$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer File: 3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer (raw, json) Hash identifier: nDIl+pf0oaLQnbHdxEPK47o0u38BRFyUY9PmQJhRyvo= Subject key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0CF02525EADE4F977E0F196B7F52636A3EA9A3DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:01:30 +0000 Certificate not after: Tue 04 Mar 2025 18:06:30 +0000 Subordinate resources: AS: 269809 IP: 45.191.4.0/22 IP: 2803:c4e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f0:25:25:ea:de:4f:97:7e:0f:19:6b:7f:52:63:6a:3e:a9:a3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:01:30 2024 GMT Not After : Mar 4 18:06:30 2025 GMT Subject: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:e3:a5:d0:c2:ee:ac:dc:49:db:93:11:7a: 2d:7d:44:be:41:6b:59:a9:a1:da:0d:5d:16:f9:0e: 57:61:af:0a:5b:b4:2c:6c:81:3a:89:38:34:cb:e5: 74:bb:a6:fa:a0:89:34:c0:ec:4b:70:05:ee:24:53: 23:c9:7e:76:af:67:eb:92:93:ff:a3:0f:89:14:f4: 1c:5d:a4:81:4a:63:6a:09:89:97:a0:24:b5:6c:fc: 26:06:a3:f1:75:df:df:b3:7b:50:d6:d6:79:18:f6: 98:56:ac:6f:65:31:56:c2:a0:8a:04:fa:b8:27:94: 03:43:3f:47:ed:84:aa:b3:56:59:e1:7e:91:6d:3b: ae:42:80:86:1b:1c:52:58:3a:02:cc:17:95:8d:de: 4b:9b:50:ef:15:5c:6b:31:e1:02:14:10:5b:e4:44: 29:4d:15:a0:86:f9:61:cc:77:3b:92:ce:59:5f:f3: c5:44:8a:77:81:29:15:8a:54:9c:1a:5e:62:47:8f: c8:c3:d1:e2:ac:e2:2e:d5:89:da:39:87:10:24:f5: 66:b8:bf:6a:0e:ff:23:cf:7d:58:85:6c:40:d7:ba: a1:be:5a:a3:2b:2c:f6:67:85:a9:84:71:b0:c8:3e: 6e:3a:2f:7b:7c:05:8b:bb:20:2c:1f:97:8d:dd:77: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.4.0/22 IPv6: 2803:c4e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269809 Signature Algorithm: sha256WithRSAEncryption b2:4c:f2:d8:2c:b7:05:e5:7b:00:30:42:37:ea:32:13:5c:a0: f5:df:73:5e:dc:3c:02:fd:3d:13:60:1a:0d:5d:d1:7a:0d:3c: f5:65:cc:de:ed:6d:b9:ee:5c:2b:b1:87:f2:70:3d:98:ea:c0: f2:14:c8:42:9c:77:84:9a:8c:06:59:80:5d:77:0b:23:81:d0: 4a:e9:74:ad:85:db:1c:9f:02:4e:b9:8f:91:07:c5:a0:d1:50: e2:9f:e0:f5:82:d0:69:96:0d:b4:fb:a2:45:ba:9b:4c:cb:29: 9d:06:e4:bd:32:13:70:d0:ba:51:bc:df:c3:44:13:36:64:62: 12:72:4f:a0:95:3c:66:b0:e4:46:ba:f4:99:d0:4f:5d:84:72: 06:81:43:3e:ff:7b:26:97:fc:84:bc:d8:69:83:a4:5d:b2:f4: 25:64:d6:2b:77:f7:3d:37:85:84:f0:3f:72:a7:eb:60:19:74: e1:ef:31:1e:54:8b:bd:3e:72:93:4a:33:c8:05:aa:d0:66:24: a0:99:a1:42:57:1a:93:27:bf:fb:15:d0:5f:01:81:c7:57:c5: 37:68:77:cc:2e:8f:25:f7:ba:23:e3:89:e9:de:e2:a6:2d:3e: 6b:3d:5a:99:57:a5:c0:96:63:b3:0e:50:b6:5e:96:1d:f1:b3: 20:70:38:ff -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUDPAlJereT5d+Dxlrf1Jjaj6po90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODAxMzBaFw0yNTAzMDQxODA2MzBaMDMxMTAvBgNV BAMTKDNENzcyMzdBN0M5QjIxOTZEMTcxNDZCN0ZERDhDMDMxQkU4MURCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2+Ol0MLurNxJ25MRei19RL5B a1mpodoNXRb5DldhrwpbtCxsgTqJODTL5XS7pvqgiTTA7EtwBe4kUyPJfnavZ+uS k/+jD4kU9BxdpIFKY2oJiZegJLVs/CYGo/F139+ze1DW1nkY9phWrG9lMVbCoIoE +rgnlANDP0fthKqzVlnhfpFtO65CgIYbHFJYOgLMF5WN3kubUO8VXGsx4QIUEFvk RClNFaCG+WHMdzuSzllf88VEineBKRWKVJwaXmJHj8jD0eKs4i7Vido5hxAk9Wa4 v2oO/yPPfViFbEDXuqG+WqMrLPZnhamEcbDIPm46L3t8BYu7ICwfl43dd7FvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9dyN6fJshltFx Rrf92MAxvoHb9DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDU4NEMwQTc5RDI2Mzc1OEFEMzY2QUJD NzBBRUU1OTVDQ0FBQ0I0MUE2RjZBOUM3NzM0NzM5NkFBODNGQkJBRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNTg0QzBBNzlEMjYzNzU4QUQzNjZBQkM3MEFFRTU5NUNDQUFDQjQxQTZG NkE5Qzc3MzQ3Mzk2QUE4M0ZCQkFGLzAvM0Q3NzIzN0E3QzlCMjE5NkQxNzE0NkI3 RkREOEMwMzFCRTgxREJGNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb8EMA0EAgAC MAcDBQAoA8TgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd8TANBgkqhkiG9w0B AQsFAAOCAQEAskzy2Cy3BeV7ADBCN+oyE1yg9d9zXtw8Av09E2AaDV3Reg089WXM 3u1tue5cK7GH8nA9mOrA8hTIQpx3hJqMBlmAXXcLI4HQSul0rYXbHJ8CTrmPkQfF oNFQ4p/g9YLQaZYNtPuiRbqbTMspnQbkvTITcNC6Ubzfw0QTNmRiEnJPoJU8ZrDk Rrr0mdBPXYRyBoFDPv97Jpf8hLzYaYOkXbL0JWTWK3f3PTeFhPA/cqfrYBl04e8x HlSLvT5yk0ozyAWq0GYkoJmhQlcakye/+xXQXwGBx1fFN2h3zC6PJfe6I+OJ6d7i pi0+az1amVelwJZjsw5Qtl6WHfGzIHA4/w== -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:07 2024 by rpki-client on console-fra.rpki-client.org