$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer File: 3C3B7B469CAC485C79640430F65FB7E54F99A890.cer (raw, json) Hash identifier: 976Ps3r7LKYUtQSe7+MBs1lT2dkB+m0y7Xdl/pzMJyg= Subject key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 13FEFEF45B08B20E280EF4D0612EFA65CFD770B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:15:01 +0000 Certificate not after: Tue 04 Mar 2025 18:20:01 +0000 Subordinate resources: AS: 272026 IP: 167.250.236.0/23 IP: 177.11.254.0/23 IP: 2803:6510::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 May 2024 09:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fe:fe:f4:5b:08:b2:0e:28:0e:f4:d0:61:2e:fa:65:cf:d7:70:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:15:01 2024 GMT Not After : Mar 4 18:20:01 2025 GMT Subject: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:d9:02:1e:35:b7:9d:a4:2d:91:56:ff:9c: 39:e7:17:d0:22:d1:8e:fa:18:3d:bc:d8:a1:05:67: 27:50:2a:eb:cc:96:ee:41:8a:f3:99:de:93:b4:55: 13:05:7f:87:6f:73:0c:aa:d6:f7:17:30:8e:3f:ba: 44:74:52:41:fc:3f:28:16:6b:5f:61:23:15:13:5e: f7:df:6e:09:22:cd:a9:8f:a9:ca:42:81:e0:c2:cd: 0c:86:e2:ff:3d:6e:38:42:23:d3:d7:b7:c1:c8:c7: 55:b3:ed:2f:55:2e:b0:df:70:e5:ae:ad:89:83:ae: 3e:12:32:2c:95:c8:a8:76:d1:7b:b9:61:04:c7:79: d3:2e:42:b2:93:e1:b9:95:7e:65:40:a5:ff:8e:3b: 25:77:99:70:65:e9:d0:8d:f2:d4:9a:49:cb:fa:e5: 1c:c8:ad:4d:76:2f:22:18:fd:26:f9:51:b2:20:6b: c0:61:34:4e:7d:40:0a:dd:6c:f8:ae:46:59:57:d9: f6:7b:11:6b:aa:4c:97:9a:77:d0:4a:2c:7c:91:d0: 1e:ae:4a:4e:40:db:d1:ce:25:3d:3e:ed:2e:61:db: 5e:68:4e:40:23:31:fd:fd:d0:65:6b:5b:4c:a2:67: 12:9e:9e:73:7c:ea:8e:81:ed:96:25:d7:ff:84:12: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.236.0/23 177.11.254.0/23 IPv6: 2803:6510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272026 Signature Algorithm: sha256WithRSAEncryption 8b:7f:86:c3:b2:54:b4:cb:62:0e:0c:b5:b8:07:77:70:c1:e1: c2:08:06:7c:99:4a:9b:ee:6b:9a:bb:cf:fa:2b:16:85:a3:7f: 83:c4:f6:09:7f:a4:6d:72:49:67:46:6c:1a:dd:a9:28:fd:2d: 21:2d:0d:52:cb:50:40:1d:21:1a:61:4a:e9:26:cd:42:e1:24: f4:50:16:e4:ac:5e:42:95:84:34:88:6f:1d:9b:0b:0a:8e:16: 17:b3:8b:85:65:b0:50:a2:4c:02:8f:53:65:b8:aa:62:c9:a5: 32:26:36:1a:e7:37:70:cc:79:e5:ce:0e:49:0c:5e:3c:ab:d3: 72:42:01:4d:fe:18:53:cd:eb:ed:b1:8c:1c:90:f4:54:60:98: bf:61:d5:83:e3:f9:7d:2b:f8:00:f5:bd:87:0a:cd:48:0d:62: b4:2a:1f:3a:b9:7e:fc:76:3f:10:03:d4:f2:97:5e:74:5a:a0: 9a:65:65:11:be:aa:38:7e:0c:71:69:bf:78:6c:54:31:20:b6: 79:fc:e9:03:97:ac:58:04:06:d8:5d:d8:1e:08:39:b4:7f:59: c4:cd:ae:92:ee:0c:cf:06:85:53:cd:93:51:90:ef:0d:78:de: 99:7b:ba:a4:9b:a0:28:0e:62:a8:fa:03:22:b7:70:a6:eb:89: d4:8b:06:c9 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUE/7+9FsIsg4oDvTQYS76Zc/XcLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE1MDFaFw0yNTAzMDQxODIwMDFaMDMxMTAvBgNV BAMTKDNDM0I3QjQ2OUNBQzQ4NUM3OTY0MDQzMEY2NUZCN0U1NEY5OUE4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0dkCHjW3naQtkVb/nDnnF9Ai 0Y76GD282KEFZydQKuvMlu5BivOZ3pO0VRMFf4dvcwyq1vcXMI4/ukR0UkH8PygW a19hIxUTXvffbgkizamPqcpCgeDCzQyG4v89bjhCI9PXt8HIx1Wz7S9VLrDfcOWu rYmDrj4SMiyVyKh20Xu5YQTHedMuQrKT4bmVfmVApf+OOyV3mXBl6dCN8tSaScv6 5RzIrU12LyIY/Sb5UbIga8BhNE59QArdbPiuRllX2fZ7EWuqTJead9BKLHyR0B6u Sk5A29HOJT0+7S5h215oTkAjMf390GVrW0yiZxKennN86o6B7ZYl1/+EEvc7AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8O3tGnKxIXHlk BDD2X7flT5mokDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUI1MDkxMTE1QzFEQTAzMUI3OTJFQURG RjU0NDk4QUEzQUNBNTY2RUFGQzc3RjY1MEVFQjlCRjhDNjc3MDcyOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQjUwOTExMTVDMURBMDMxQjc5MkVBREZGNTQ0OThBQTNBQ0E1NjZFQUZD NzdGNjUwRUVCOUJGOEM2NzcwNzI4LzAvM0MzQjdCNDY5Q0FDNDg1Qzc5NjQwNDMw RjY1RkI3RTU0Rjk5QTg5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBp/rsAwQBsQv+ MA0EAgACMAcDBQAoA2UQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmmjANBgkq hkiG9w0BAQsFAAOCAQEAi3+Gw7JUtMtiDgy1uAd3cMHhwggGfJlKm+5rmrvP+isW haN/g8T2CX+kbXJJZ0ZsGt2pKP0tIS0NUstQQB0hGmFK6SbNQuEk9FAW5KxeQpWE NIhvHZsLCo4WF7OLhWWwUKJMAo9TZbiqYsmlMiY2Guc3cMx55c4OSQxePKvTckIB Tf4YU83r7bGMHJD0VGCYv2HVg+P5fSv4APW9hwrNSA1itCofOrl+/HY/EAPU8pde dFqgmmVlEb6qOH4McWm/eGxUMSC2efzpA5esWAQG2F3YHgg5tH9ZxM2uku4MzwaF U82TUZDvDXjemXu6pJugKA5iqPoDIrdwpuuJ1IsGyQ== -----END CERTIFICATE-----Generated at Tue May 21 20:05:45 2024 by rpki-client on console-ams.rpki-client.org