$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer File: 3097EEAE62A8D1441BC16E818D96E6882345B703.cer (raw, json) Hash identifier: 4BTGY5XfJxbZ8ATgER2dEMzcdpOaVn8ysyeu7uLdwqU= Subject key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 141934B64DCA433BAC8E6BF766818EEBD12B5771 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:53:32 +0000 Certificate not after: Tue 04 Mar 2025 17:58:32 +0000 Subordinate resources: AS: 28096 IP: 190.9.56.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:19:34:b6:4d:ca:43:3b:ac:8e:6b:f7:66:81:8e:eb:d1:2b:57:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:53:32 2024 GMT Not After : Mar 4 17:58:32 2025 GMT Subject: CN=3097EEAE62A8D1441BC16E818D96E6882345B703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:7a:ef:0d:74:e6:42:74:4d:a0:79:fd:68: 5c:e3:38:30:e5:91:29:81:9f:5c:11:22:c8:8f:ce: b2:8a:6c:a6:e5:cc:a2:da:61:03:ed:55:71:60:03: 0f:b8:40:a5:7b:5b:7d:38:8c:bb:55:a0:ed:da:35: 92:ac:b9:6f:f1:4d:d3:8e:c1:c4:3a:1f:9e:a2:70: 69:08:1f:91:e6:42:97:e0:bd:f9:a6:09:7b:1e:2e: cf:a6:2e:71:47:86:ed:c7:fc:ad:0c:8d:06:ab:e0: 64:34:e9:30:65:6e:02:64:bb:90:cd:0e:8c:31:bc: 7e:91:bb:01:35:1b:23:3a:e9:e9:68:5c:4d:1b:02: 7c:21:84:a3:ec:fb:89:23:3f:62:77:b5:5b:6a:cf: e6:53:b6:9b:76:45:b4:bf:36:b8:38:eb:db:a9:e1: 6f:3b:3f:23:a4:80:91:d7:04:dc:a6:15:11:b7:a7: 17:3e:bb:e6:ca:92:04:4e:ff:ac:2c:0b:bd:c3:18: 51:df:56:50:f1:18:22:37:92:83:c2:fa:5c:f3:fc: 8a:f1:3a:64:40:59:ff:09:ac:5a:b0:74:30:ca:b6: 54:86:90:48:f0:72:6b:c3:ef:ea:9e:ad:17:01:ef: 6b:c5:23:4f:ec:03:d2:9a:3a:45:c3:23:2a:32:54: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.56.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28096 Signature Algorithm: sha256WithRSAEncryption 54:5d:c8:0c:d7:43:1b:48:b0:36:6f:a1:96:ab:e7:f7:2f:15: 91:f0:b3:89:05:28:ba:a3:33:7c:f1:48:da:43:15:cc:23:9c: ef:17:54:5c:b4:e1:d6:0c:4f:e5:9f:9d:53:b0:94:f6:29:93: 8d:5d:34:2b:c9:cd:26:60:1c:6d:11:fe:f9:e1:92:04:9e:62: 90:57:2b:c8:f9:52:cc:4a:40:50:87:da:85:dd:4d:cc:e3:3e: 8c:f2:9b:c1:62:5a:2b:a7:0c:1d:be:f9:c6:56:02:72:75:b8: 8e:9c:92:7e:ff:e7:80:bd:e5:3c:8a:ce:9d:09:a4:10:da:97: fe:d2:2b:10:df:ee:47:a9:2c:15:31:44:c2:9d:35:b4:4f:e5: 48:17:cf:fb:40:99:81:22:3b:90:b5:e1:23:6a:59:65:bf:05: f9:71:d2:9d:61:e5:59:82:69:54:df:78:fe:29:2f:cf:d0:3e: e5:f0:ed:f0:09:98:9a:37:ca:b1:e7:b9:86:e6:0d:55:49:0a: c0:57:43:70:d1:7e:f7:81:23:10:e4:b7:0d:5a:bd:ea:29:ae: 0e:f2:2b:31:64:02:63:ad:c0:c1:bc:49:66:52:a1:37:0c:40: 40:9b:b9:30:6c:d5:75:a5:1e:b6:f7:75:51:68:a2:0f:dc:36: 08:31:b6:4c -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUFBk0tk3KQzusjmv3ZoGO69ErV3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUzMzJaFw0yNTAzMDQxNzU4MzJaMDMxMTAvBgNV BAMTKDMwOTdFRUFFNjJBOEQxNDQxQkMxNkU4MThEOTZFNjg4MjM0NUI3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Z3rvDXTmQnRNoHn9aFzjODDl kSmBn1wRIsiPzrKKbKblzKLaYQPtVXFgAw+4QKV7W304jLtVoO3aNZKsuW/xTdOO wcQ6H56icGkIH5HmQpfgvfmmCXseLs+mLnFHhu3H/K0MjQar4GQ06TBlbgJku5DN DowxvH6RuwE1GyM66eloXE0bAnwhhKPs+4kjP2J3tVtqz+ZTtpt2RbS/Nrg469up 4W87PyOkgJHXBNymFRG3pxc+u+bKkgRO/6wsC73DGFHfVlDxGCI3koPC+lzz/Irx OmRAWf8JrFqwdDDKtlSGkEjwcmvD7+qerRcB72vFI0/sA9KaOkXDIyoyVCMfAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwl+6uYqjRRBvB boGNluaII0W3AzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzBCOUQxMTFDMzY3QzU3QzEzRTJDMjZC NjFFQjlGMDVGNjYyQjIzQkU1M0Y5RTc5MzgxMERFMTYxMTU2NkQ2Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMEI5RDExMUMzNjdDNTdDMTNFMkMyNkI2MUVCOUYwNUY2NjJCMjNCRTUz RjlFNzkzODEwREUxNjExNTY2RDZDLzAvMzA5N0VFQUU2MkE4RDE0NDFCQzE2RTgx OEQ5NkU2ODgyMzQ1QjcwMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvgk4MBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3AMA0GCSqGSIb3DQEBCwUAA4IBAQBUXcgM10Mb SLA2b6GWq+f3LxWR8LOJBSi6ozN88UjaQxXMI5zvF1RctOHWDE/ln51TsJT2KZON XTQryc0mYBxtEf754ZIEnmKQVyvI+VLMSkBQh9qF3U3M4z6M8pvBYlorpwwdvvnG VgJydbiOnJJ+/+eAveU8is6dCaQQ2pf+0isQ3+5HqSwVMUTCnTW0T+VIF8/7QJmB IjuQteEjalllvwX5cdKdYeVZgmlU33j+KS/P0D7l8O3wCZiaN8qx57mG5g1VSQrA V0Nw0X73gSMQ5LcNWr3qKa4O8isxZAJjrcDBvElmUqE3DEBAm7kwbNV1pR6293VR aKIP3DYIMbZM -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:59 2024 by rpki-client on console-fra.rpki-client.org