$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer File: 3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer (raw, json) Hash identifier: dRMtJp4BfGPpkKhRfBfyU4ypOWbVgc5S3gnybgFPvio= Subject key identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 216883F5DDBA4DF58B51C4DCFD8543B2030DDBC5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:16:11 +0000 Certificate not after: Tue 04 Mar 2025 18:21:11 +0000 Subordinate resources: AS: 269962 IP: 190.111.160.0/22 IP: 2803:a6e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:68:83:f5:dd:ba:4d:f5:8b:51:c4:dc:fd:85:43:b2:03:0d:db:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:16:11 2024 GMT Not After : Mar 4 18:21:11 2025 GMT Subject: CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:7d:5f:4b:4d:ae:7e:36:18:f1:20:9d:64: bf:e8:ba:d2:e3:1e:4d:b7:af:dc:9f:35:9d:42:e1: 2d:c4:78:18:cf:d2:30:aa:54:a9:64:ec:f3:2a:f0: ff:bd:a9:c4:fb:90:5a:bd:8a:1b:c3:9f:f0:3a:16: 85:a8:e7:8f:89:ab:ba:0d:5d:02:e0:6c:7f:99:ca: c4:a8:ff:b7:b4:6c:8d:82:01:86:06:1a:90:d0:67: 3d:47:7c:20:3a:6e:66:f8:cd:77:23:14:54:1b:65: 76:b7:09:87:47:72:0e:9a:29:f5:61:3f:07:ce:3d: d0:92:91:30:91:9a:96:01:65:04:f0:03:67:7e:31: fc:c2:a8:b2:94:9f:50:79:f7:69:86:fb:51:76:e1: 7f:80:44:91:a2:9b:d2:c5:b9:8b:7f:b9:47:96:0e: 4e:a2:8a:e0:a1:16:c1:9e:fb:c2:d5:dd:a6:80:61: 7c:72:c1:96:b5:f8:f6:04:4f:bd:a3:96:ed:77:38: 2d:3e:a5:72:27:3f:6e:7f:12:52:64:df:57:b2:3a: 8b:8f:f7:4e:20:6a:c1:7c:53:57:2f:60:c9:bf:83: 6c:ff:b6:0c:75:94:51:9a:29:95:65:9c:15:6f:b3: 8f:4c:2b:71:8e:f4:41:2e:f0:f1:eb:02:b3:40:09: 8e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.160.0/22 IPv6: 2803:a6e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269962 Signature Algorithm: sha256WithRSAEncryption 37:15:ef:02:7d:c6:0b:f6:49:9a:51:c1:d0:a1:46:bb:88:9e: f1:d6:0d:4f:f4:f6:64:fe:f1:b0:99:80:70:07:9c:0e:b2:eb: 80:5c:55:6a:72:75:4b:76:e3:a3:89:35:73:25:8d:b8:1e:8e: 4f:bb:b9:17:1c:0e:4b:c2:8d:24:fa:f2:96:13:9d:f3:53:6e: bf:7e:c7:ad:42:3d:d6:3f:47:d9:c0:0e:bf:fd:41:77:9f:12: be:48:55:cd:43:07:63:b7:0c:e7:2f:ad:b6:0b:10:e0:7a:32: 2a:06:3f:87:da:79:25:77:cb:9e:e9:d3:16:3c:40:3c:a0:73: 3f:31:1f:8c:9a:79:ef:62:44:48:4e:52:68:30:cc:3a:0f:23: 6d:90:c5:0d:81:89:5b:03:b6:43:53:c6:9a:38:12:83:45:4b: b3:10:80:4b:be:8e:c0:fa:64:74:ca:ad:03:4b:7d:11:fd:70: 82:81:81:3e:b9:21:85:fb:2d:f7:38:96:4a:bc:e3:3b:5c:ae: 86:2e:96:67:48:06:f6:c4:d0:1c:d1:6b:8f:0f:ae:e4:16:e2: 76:06:cb:0a:20:d2:9d:1c:99:56:71:b3:b9:a0:76:84:a5:7f: 75:d4:54:ed:c6:09:50:f8:73:5b:f2:d8:08:b2:c8:c2:a7:a7: 47:6a:bb:74 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIWiD9d26TfWLUcTc/YVDsgMN28UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE2MTFaFw0yNTAzMDQxODIxMTFaMDMxMTAvBgNV BAMTKDNFMjc3N0FCOTJFRjVBQzZENTAyRTI5RjA5MkIyMUQ2QjFFOUQzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsln1fS02ufjYY8SCdZL/outLj Hk23r9yfNZ1C4S3EeBjP0jCqVKlk7PMq8P+9qcT7kFq9ihvDn/A6FoWo54+Jq7oN XQLgbH+ZysSo/7e0bI2CAYYGGpDQZz1HfCA6bmb4zXcjFFQbZXa3CYdHcg6aKfVh PwfOPdCSkTCRmpYBZQTwA2d+MfzCqLKUn1B592mG+1F24X+ARJGim9LFuYt/uUeW Dk6iiuChFsGe+8LV3aaAYXxywZa1+PYET72jlu13OC0+pXInP25/ElJk31eyOouP 904gasF8U1cvYMm/g2z/tgx1lFGaKZVlnBVvs49MK3GO9EEu8PHrArNACY7HAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+J3erku9axtUC 4p8JKyHWsenTtjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjJCMTQ4N0REMTFBQTdCQTMxMzg5QUFC RERFRjIxODFCMENGMENCRThGMDE1QTVBQjQ4MUE1NzRENzNEQjZENi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMkIxNDg3REQxMUFBN0JBMzEzODlBQUJEREVGMjE4MUIwQ0YwQ0JFOEYw MTVBNUFCNDgxQTU3NEQ3M0RCNkQ2LzAvM0UyNzc3QUI5MkVGNUFDNkQ1MDJFMjlG MDkyQjIxRDZCMUU5RDNCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvm+gMA0EAgAC MAcDBQAoA6bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeijANBgkqhkiG9w0B AQsFAAOCAQEANxXvAn3GC/ZJmlHB0KFGu4ie8dYNT/T2ZP7xsJmAcAecDrLrgFxV anJ1S3bjo4k1cyWNuB6OT7u5FxwOS8KNJPrylhOd81Nuv37HrUI91j9H2cAOv/1B d58SvkhVzUMHY7cM5y+ttgsQ4HoyKgY/h9p5JXfLnunTFjxAPKBzPzEfjJp572JE SE5SaDDMOg8jbZDFDYGJWwO2Q1PGmjgSg0VLsxCAS76OwPpkdMqtA0t9Ef1wgoGB Prkhhfst9ziWSrzjO1yuhi6WZ0gG9sTQHNFrjw+u5BbidgbLCiDSnRyZVnGzuaB2 hKV/ddRU7cYJUPhzW/LYCLLIwqenR2q7dA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:04 2024 by rpki-client on console-ams.rpki-client.org