$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer File: 4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer (raw, json) Hash identifier: P4+LCj3ZgmiNrapA6uKF31rKbogqy7+TxMZ6wZAO2SY= Subject key identifier: 4E:62:43:32:9A:D8:C8:7B:DF:0F:CB:10:92:F7:B8:AA:F0:B1:A8:7D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 203C759A9E5341593FBD1E8BC52D96D3B7250CE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:50:00 +0000 Certificate not after: Tue 04 Mar 2025 17:55:00 +0000 Subordinate resources: AS: 263230 IP: 179.0.224.0/19 IP: 2803:f680::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 May 2024 09:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3c:75:9a:9e:53:41:59:3f:bd:1e:8b:c5:2d:96:d3:b7:25:0c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:50:00 2024 GMT Not After : Mar 4 17:55:00 2025 GMT Subject: CN=4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:39:6c:e4:c3:92:f0:eb:51:f4:ae:10:3b: f3:e0:76:b2:9c:ec:69:b7:a8:c6:d6:f3:4c:00:dd: ba:91:21:32:32:08:19:03:e1:0e:fe:c6:52:30:9e: da:83:f2:03:ac:9b:b4:d3:53:a7:c3:51:5a:b8:e5: 35:24:8d:0c:56:2e:79:6a:40:2b:e2:ed:e3:7d:4a: 1f:26:ba:16:12:50:b7:9b:68:a3:80:14:a4:e1:30: 00:8b:47:7b:6c:19:5f:0b:72:b7:08:4a:63:48:0a: 7f:4b:6e:db:95:dd:67:f8:22:60:b6:53:8f:b5:32: 68:c3:93:b7:c7:30:3b:23:e9:68:08:68:eb:dd:8a: 1c:a0:57:01:02:9f:a7:2b:0a:5c:04:bb:15:1c:30: df:3c:c6:5f:34:f7:f5:9e:d9:02:c7:27:8b:7d:76: 70:fd:ce:75:66:c3:5d:26:93:c4:c5:13:3c:8a:ca: db:6b:4f:f1:e5:3a:ec:9f:ae:aa:3d:7c:1e:de:e5: 63:11:a0:34:06:b3:0b:9f:f2:7a:3f:40:7f:42:00: 9b:1d:d8:01:b7:7b:96:8c:5b:bb:60:a0:25:ab:eb: e4:3b:45:42:f9:e3:6d:e9:35:eb:ba:f8:03:2d:db: d5:78:48:e5:ed:5f:38:1e:88:d8:07:d1:97:c6:80: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:62:43:32:9A:D8:C8:7B:DF:0F:CB:10:92:F7:B8:AA:F0:B1:A8:7D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.224.0/19 IPv6: 2803:f680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263230 Signature Algorithm: sha256WithRSAEncryption a3:38:8a:de:c2:51:dc:1e:fa:a5:0b:38:3c:45:98:23:87:27: 1f:6d:77:e9:53:9e:cb:a0:11:b1:c7:fa:1d:f5:85:7e:16:8c: b0:4b:ff:29:fb:15:c2:eb:58:ab:41:f1:36:93:64:ca:1b:e5: 31:c7:cf:0f:18:82:59:73:b5:66:5e:17:42:1e:ad:ce:2a:2c: ec:2e:cb:ae:e4:94:d6:fe:df:ff:d5:ab:93:be:ec:08:1b:30: 46:c3:70:75:a3:f2:ab:2c:5b:87:ed:47:cd:7c:62:72:5c:62: 81:6f:1d:91:54:32:36:27:b4:49:89:1d:f1:2d:97:b3:8d:c5: a5:80:a3:1e:95:a8:38:cd:bd:40:a0:a9:bd:11:f3:d1:9d:80: cd:b2:6f:3c:c4:7f:2f:40:39:bd:8d:fc:84:6e:db:fe:a5:a8: 1f:56:1b:dc:81:a4:63:53:25:6c:96:08:a7:b2:92:08:d1:92: 8b:3f:fc:db:90:69:5b:e8:c7:d0:ac:e2:6f:ab:26:37:99:0a: de:33:64:ff:97:5b:85:e9:06:bb:84:a9:62:85:cb:5c:5e:5b: 1a:bc:6d:aa:bf:2f:f1:9c:2a:42:fb:22:da:bc:5b:f0:ff:ea: 76:86:8a:90:e4:7a:05:71:2a:21:01:12:05:a3:45:9c:36:80: ce:d2:44:21 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIDx1mp5TQVk/vR6LxS2W07clDOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUwMDBaFw0yNTAzMDQxNzU1MDBaMDMxMTAvBgNV BAMTKDRFNjI0MzMyOUFEOEM4N0JERjBGQ0IxMDkyRjdCOEFBRjBCMUE4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48jls5MOS8OtR9K4QO/PgdrKc 7Gm3qMbW80wA3bqRITIyCBkD4Q7+xlIwntqD8gOsm7TTU6fDUVq45TUkjQxWLnlq QCvi7eN9Sh8muhYSULebaKOAFKThMACLR3tsGV8LcrcISmNICn9LbtuV3Wf4ImC2 U4+1MmjDk7fHMDsj6WgIaOvdihygVwECn6crClwEuxUcMN88xl809/We2QLHJ4t9 dnD9znVmw10mk8TFEzyKyttrT/HlOuyfrqo9fB7e5WMRoDQGswuf8no/QH9CAJsd 2AG3e5aMW7tgoCWr6+Q7RUL5423pNeu6+AMt29V4SOXtXzgeiNgH0ZfGgKaXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROYkMymtjIe98P yxCS97iq8LGofTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkFBOTc5NjMxNkU0NTIxN0Y2MTI4MzA1 MEVGMTg1NTU4ODJCQTE5MzBFRjI4MDA5NzI1NzcyMDU2Qjg0Rjc0Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQUE5Nzk2MzE2RTQ1MjE3RjYxMjgzMDUwRUYxODU1NTg4MkJBMTkzMEVG MjgwMDk3MjU3NzIwNTZCODRGNzRDLzAvNEU2MjQzMzI5QUQ4Qzg3QkRGMEZDQjEw OTJGN0I4QUFGMEIxQTg3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFswDgMA0EAgAC MAcDBQAoA/aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEPjANBgkqhkiG9w0B AQsFAAOCAQEAoziK3sJR3B76pQs4PEWYI4cnH2136VOey6ARscf6HfWFfhaMsEv/ KfsVwutYq0HxNpNkyhvlMcfPDxiCWXO1Zl4XQh6tzios7C7LruSU1v7f/9Wrk77s CBswRsNwdaPyqyxbh+1HzXxiclxigW8dkVQyNie0SYkd8S2Xs43FpYCjHpWoOM29 QKCpvRHz0Z2AzbJvPMR/L0A5vY38hG7b/qWoH1Yb3IGkY1MlbJYIp7KSCNGSiz/8 25BpW+jH0Kzib6smN5kK3jNk/5dbhekGu4SpYoXLXF5bGrxtqr8v8ZwqQvsi2rxb 8P/qdoaKkOR6BXEqIQESBaNFnDaAztJEIQ== -----END CERTIFICATE-----Generated at Tue May 21 16:49:20 2024 by rpki-client on console-fra.rpki-client.org