$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer File: 3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer (raw, json) Hash identifier: dYn+eCLN2lIdFmoajmZkedYprW+UVd6EFodJ37rfhQA= Subject key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 418B4AA9F20E82BE60A94808C3E28C1C8A8DEE01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:40:35 +0000 Certificate not after: Tue 04 Mar 2025 17:45:35 +0000 Subordinate resources: AS: 272854 IP: 2803:c290::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8b:4a:a9:f2:0e:82:be:60:a9:48:08:c3:e2:8c:1c:8a:8d:ee:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:40:35 2024 GMT Not After : Mar 4 17:45:35 2025 GMT Subject: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:6e:bf:28:7c:21:25:f0:52:10:6c:2b:5b: 1a:99:1e:6c:5c:4c:ca:cb:12:3a:cc:b3:07:38:08: 68:81:27:27:c2:ff:f8:89:7a:54:1f:bd:6a:8f:bf: c7:12:42:95:1b:7e:73:7a:a8:0b:95:7a:f2:7e:05: 69:7b:e3:11:c6:27:e6:b7:bb:f8:5d:05:80:6c:b2: f4:11:4a:62:12:47:4d:be:f5:bf:0c:d3:b7:f7:29: ee:b4:ef:79:cd:1d:5e:af:75:4e:4e:0d:bd:ea:97: 54:1d:55:5d:cc:12:04:ec:cf:08:f3:fc:96:aa:bb: a7:9d:ee:31:65:9a:a8:61:fb:29:d2:60:6d:30:e7: 27:ab:59:ba:27:45:47:ef:c5:e3:c9:ea:50:53:ef: ac:df:1c:ab:18:b4:5e:22:e6:26:64:6e:84:d7:c4: 4d:9e:48:3f:ae:d0:77:77:24:42:f1:7c:b7:1c:6b: 4c:7f:c2:99:70:72:8f:a3:a9:ac:c8:52:1b:29:e5: 3c:9d:ac:c6:e5:df:f9:79:7b:d7:5b:86:71:2f:97: c1:43:bc:3b:21:e1:a4:7c:69:2b:60:c6:4b:dc:cd: bc:7b:4a:b0:b4:a0:ca:34:79:13:30:9f:93:11:fe: 7a:af:24:a2:49:f9:73:37:79:71:2f:bc:2c:63:e1: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c290::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272854 Signature Algorithm: sha256WithRSAEncryption 8a:3a:39:52:83:2f:82:a7:42:9e:a4:5d:26:fc:38:60:98:53: 96:ea:6d:ff:49:a3:f8:bd:05:b6:a8:d3:92:4b:da:8a:14:d1: c8:72:c1:92:a1:b6:64:54:d4:bc:1f:ac:c9:53:ff:92:20:33: 13:e0:15:1d:07:4a:e1:62:d5:7b:b4:45:88:06:dc:c3:aa:6d: 3f:0e:3b:15:f3:f7:66:16:82:ac:ae:05:f6:53:76:38:f0:fa: 7b:7c:85:8c:1a:ca:62:7c:44:fc:0c:dd:91:a7:66:7f:ed:91: 20:87:b5:ac:8f:d7:7d:c6:10:de:91:e7:8b:a9:9a:1d:64:d1: dd:29:1e:ed:ce:48:10:1b:17:ea:1d:f6:22:71:7e:7a:4e:38: c1:1d:2e:24:f9:82:f8:78:f2:74:6d:4c:e4:24:d6:b8:cc:bf: 66:b5:a3:e6:34:89:8c:d8:fe:bf:6e:c8:44:76:ef:20:05:0c: d5:47:96:f4:be:8d:a7:77:53:79:cc:f9:77:44:15:f4:98:93: a7:a1:4d:38:a6:23:0a:5d:14:09:28:e2:e5:52:4f:28:57:38: ce:76:c2:a8:b8:fc:6d:28:6d:39:05:ff:ef:c5:d8:cd:e9:2d: e6:80:f8:51:95:ef:98:cf:9c:b1:67:c3:0e:99:6b:a2:1c:e0: fb:0a:27:a1 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQYtKqfIOgr5gqUgIw+KMHIqN7gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQwMzVaFw0yNTAzMDQxNzQ1MzVaMDMxMTAvBgNV BAMTKDNDNUJFRTFCOUVEQjhDMTc0MzJCMkQ5REVDMzEwRUEzMDE1OTg2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HG6/KHwhJfBSEGwrWxqZHmxc TMrLEjrMswc4CGiBJyfC//iJelQfvWqPv8cSQpUbfnN6qAuVevJ+BWl74xHGJ+a3 u/hdBYBssvQRSmISR02+9b8M07f3Ke6073nNHV6vdU5ODb3ql1QdVV3MEgTszwjz /Jaqu6ed7jFlmqhh+ynSYG0w5yerWbonRUfvxePJ6lBT76zfHKsYtF4i5iZkboTX xE2eSD+u0Hd3JELxfLcca0x/wplwco+jqazIUhsp5TydrMbl3/l5e9dbhnEvl8FD vDsh4aR8aStgxkvczbx7SrC0oMo0eRMwn5MR/nqvJKJJ+XM3eXEvvCxj4T49AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8W+4bntuMF0Mr LZ3sMQ6jAVmGRzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjFBMDhEMjFGRURBNTFDNDJDREFGMkQ0 RUQ2RUQyMTVBOTQ2N0VBRTE1NTlBQUYyNjIxNjJFMkFGQkE1OTZCMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MUEwOEQyMUZFREE1MUM0MkNEQUYyRDRFRDZFRDIxNUE5NDY3RUFFMTU1 OUFBRjI2MjE2MkUyQUZCQTU5NkIwLzAvM0M1QkVFMUI5RURCOEMxNzQzMkIyRDlE RUMzMTBFQTMwMTU5ODY0Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPCkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKdYwDQYJKoZIhvcNAQELBQADggEBAIo6OVKD L4KnQp6kXSb8OGCYU5bqbf9Jo/i9Bbao05JL2ooU0chywZKhtmRU1LwfrMlT/5Ig MxPgFR0HSuFi1Xu0RYgG3MOqbT8OOxXz92YWgqyuBfZTdjjw+nt8hYwaymJ8RPwM 3ZGnZn/tkSCHtayP133GEN6R54upmh1k0d0pHu3OSBAbF+od9iJxfnpOOMEdLiT5 gvh48nRtTOQk1rjMv2a1o+Y0iYzY/r9uyER27yAFDNVHlvS+jad3U3nM+XdEFfSY k6ehTTimIwpdFAko4uVSTyhXOM52wqi4/G0obTkF/+/F2M3pLeaA+FGV75jPnLFn ww6Za6Ic4PsKJ6E= -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:55 2024 by rpki-client on console-fra.rpki-client.org