$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer File: 23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer (raw, json) Hash identifier: 8YWfvayZlBd/7YDz3hTbQrBufmDR64fnln9F+o+8jRU= Subject key identifier: 23:46:5A:56:15:2F:A1:59:3E:35:DA:A9:CC:BE:AC:1E:BC:37:CF:31 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 047DEC588773F71755E97E6AA450A62AE85683F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:04:58 +0000 Certificate not after: Tue 04 Mar 2025 18:09:58 +0000 Subordinate resources: AS: 4493 IP: 148.225.0.0/16 IP: 192.100.156.0/24 IP: 200.23.111.0/24 IP: 207.249.192.0/19 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7d:ec:58:87:73:f7:17:55:e9:7e:6a:a4:50:a6:2a:e8:56:83:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:04:58 2024 GMT Not After : Mar 4 18:09:58 2025 GMT Subject: CN=23465A56152FA1593E35DAA9CCBEAC1EBC37CF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:84:f4:70:4c:54:9b:54:35:b1:83:47:60: d3:58:b0:5b:5b:9a:d1:48:b0:a5:9d:d8:cb:31:51: 29:a3:62:9a:4f:ac:49:1c:f1:9c:89:ce:03:5d:fa: 8d:6d:a0:d3:40:13:12:00:4d:63:2d:78:9a:64:8a: 98:84:b9:61:19:6d:9a:5a:e6:dd:ff:79:1a:4b:92: 98:d9:6e:8c:c2:fd:3d:c6:c5:ea:1e:bc:6a:db:12: f2:5c:57:ab:a1:c5:6e:79:94:34:1c:b0:1c:b0:b0: 98:f2:b4:d8:ec:5f:cb:aa:15:13:cb:4a:a8:d5:5a: 3f:0f:ee:9b:9d:dc:59:b5:19:f6:a4:3e:31:dd:e0: bb:55:2e:a0:23:6c:6f:45:45:74:12:40:50:bb:78: 84:87:45:ca:c5:25:49:99:fb:f8:87:76:ae:f8:01: 4b:cf:87:9c:a4:c7:78:65:a3:e2:cb:a9:c6:40:17: 27:da:0d:a6:71:c1:cd:58:4a:3d:59:91:0f:d6:0f: 1e:93:b4:35:6a:7d:bf:e9:db:85:df:fb:f8:67:0b: cc:b3:54:ca:11:cf:43:3f:c5:29:ab:2d:61:7a:12: 07:e4:ae:88:0e:d5:c6:a6:1b:ea:6a:7b:31:ae:fc: 64:75:2d:87:03:c0:bd:f2:62:09:b5:04:c0:f3:60: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:46:5A:56:15:2F:A1:59:3E:35:DA:A9:CC:BE:AC:1E:BC:37:CF:31 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.225.0.0/16 192.100.156.0/24 200.23.111.0/24 207.249.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4493 Signature Algorithm: sha256WithRSAEncryption 4f:04:d6:66:a5:f6:58:70:c3:d6:66:ad:2d:b9:ce:68:cd:5b: a7:d6:1a:c7:9a:3b:23:2e:8c:75:78:51:9c:6c:4b:d9:30:7e: e6:12:84:8b:0f:41:76:51:95:5b:47:46:bf:84:45:f5:65:16: 5d:fe:af:66:23:fa:53:82:6d:a9:a1:85:e2:14:36:bf:32:99: 8a:27:93:16:52:98:3f:36:36:2b:01:90:bc:95:f1:64:b2:d8: 2d:c1:34:52:c7:6f:a9:89:a7:46:48:4f:15:00:3b:57:1f:95: 1d:e2:31:e8:b3:3e:23:72:ce:eb:02:d6:c0:b0:f2:d7:fd:22: 36:91:ba:0f:d4:53:d6:e3:f4:ae:98:d8:49:52:f6:b2:11:96: 52:1d:38:2b:7c:f5:ea:04:5e:38:9a:d0:85:62:a9:99:46:b3: dd:37:42:22:27:f4:df:66:98:7f:8d:2a:0d:92:34:1a:74:75: d6:59:c5:7c:03:33:e8:a5:b6:dd:05:7f:cd:c3:59:21:d0:a9: f2:85:72:2d:3d:21:93:ee:55:95:9c:aa:63:d6:ed:30:17:62: 5f:af:5b:af:6d:dd:f8:3f:33:43:02:ca:3c:73:af:cd:9d:3e: 58:0a:7b:01:29:57:c1:24:39:27:c0:66:0f:0c:ee:3e:53:c5: 1f:b2:92:07 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUBH3sWIdz9xdV6X5qpFCmKuhWg/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA0NThaFw0yNTAzMDQxODA5NThaMDMxMTAvBgNV BAMTKDIzNDY1QTU2MTUyRkExNTkzRTM1REFBOUNDQkVBQzFFQkMzN0NGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLYT0cExUm1Q1sYNHYNNYsFtb mtFIsKWd2MsxUSmjYppPrEkc8ZyJzgNd+o1toNNAExIATWMteJpkipiEuWEZbZpa 5t3/eRpLkpjZbozC/T3GxeoevGrbEvJcV6uhxW55lDQcsBywsJjytNjsX8uqFRPL SqjVWj8P7pud3Fm1GfakPjHd4LtVLqAjbG9FRXQSQFC7eISHRcrFJUmZ+/iHdq74 AUvPh5ykx3hlo+LLqcZAFyfaDaZxwc1YSj1ZkQ/WDx6TtDVqfb/p24Xf+/hnC8yz VMoRz0M/xSmrLWF6EgfkrogO1camG+pqezGu/GR1LYcDwL3yYgm1BMDzYLZXAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjRlpWFS+hWT41 2qnMvqwevDfPMTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTFBNkQ1QkRFQ0Q5QTk2NUEwMTQ3OTJE NzFFM0UzREVCNkRERjU4Q0JDRDczMzA0MjhFQjJDRjkwMjNCQUM1Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMUE2RDVCREVDRDlBOTY1QTAxNDc5MkQ3MUUzRTNERUI2RERGNThDQkNE NzMzMDQyOEVCMkNGOTAyM0JBQzVGLzAvMjM0NjVBNTYxNTJGQTE1OTNFMzVEQUE5 Q0NCRUFDMUVCQzM3Q0YzMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAlOEDBADAZJwD BADIF28DBAXP+cAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICEY0wDQYJKoZIhvcN AQELBQADggEBAE8E1mal9lhww9ZmrS25zmjNW6fWGseaOyMujHV4UZxsS9kwfuYS hIsPQXZRlVtHRr+ERfVlFl3+r2Yj+lOCbamhheIUNr8ymYonkxZSmD82NisBkLyV 8WSy2C3BNFLHb6mJp0ZITxUAO1cflR3iMeizPiNyzusC1sCw8tf9IjaRug/UU9bj 9K6Y2ElS9rIRllIdOCt89eoEXjia0IViqZlGs903QiIn9N9mmH+NKg2SNBp0ddZZ xXwDM+iltt0Ff83DWSHQqfKFci09IZPuVZWcqmPW7TAXYl+vW69t3fg/M0MCyjxz r82dPlgKewEpV8EkOSfAZg8M7j5TxR+ykgc= -----END CERTIFICATE-----Generated at Thu May 16 21:44:40 2024 by rpki-client on console-fra.rpki-client.org