$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer File: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer (raw, json) Hash identifier: BTjOy39CRB1Y3uMFCuYitD7R51SYaH49SNsQ5KR0mDY= Subject key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 648B2049A3E610F66EEBA4705FEE598440784B65 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:44:17 +0000 Certificate not after: Tue 04 Mar 2025 17:49:17 +0000 Subordinate resources: AS: 264630 IP: 200.106.248.0/21 IP: 2801:0:190::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 30 May 2024 00:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8b:20:49:a3:e6:10:f6:6e:eb:a4:70:5f:ee:59:84:40:78:4b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:44:17 2024 GMT Not After : Mar 4 17:49:17 2025 GMT Subject: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:7a:b6:8e:f0:80:5e:67:be:5b:34:17:88: 1b:fe:6a:76:c6:b6:1c:84:3a:14:51:3c:aa:be:a9: 7e:dd:18:4a:7f:e8:88:66:b5:d1:92:5a:a7:bc:e0: 74:85:09:0e:9a:f3:f3:b2:77:be:64:e8:9a:5c:dc: 23:ac:35:a9:90:d6:4d:b8:a7:e4:63:dc:fb:12:6c: ad:18:5b:ad:ea:54:7b:da:64:40:a8:8c:ef:c1:18: 7d:29:f0:59:71:21:f5:85:1d:55:f3:76:f3:60:ac: 08:98:5c:1c:46:af:12:0f:b2:7a:8a:4f:2b:01:69: dc:41:be:11:a8:72:c4:c6:cd:fe:33:76:d9:80:ab: aa:d0:8a:9f:90:61:33:b8:ad:f5:9f:f4:e5:9e:71: 3b:92:c4:2e:ea:3c:3c:b7:c2:32:f7:d8:8d:09:02: 9b:7a:54:a1:e1:2d:42:e0:77:9e:a9:34:2b:77:de: 1b:66:b4:f6:f3:56:d9:92:9d:1a:c6:d4:e2:f9:52: 3c:65:07:1a:fc:03:cf:a9:9d:16:bf:1f:53:c1:4a: 5f:d1:bb:24:e7:e1:54:9f:dd:30:fb:b9:b8:c8:ee: bf:b4:3d:18:c2:f9:f3:5a:84:a5:09:a7:f7:9e:66: 4d:bc:68:49:31:37:d1:b4:f1:8d:bd:de:5d:0d:77: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.106.248.0/21 IPv6: 2801:0:190::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264630 Signature Algorithm: sha256WithRSAEncryption 14:c1:3e:88:3f:6d:88:6a:e7:9a:d7:24:66:70:da:5f:ae:96: c0:60:61:2f:07:5c:ae:49:44:bd:6e:0d:56:7a:01:b3:a5:03: 89:e0:62:38:0e:f2:db:ad:96:d1:34:e7:1f:d7:b9:ca:09:aa: 6c:02:85:94:c1:a0:21:ce:c3:98:2c:63:37:4a:43:08:4f:d4: 5a:05:4c:3e:74:13:3b:f0:28:3b:e8:a8:f9:a8:22:8d:ee:0e: 0a:c9:44:e8:30:d8:ca:c5:60:a9:ae:12:03:1f:91:83:f4:db: af:28:77:2c:ed:10:29:d0:a6:93:5f:c5:3c:bc:3c:33:3b:47: 1a:cd:9c:8d:b8:d9:8c:de:0a:8d:34:fd:3b:51:37:d0:4d:ad: 34:fa:85:c4:c7:5d:c8:40:87:f5:9b:37:da:f3:56:c9:b7:21: f5:d0:ac:7e:40:cf:4e:82:72:64:32:b8:f0:df:c6:c1:4d:54: 84:6e:0d:fa:8b:c4:6f:da:8f:be:5a:9b:e6:7f:fe:3a:3e:f8: 57:54:52:0b:fe:0b:82:f6:65:ab:a5:9a:42:52:34:f4:7d:4e: 82:dd:c6:45:83:d2:0a:c6:53:69:86:8d:f7:77:ac:a6:8a:75: 5c:5c:8f:62:b1:a1:17:eb:56:6e:08:aa:ff:d0:fa:6e:e2:0d: 82:9f:7a:f2 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUZIsgSaPmEPZu66RwX+5ZhEB4S2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ0MTdaFw0yNTAzMDQxNzQ5MTdaMDMxMTAvBgNV BAMTKDI1RERERUMyQTgwNDRGNjg4QUE3OTlBNjYxMkM0MzRCMkFCRUE5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY23q2jvCAXme+WzQXiBv+anbG thyEOhRRPKq+qX7dGEp/6IhmtdGSWqe84HSFCQ6a8/Oyd75k6Jpc3COsNamQ1k24 p+Rj3PsSbK0YW63qVHvaZECojO/BGH0p8FlxIfWFHVXzdvNgrAiYXBxGrxIPsnqK TysBadxBvhGocsTGzf4zdtmAq6rQip+QYTO4rfWf9OWecTuSxC7qPDy3wjL32I0J Apt6VKHhLULgd56pNCt33htmtPbzVtmSnRrG1OL5UjxlBxr8A8+pnRa/H1PBSl/R uyTn4VSf3TD7ubjI7r+0PRjC+fNahKUJp/eeZk28aEkxN9G08Y293l0Nd0OrAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl3d7CqARPaIqn maZhLENLKr6peTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjE0OUMxQTYzRUExNDY4OUVBMDRGQUFG NjVFRENFOUQ1NzA2QTc2RDBGNjkwQzkzOTAzNjk2ODc4OERGMjkyRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMTQ5QzFBNjNFQTE0Njg5RUEwNEZBQUY2NUVEQ0U5RDU3MDZBNzZEMEY2 OTBDOTM5MDM2OTY4Nzg4REYyOTJGLzAvMjVERERFQzJBODA0NEY2ODhBQTc5OUE2 NjEyQzQzNEIyQUJFQTk3OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDyGr4MA8EAgAC MAkDBwAoAQAAAZAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAm2MA0GCSqGSIb3 DQEBCwUAA4IBAQAUwT6IP22Iauea1yRmcNpfrpbAYGEvB1yuSUS9bg1WegGzpQOJ 4GI4DvLbrZbRNOcf17nKCapsAoWUwaAhzsOYLGM3SkMIT9RaBUw+dBM78Cg76Kj5 qCKN7g4KyUToMNjKxWCprhIDH5GD9NuvKHcs7RAp0KaTX8U8vDwzO0cazZyNuNmM 3gqNNP07UTfQTa00+oXEx13IQIf1mzfa81bJtyH10Kx+QM9OgnJkMrjw38bBTVSE bg36i8Rv2o++Wpvmf/46PvhXVFIL/guC9mWrpZpCUjT0fU6C3cZFg9IKxlNpho33 d6yminVcXI9isaEX61ZuCKr/0Ppu4g2Cn3ry -----END CERTIFICATE-----Generated at Sun May 26 08:13:27 2024 by rpki-client on console-ams.rpki-client.org