$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer File: 209A4B66D92052DAA8A5358DB465449F02D52BAB.cer (raw, json) Hash identifier: /LhluxuAgWOBtztjJQk5bHqDumcEeQOmwsQfGUuCwQw= Subject key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 73CC201815834A23546B9B334235AFF73956BE54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 13 Sep 2024 17:55:30 +0000 Certificate not after: Fri 12 Sep 2025 18:00:30 +0000 Subordinate resources: AS: 52371 AS: 273932 IP: 186.159.120.0/21 IP: 2803:f000::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Oct 2024 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cc:20:18:15:83:4a:23:54:6b:9b:33:42:35:af:f7:39:56:be:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 13 17:55:30 2024 GMT Not After : Sep 12 18:00:30 2025 GMT Subject: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:56:f8:e4:95:2e:44:98:d9:14:fb:32:84: 7c:e1:e9:b2:ca:3f:4b:30:3c:df:42:eb:e3:93:bf: cb:f3:3c:bd:94:de:7b:c2:d9:e8:8a:2e:3f:12:19: a6:5d:3c:6c:8e:2e:77:3f:39:44:6e:e2:a0:bf:71: a9:d8:10:9a:f3:1e:bf:a1:07:d9:4d:ae:cb:eb:a0: f4:94:be:8d:aa:57:95:3f:59:26:33:5b:7f:d8:6d: 10:9f:0c:cf:37:ea:ee:c4:87:0c:0a:49:60:8e:7f: d2:12:da:0b:a1:a9:fa:69:98:dd:ef:e8:79:59:0a: 09:23:27:ae:8f:9a:57:6d:1a:01:ae:ce:a3:54:86: 24:de:09:5d:38:2d:72:d9:02:ca:c8:d8:87:62:ea: 11:d3:d8:65:2a:9e:c3:7d:45:df:b0:9c:b2:57:5f: 38:72:dc:27:eb:71:81:fb:f9:fc:37:51:0b:90:1d: a1:8d:46:a9:fd:ae:8b:1a:25:9c:44:6d:b0:6e:a2: ba:1e:4c:3f:bf:e3:27:80:f5:03:48:f1:be:f2:c2: 14:8b:b7:22:e5:81:66:4a:1f:e4:7a:ae:9a:01:75: d3:9f:8f:5a:7b:b9:85:f3:10:66:1c:ce:89:87:46: 79:70:87:3f:12:bc:03:e1:62:93:16:33:c4:96:44: 50:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.159.120.0/21 IPv6: 2803:f000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52371 273932 Signature Algorithm: sha256WithRSAEncryption e2:e3:d4:36:f0:0a:1f:18:ee:ff:7f:4e:4a:6e:0d:88:d1:40: 6c:6b:06:82:96:d4:f7:e6:99:e7:11:03:67:e9:18:a2:13:5c: 90:f7:76:1e:70:a2:a5:01:42:aa:b8:e3:8c:58:62:fe:dd:c9: e5:81:fa:ab:73:41:0d:a3:3e:c6:24:14:0d:cb:d1:23:7f:0b: 6e:b8:77:b4:a1:86:7f:9d:78:61:5f:e0:89:8b:f1:4a:13:8c: 10:49:2d:28:d4:26:98:d7:79:b1:94:43:a3:ae:bf:05:1a:18: 97:f5:c7:6f:4f:62:bf:c7:67:46:1d:cc:59:08:3b:02:9b:ae: bb:c7:21:f5:34:2c:26:3a:85:b2:ba:df:4b:4d:22:5c:04:4b: f3:27:7c:32:d9:75:c7:c1:5b:2b:bd:85:94:f5:47:ea:9b:75: 09:a8:43:b0:8a:24:94:2d:8c:d7:18:8b:c6:48:08:78:15:44: 41:ee:fd:a0:e1:fc:29:e7:a0:7a:04:12:f9:b9:73:cb:27:31: 3a:ff:2a:c8:f7:f8:e6:05:b1:46:2e:09:35:54:16:51:af:ce: 9d:4d:77:86:05:e9:d1:aa:0a:17:fe:f5:43:44:0b:3f:01:85: 88:7e:d6:b7:b3:c0:26:6b:e2:51:1e:d3:d1:49:5d:45:c7:e8: e5:62:9c:2f -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUc8wgGBWDSiNUa5szQjWv9zlWvlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA5MTMxNzU1MzBaFw0yNTA5MTIxODAwMzBaMDMxMTAvBgNV BAMTKDIwOUE0QjY2RDkyMDUyREFBOEE1MzU4REI0NjU0NDlGMDJENTJCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtlb45JUuRJjZFPsyhHzh6bLK P0swPN9C6+OTv8vzPL2U3nvC2eiKLj8SGaZdPGyOLnc/OURu4qC/canYEJrzHr+h B9lNrsvroPSUvo2qV5U/WSYzW3/YbRCfDM836u7EhwwKSWCOf9IS2guhqfppmN3v 6HlZCgkjJ66PmldtGgGuzqNUhiTeCV04LXLZAsrI2Idi6hHT2GUqnsN9Rd+wnLJX Xzhy3CfrcYH7+fw3UQuQHaGNRqn9rosaJZxEbbBuoroeTD+/4yeA9QNI8b7ywhSL tyLlgWZKH+R6rpoBddOfj1p7uYXzEGYczomHRnlwhz8SvAPhYpMWM8SWRFA7AgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgmktm2SBS2qil NY20ZUSfAtUrqzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUY2QjMwOEMzNjY0N0VCRTlFOTZEMUY0 QTQxMDBCQzg3MkQzNzg3N0I5RkM1NTNBN0Y1OTNGQzRGOUMyQkQ2Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RjZCMzA4QzM2NjQ3RUJFOUU5NkQxRjRBNDEwMEJDODcyRDM3ODc3QjlG QzU1M0E3RjU5M0ZDNEY5QzJCRDY3LzAvMjA5QTRCNjZEOTIwNTJEQUE4QTUzNThE QjQ2NTQ0OUYwMkQ1MkJBQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDup94MA0EAgAC MAcDBQAoA/AAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDMkwIDBC4MMA0GCSqG SIb3DQEBCwUAA4IBAQDi49Q28AofGO7/f05Kbg2I0UBsawaCltT35pnnEQNn6Rii E1yQ93YecKKlAUKquOOMWGL+3cnlgfqrc0ENoz7GJBQNy9EjfwtuuHe0oYZ/nXhh X+CJi/FKE4wQSS0o1CaY13mxlEOjrr8FGhiX9cdvT2K/x2dGHcxZCDsCm667xyH1 NCwmOoWyut9LTSJcBEvzJ3wy2XXHwVsrvYWU9Ufqm3UJqEOwiiSULYzXGIvGSAh4 FURB7v2g4fwp56B6BBL5uXPLJzE6/yrI9/jmBbFGLgk1VBZRr86dTXeGBenRqgoX /vVDRAs/AYWIfta3s8Ama+JRHtPRSV1Fx+jlYpwv -----END CERTIFICATE-----Generated at Fri Sep 27 23:26:18 2024 by rpki-client on console-fra.rpki-client.org