$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.cer File: 53CA5061CB632457DD32703D6F65CBB700ADEBC2.cer (raw, json) Hash identifier: GGtU3zfQp8kpD0u+wDDZsgxEBetadhSIZoNw0NjRZHE= Subject key identifier: 53:CA:50:61:CB:63:24:57:DD:32:70:3D:6F:65:CB:B7:00:AD:EB:C2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5C4BC6C0025E94AC0299F0DEF73E19D3C233EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:15:38 +0000 Certificate not after: Tue 04 Mar 2025 18:20:38 +0000 Subordinate resources: AS: 264694 IP: 168.232.144.0/22 IP: 2803:e340::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4b:c6:c0:02:5e:94:ac:02:99:f0:de:f7:3e:19:d3:c2:33:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:15:38 2024 GMT Not After : Mar 4 18:20:38 2025 GMT Subject: CN=53CA5061CB632457DD32703D6F65CBB700ADEBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:be:6e:2a:4c:b3:ee:c7:d6:e0:39:61:d3: 58:13:42:88:2c:d6:67:73:5e:98:53:96:63:ba:37: 54:dd:7e:90:cb:a9:b5:57:4c:85:4d:9a:3a:e0:dc: 2d:48:ce:c4:c2:21:9a:3f:31:b7:0f:a8:b7:5a:bd: 3a:79:9b:d2:9f:9b:c9:9d:aa:d2:cf:ce:c6:9e:df: 47:22:a5:a6:43:b2:80:aa:da:94:06:fa:31:77:22: b1:44:e5:d9:e9:bb:4e:16:bd:e0:e6:07:7a:66:94: 3e:03:49:99:da:80:59:83:1f:e1:8f:c4:5f:5a:36: 89:30:dc:2e:a4:e3:27:0c:5f:82:6f:77:4d:28:5a: f5:ee:0c:8b:2f:4f:16:51:78:88:4a:77:09:7f:4c: 07:aa:36:c0:2c:91:54:26:39:e2:6d:c1:55:46:92: 39:3b:37:0c:61:a2:d9:f0:6c:9d:87:47:49:b5:d0: d9:a0:28:93:09:6b:eb:5a:a9:46:89:44:df:d5:83: 83:9f:4f:f4:af:f4:82:e0:56:a6:13:e2:0d:8c:13: 35:fd:75:1d:13:f1:7a:1f:cd:15:77:f3:69:31:9e: da:6d:f3:28:65:94:fc:94:e8:43:b5:4e:92:b5:7e: 5f:c5:74:1d:04:d4:24:35:30:75:78:bc:1a:e7:aa: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:CA:50:61:CB:63:24:57:DD:32:70:3D:6F:65:CB:B7:00:AD:EB:C2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92CFFAEF0472FB020804EE99C456E94E5C10EE6DA5A5265EFDD265D917BF7885/0/53CA5061CB632457DD32703D6F65CBB700ADEBC2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.144.0/22 IPv6: 2803:e340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264694 Signature Algorithm: sha256WithRSAEncryption e2:6e:73:47:26:69:33:f4:4d:c0:ef:7a:8d:9f:2a:70:24:39: 7c:51:1e:1a:ce:73:b7:e1:0d:91:79:ab:32:91:10:7a:bf:40: a0:99:d8:a5:5d:b1:69:14:9e:0b:27:20:39:57:db:bd:7f:db: b0:ac:2d:ea:0f:36:8a:13:c8:39:e2:d0:ea:b8:61:19:52:7b: 49:62:db:f9:24:00:fc:4f:86:af:26:3f:df:a9:f5:b1:34:38: b7:58:4f:46:cc:3e:8a:ab:0c:e6:c8:dd:90:5d:dd:0d:e9:d5: e8:a4:02:0a:a0:11:ce:24:ac:97:8d:3f:03:11:32:75:e8:ff: 51:a5:12:30:36:50:47:1a:65:31:53:4d:58:55:f2:90:d4:47: ea:ea:a9:17:65:89:32:ce:05:f6:2a:f8:18:03:83:14:cb:82: 22:c6:68:96:34:71:e0:0f:4e:09:58:0c:cb:40:51:f3:c7:23: 6b:ae:2d:fd:c1:07:19:c4:ec:96:45:1f:34:cd:cd:24:23:e9: af:44:98:9a:61:2d:da:58:f3:2f:fd:c4:f9:58:8d:5f:84:f1: e3:75:b7:a8:d8:4b:b2:23:e6:a4:5d:60:c7:4d:fa:c4:1e:3b: d0:06:75:06:ea:0d:43:9d:f8:ef:23:18:25:32:e1:69:05:89: 95:34:d8:e7 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgITXEvGwAJelKwCmfDe9z4Z08Iz7jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI0MDMwNTE4MTUzOFoXDTI1MDMwNDE4MjAzOFowMzExMC8GA1UE AxMoNTNDQTUwNjFDQjYzMjQ1N0REMzI3MDNENkY2NUNCQjcwMEFERUJDMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALqCvm4qTLPux9bgOWHTWBNCiCzW Z3NemFOWY7o3VN1+kMuptVdMhU2aOuDcLUjOxMIhmj8xtw+ot1q9Onmb0p+byZ2q 0s/Oxp7fRyKlpkOygKralAb6MXcisUTl2em7Tha94OYHemaUPgNJmdqAWYMf4Y/E X1o2iTDcLqTjJwxfgm93TSha9e4Miy9PFlF4iEp3CX9MB6o2wCyRVCY54m3BVUaS OTs3DGGi2fBsnYdHSbXQ2aAokwlr61qpRolE39WDg59P9K/0guBWphPiDYwTNf11 HRPxeh/NFXfzaTGe2m3zKGWU/JToQ7VOkrV+X8V0HQTUJDUwdXi8Gueq8VkCAwEA AaOCA68wggOrMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFPKUGHLYyRX3TJw PW9ly7cArevCMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy85MkNGRkFFRjA0NzJGQjAyMDgwNEVFOTlD NDU2RTk0RTVDMTBFRTZEQTVBNTI2NUVGREQyNjVEOTE3QkY3ODg1LzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzkyQ0ZGQUVGMDQ3MkZCMDIwODA0RUU5OUM0NTZFOTRFNUMxMEVFNkRBNUE1 MjY1RUZERDI2NUQ5MTdCRjc4ODUvMC81M0NBNTA2MUNCNjMyNDU3REQzMjcwM0Q2 RjY1Q0JCNzAwQURFQkMyLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKo6JAwDQQCAAIw BwMFACgD40AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAn2MA0GCSqGSIb3DQEB CwUAA4IBAQDibnNHJmkz9E3A73qNnypwJDl8UR4aznO34Q2ReasykRB6v0Cgmdil XbFpFJ4LJyA5V9u9f9uwrC3qDzaKE8g54tDquGEZUntJYtv5JAD8T4avJj/fqfWx NDi3WE9GzD6KqwzmyN2QXd0N6dXopAIKoBHOJKyXjT8DETJ16P9RpRIwNlBHGmUx U01YVfKQ1Efq6qkXZYkyzgX2KvgYA4MUy4IixmiWNHHgD04JWAzLQFHzxyNrri39 wQcZxOyWRR80zc0kI+mvRJiaYS3aWPMv/cT5WI1fhPHjdbeo2EuyI+akXWDHTfrE HjvQBnUG6g1DnfjvIxglMuFpBYmVNNjn -----END CERTIFICATE-----Generated at Fri May 31 20:32:54 2024 by rpki-client on console-ams.rpki-client.org