$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/371E5A26C210869532E000462FB1803BC6DD1E13.cer File: 371E5A26C210869532E000462FB1803BC6DD1E13.cer (raw, json) Hash identifier: 9NY66kzrjHJevEFX/D+l5Er9tkRWK1Hd8bn9gjkXiIE= Subject key identifier: 37:1E:5A:26:C2:10:86:95:32:E0:00:46:2F:B1:80:3B:C6:DD:1E:13 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 086BAAB587756BC908E473BB8271BDDCD5FDF158 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/371E5A26C210869532E000462FB1803BC6DD1E13.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:54:48 +0000 Certificate not after: Tue 04 Mar 2025 17:59:48 +0000 Subordinate resources: AS: 264812 IP: 170.238.108.0/22 IP: 2803:acc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6b:aa:b5:87:75:6b:c9:08:e4:73:bb:82:71:bd:dc:d5:fd:f1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:54:48 2024 GMT Not After : Mar 4 17:59:48 2025 GMT Subject: CN=371E5A26C210869532E000462FB1803BC6DD1E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:0d:57:ca:13:36:d3:06:f2:86:bd:14:24: cf:7e:d8:78:4f:3d:48:9e:ab:f6:b2:31:36:33:d4: 37:ad:f6:69:49:c0:2e:1f:fa:d1:c5:d0:50:82:2a: 38:74:7e:dd:e3:40:8c:36:9a:0e:f1:ce:d9:04:5a: 59:70:af:ce:0e:b4:fe:07:f4:a0:a0:56:7a:86:17: f3:29:62:30:bf:2a:6d:69:7b:42:92:42:89:3e:74: ed:1e:6e:2d:40:15:10:66:8f:69:fc:f1:34:d8:05: d9:0d:da:82:31:b3:68:0a:a7:02:d7:74:9d:77:5e: 92:5c:b4:0d:04:d2:ee:1b:fa:b4:46:c7:ae:ae:ab: 8b:db:19:ad:6f:3f:8b:87:99:cb:3c:31:ff:1d:94: 81:a9:4d:a3:d7:52:16:d4:da:85:a5:1c:41:56:26: 5b:9e:6a:a9:0e:3f:79:7d:31:35:fd:16:e9:66:ad: fc:b0:4f:2d:d0:db:66:d5:c0:bf:76:83:5d:2a:cc: 2f:c7:72:a1:ba:dc:e5:6e:62:9b:7d:b5:1c:1d:71: 4d:46:17:de:50:8c:88:99:12:25:39:79:ec:a1:f1: c7:6f:53:16:a0:ce:0e:93:a5:f7:1f:86:18:d9:ba: 54:64:5a:56:74:ad:4d:a2:b3:b2:bd:29:cc:11:c6: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:1E:5A:26:C2:10:86:95:32:E0:00:46:2F:B1:80:3B:C6:DD:1E:13 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/371E5A26C210869532E000462FB1803BC6DD1E13.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.108.0/22 IPv6: 2803:acc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264812 Signature Algorithm: sha256WithRSAEncryption 6b:51:cf:63:a4:f1:40:3b:b5:f2:25:dd:e0:9b:68:e6:aa:a1: 9d:a4:c4:da:77:27:f4:52:35:29:40:14:32:00:2f:f8:de:93: 5e:b8:ba:5f:da:a8:9d:d5:7c:d5:be:72:79:ef:2d:68:2a:9c: 06:b5:d6:36:52:f0:55:46:1f:2b:ad:4b:72:b1:9a:83:de:53: 2b:96:f6:97:fd:38:0f:4e:b8:46:c6:22:8d:1d:64:01:2a:d6: 32:53:5f:e0:91:e4:fa:38:c7:78:65:ef:07:df:16:0b:14:ca: 7d:af:a7:fc:29:eb:81:c3:3f:ba:7c:72:70:81:87:21:1b:fb: 7c:30:0f:71:c8:09:a1:8e:4c:20:13:ea:d1:7e:32:15:f3:5c: 98:58:ab:f0:e2:a0:eb:a9:df:80:a6:ad:14:99:37:61:31:55: 14:34:84:cc:18:4d:5c:ba:66:51:62:c3:cd:9e:26:3f:09:7a: c9:3f:b7:f8:ad:6d:bf:14:ad:85:00:bc:15:75:3e:df:39:aa: 93:79:6d:b0:6f:43:94:4f:bd:4b:94:91:b7:95:e0:1d:87:ce: 39:d4:da:7e:75:eb:56:2e:50:0f:38:3d:94:59:0d:96:20:76: 43:b4:1f:4a:c0:59:b2:ab:aa:2c:86:0c:a3:4c:65:6c:f5:0c: 04:d9:b3:72 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCGuqtYd1a8kI5HO7gnG93NX98VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU0NDhaFw0yNTAzMDQxNzU5NDhaMDMxMTAvBgNV BAMTKDM3MUU1QTI2QzIxMDg2OTUzMkUwMDA0NjJGQjE4MDNCQzZERDFFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2A1XyhM20wbyhr0UJM9+2HhP PUieq/ayMTYz1Det9mlJwC4f+tHF0FCCKjh0ft3jQIw2mg7xztkEWllwr84OtP4H 9KCgVnqGF/MpYjC/Km1pe0KSQok+dO0ebi1AFRBmj2n88TTYBdkN2oIxs2gKpwLX dJ13XpJctA0E0u4b+rRGx66uq4vbGa1vP4uHmcs8Mf8dlIGpTaPXUhbU2oWlHEFW JlueaqkOP3l9MTX9FulmrfywTy3Q22bVwL92g10qzC/HcqG63OVuYpt9tRwdcU1G F95QjIiZEiU5eeyh8cdvUxagzg6TpfcfhhjZulRkWlZ0rU2is7K9KcwRxkULAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3HlomwhCGlTLg AEYvsYA7xt0eEzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDdBNzZERjAzREQxNzlDRkRCMEFDQTM5 QTc4N0NCNTgxQ0FBM0UzMEY0QkM5NDc4NjhDNUY0NjQyOEEyQTIyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EN0E3NkRGMDNERDE3OUNGREIwQUNBMzlBNzg3Q0I1ODFDQUEzRTMwRjRC Qzk0Nzg2OEM1RjQ2NDI4QTJBMjJDLzAvMzcxRTVBMjZDMjEwODY5NTMyRTAwMDQ2 MkZCMTgwM0JDNkREMUUxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqu5sMA0EAgAC MAcDBQAoA6zAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKbDANBgkqhkiG9w0B AQsFAAOCAQEAa1HPY6TxQDu18iXd4Jto5qqhnaTE2ncn9FI1KUAUMgAv+N6TXri6 X9qondV81b5yee8taCqcBrXWNlLwVUYfK61LcrGag95TK5b2l/04D064RsYijR1k ASrWMlNf4JHk+jjHeGXvB98WCxTKfa+n/CnrgcM/unxycIGHIRv7fDAPccgJoY5M IBPq0X4yFfNcmFir8OKg66nfgKatFJk3YTFVFDSEzBhNXLpmUWLDzZ4mPwl6yT+3 +K1tvxSthQC8FXU+3zmqk3ltsG9DlE+9S5SRt5XgHYfOOdTafnXrVi5QDzg9lFkN liB2Q7QfSsBZsquqLIYMo0xlbPUMBNmzcg== -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:47 2024 by rpki-client on console-fra.rpki-client.org