$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/340F738BBE0963168846CC0EBA641A4246C73DA2.cer File: 340F738BBE0963168846CC0EBA641A4246C73DA2.cer (raw, json) Hash identifier: 1BEcoV75AbS+fq6E8be4PavQJ8HpW89u4YSdoCn8Zyw= Subject key identifier: 34:0F:73:8B:BE:09:63:16:88:46:CC:0E:BA:64:1A:42:46:C7:3D:A2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 71584DB23C013802988CC4281BECBD8B481F2201 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/340F738BBE0963168846CC0EBA641A4246C73DA2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:46:30 +0000 Certificate not after: Tue 04 Mar 2025 17:51:30 +0000 Subordinate resources: AS: 28051 IP: 190.124.0.0/20 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:58:4d:b2:3c:01:38:02:98:8c:c4:28:1b:ec:bd:8b:48:1f:22:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:46:30 2024 GMT Not After : Mar 4 17:51:30 2025 GMT Subject: CN=340F738BBE0963168846CC0EBA641A4246C73DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:d6:51:c5:07:5a:a1:dd:1b:02:ba:00:c1: 85:61:f7:43:25:74:86:ea:65:b4:3e:f2:84:84:88: 42:15:e4:fe:ce:b9:30:2f:f2:bc:07:de:8c:26:9e: 0b:5c:ce:b6:ee:a9:9f:7b:5d:d7:14:0b:2a:88:f0: 49:43:d1:54:71:c6:a9:c4:6e:c4:56:2f:a0:9f:f5: b7:49:5b:7b:49:99:4f:45:3a:af:57:60:81:60:31: 7d:bd:5e:6e:90:4c:cc:69:ee:49:f7:6c:8b:2b:cc: 73:14:8d:43:28:d0:55:13:6b:ba:e0:32:6a:46:0c: 70:e3:f1:50:7c:40:bd:a1:eb:8e:16:da:bf:0c:22: 65:45:72:83:87:02:d4:2c:ae:b6:16:2e:50:03:b5: 74:ee:e9:99:f0:69:2b:47:f8:4b:f2:8c:ea:45:26: 35:17:5b:8f:cf:3b:4a:1a:e3:a7:1e:0a:44:84:07: ae:b0:f2:3d:49:9f:43:45:91:60:2c:a1:ea:58:f4: 7e:b5:2c:ce:05:bc:93:cc:d3:5f:4b:51:76:23:4e: 4c:79:d3:25:e8:58:ac:58:d6:1d:e2:8a:f4:3f:f1: 48:e7:85:c3:54:86:9b:72:e6:c9:74:63:d8:a8:91: 5c:5f:24:d0:1d:c7:e7:13:6c:96:d9:e4:8a:9b:5b: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:0F:73:8B:BE:09:63:16:88:46:CC:0E:BA:64:1A:42:46:C7:3D:A2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4FF28C2A9BCF30534EC68F72583E74EB84115B0740831C75BAE56ACB2A958E29/0/340F738BBE0963168846CC0EBA641A4246C73DA2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28051 Signature Algorithm: sha256WithRSAEncryption 79:c6:8a:53:d2:fa:e1:4e:5c:05:91:18:3d:7c:cf:64:ce:04: 33:59:36:87:32:3c:97:6b:c0:7f:b2:e5:b6:59:84:aa:e4:f0: 95:c9:5a:9a:5e:9e:53:a3:9d:7c:b1:93:e7:a2:7b:0e:6b:74: 68:f7:35:09:b1:39:27:62:12:9d:be:00:b9:48:83:fb:a4:1e: db:26:30:7c:a0:c9:bd:6c:28:33:49:45:d7:e5:e1:e2:a8:97: 11:e4:87:1e:f0:ca:b4:9d:6c:57:3d:8a:aa:1a:66:d8:a0:6c: a2:7b:83:8c:d9:76:98:c2:88:90:a8:b7:17:b9:fb:58:33:f9: 5b:0d:2e:90:80:cd:57:33:f2:2b:ed:60:5f:ba:8f:21:75:cc: 22:e6:94:3e:93:ba:be:67:92:d9:4f:35:43:cd:fa:b7:eb:d2: e0:d3:12:1a:e5:b3:55:c1:2d:2f:26:8d:67:30:77:cc:cd:ee: 10:a9:80:a7:2c:4f:dc:8e:0f:51:85:d9:b4:ed:6f:fe:bf:37: a1:e5:d7:70:d8:87:3d:48:3a:f3:8e:84:29:0f:50:0a:e3:25: 85:a2:93:b5:df:8c:a7:27:d8:e6:f1:61:f0:ee:3c:ad:d4:4c: 54:9c:b3:ca:5b:34:a4:e3:45:0c:eb:e8:a2:4a:c0:39:53:4d: df:f1:35:b7 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUcVhNsjwBOAKYjMQoG+y9i0gfIgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ2MzBaFw0yNTAzMDQxNzUxMzBaMDMxMTAvBgNV BAMTKDM0MEY3MzhCQkUwOTYzMTY4ODQ2Q0MwRUJBNjQxQTQyNDZDNzNEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+9ZRxQdaod0bAroAwYVh90Ml dIbqZbQ+8oSEiEIV5P7OuTAv8rwH3owmngtczrbuqZ97XdcUCyqI8ElD0VRxxqnE bsRWL6Cf9bdJW3tJmU9FOq9XYIFgMX29Xm6QTMxp7kn3bIsrzHMUjUMo0FUTa7rg MmpGDHDj8VB8QL2h644W2r8MImVFcoOHAtQsrrYWLlADtXTu6ZnwaStH+EvyjOpF JjUXW4/PO0oa46ceCkSEB66w8j1Jn0NFkWAsoepY9H61LM4FvJPM019LUXYjTkx5 0yXoWKxY1h3iivQ/8UjnhcNUhpty5sl0Y9iokVxfJNAdx+cTbJbZ5IqbW4adAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0D3OLvgljFohG zA66ZBpCRsc9ojAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEZGMjhDMkE5QkNGMzA1MzRFQzY4Rjcy NTgzRTc0RUI4NDExNUIwNzQwODMxQzc1QkFFNTZBQ0IyQTk1OEUyOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RkYyOEMyQTlCQ0YzMDUzNEVDNjhGNzI1ODNFNzRFQjg0MTE1QjA3NDA4 MzFDNzVCQUU1NkFDQjJBOTU4RTI5LzAvMzQwRjczOEJCRTA5NjMxNjg4NDZDQzBF QkE2NDFBNDI0NkM3M0RBMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnwAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm2TMA0GCSqGSIb3DQEBCwUAA4IBAQB5xopT0vrh TlwFkRg9fM9kzgQzWTaHMjyXa8B/suW2WYSq5PCVyVqaXp5To518sZPnonsOa3Ro 9zUJsTknYhKdvgC5SIP7pB7bJjB8oMm9bCgzSUXX5eHiqJcR5Ice8Mq0nWxXPYqq GmbYoGyie4OM2XaYwoiQqLcXuftYM/lbDS6QgM1XM/Ir7WBfuo8hdcwi5pQ+k7q+ Z5LZTzVDzfq369Lg0xIa5bNVwS0vJo1nMHfMze4QqYCnLE/cjg9Rhdm07W/+vzeh 5ddw2Ic9SDrzjoQpD1AK4yWFopO134ynJ9jm8WHw7jyt1ExUnLPKWzSk40UM6+ii SsA5U03f8TW3 -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:40 2024 by rpki-client on console-ams.rpki-client.org