduEk9rBvg+MEhLona4SDX/4s+wUKIcpYlSciMcFKxN5 2yfuM+sW5701jI8E4VuJV7rSMAF7tcftx5yj5AVYayC5oMRp7G0U9h4JJGM4uBhY qp1BO5YY5K1d3u5zTdoZRZm/si9O28CxIH6FQMZfmvtdpiAS7ZimCIx7tBsvoH3Z vWJIt9NjFHXF2nJ0z5UV6weab6SpsGxkYyOmVLGh4H7A9YqoP/+lGQjwmYQ/5xVH qnBrdHc3mECZ5/dRd0tfh0KK30GNhwiCQcCGfFoa4vLl5vvUpbR2HUNsS6szAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb9qTXwPlU196U 70F81FO4pCF4YDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjRDNDVBMkNEMkU0MEUxODhDMEU2Njcy RDAxMTQ2MUU2MEE3OThGM0Y2MzNCNEJGOEU2RTlBRjk5OEYyMDBGNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNEM0NUEyQ0QyRTQwRTE4OEMwRTY2NzJEMDExNDYxRTYwQTc5OEYzRjYz M0I0QkY4RTZFOUFGOTk4RjIwMEY0LzAvMUJGNkE0RDdDMEY5NTREN0RFOTRFRjQx N0NENDUzQjhBNDIxNzg2MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCj8qIAwQDupRQ MA0EAgACMAcDBQAoA0sAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEHDANBgkq hkiG9w0BAQsFAAOCAQEASBAddEQmv7GJE30Nk+0DWAFRCI1BfbeYR5fpGTSNDjo6 llPFAPr9iJhupnJac4jCoSKCeXz5Rs2Z3vOE9uOae9fF60F2/2ryIq1NGfEvzvZT rVdZ2G/KKufGn3yjtO4D+T6sgipkuJKbmxJVOU9/vgiUe5547SUmVKWqDQIIW17d xxgwawrWqv4qk3Pa2Xl9COjl9SxhRoWvZGvE1o0PZhf2BJwS9WYxlP7t270+vF19 B2KBxy114ZiwwJQ4ti18LgCFgRu70tUx2mOWsMbiAz79nV0+dFqEXMCEoqCziMWc VwDaBay5K9tgbmcz00w39TzYvuDE+Q9Qt8wBZeVFNg== -----END CERTIFICATE-----Generated at Fri May 31 19:47:15 2024 by rpki-client on console-fra.rpki-client.org