$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53D4F0BC875DC3586A091B51BD4FE92B29066E9B.cer File: 53D4F0BC875DC3586A091B51BD4FE92B29066E9B.cer (raw, json) Hash identifier: U3KGFwXI/tbGVEnJqkMJRolF2YUaqZUpXU47kd2cTuY= Subject key identifier: 53:D4:F0:BC:87:5D:C3:58:6A:09:1B:51:BD:4F:E9:2B:29:06:6E:9B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7F675129AE7AD5A04DB5E2A774C24DD81B355F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/53D4F0BC875DC3586A091B51BD4FE92B29066E9B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:37:53 +0000 Certificate not after: Tue 04 Mar 2025 17:42:53 +0000 Subordinate resources: AS: 262226 IP: 200.115.181.0/24 IP: 2801:0:340::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 29 Nov 2024 03:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:67:51:29:ae:7a:d5:a0:4d:b5:e2:a7:74:c2:4d:d8:1b:35:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:37:53 2024 GMT Not After : Mar 4 17:42:53 2025 GMT Subject: CN=53D4F0BC875DC3586A091B51BD4FE92B29066E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:2c:d3:17:0b:3d:ed:20:f3:40:eb:cc:0e: f7:61:3e:91:e3:23:f7:4c:e6:30:f6:fa:5c:19:ca: 01:37:b5:08:bc:83:47:e7:07:56:f5:9e:20:93:0e: 34:69:45:67:38:7c:2b:07:55:c0:75:87:a9:a5:64: e5:c5:cf:58:3d:df:84:15:1a:c5:a8:78:2b:0b:66: 23:e8:d8:ce:a4:43:97:31:4b:fc:ec:e2:37:4e:31: 37:fd:7d:88:03:9e:de:57:29:be:ed:c6:b2:28:94: 3f:93:5b:e1:69:04:b8:35:12:20:99:60:1a:bc:57: 10:69:d0:80:13:dd:82:e5:31:d4:f1:8d:1a:02:02: 84:c7:e2:59:0e:e6:bd:b4:bd:ab:91:fc:01:4f:bd: 33:25:34:12:51:84:6d:09:83:9d:3b:fc:aa:21:80: d0:ec:12:97:77:8e:6d:c5:ba:06:df:f0:ce:e8:ee: 93:f8:46:43:b8:c4:51:de:d2:e7:eb:de:b6:2f:04: 67:f2:64:cb:64:42:f9:98:35:55:39:20:8f:3f:51: ed:32:d3:02:44:f8:46:c6:d3:cd:7d:74:0d:39:f8: 58:18:2a:31:a3:ec:65:3b:aa:12:75:8a:10:28:ea: 11:7f:e6:8f:24:ce:61:75:8f:a9:97:43:89:d2:25: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:D4:F0:BC:87:5D:C3:58:6A:09:1B:51:BD:4F:E9:2B:29:06:6E:9B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/53D4F0BC875DC3586A091B51BD4FE92B29066E9B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.115.181.0/24 IPv6: 2801:0:340::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262226 Signature Algorithm: sha256WithRSAEncryption 66:3c:12:ea:23:24:5c:37:f2:8b:6a:40:78:90:d2:a7:d0:4b: d2:77:72:f7:af:b3:6a:2d:f9:a9:8f:39:73:81:2f:f3:93:d1: e9:cd:6b:12:40:01:9a:3c:19:70:36:c2:9c:21:bb:56:da:2b: 80:95:b2:2a:5a:56:8d:04:dc:02:fd:34:13:e6:3a:68:dd:22: 54:a0:d8:77:72:67:1f:fb:a5:a2:cf:8b:20:1a:7c:df:2f:af: 8c:b1:dc:aa:cc:08:d3:b6:eb:87:17:7b:5a:bc:d2:ac:1c:9f: 1e:27:0b:ee:9b:1f:e7:be:a6:14:8a:ba:28:13:46:89:76:e4: 63:5b:68:73:7b:60:ff:ae:b9:71:d1:e2:fc:15:00:06:ec:00: be:38:c0:a3:4a:52:61:57:52:f9:95:68:2c:cf:72:67:89:0a: 66:29:c6:01:87:62:40:76:81:be:78:7f:a2:42:e4:57:41:4a: 57:81:3f:de:3f:8e:ce:46:0a:78:39:46:5d:e2:a8:25:6b:91: 11:22:fc:bc:75:35:84:08:f2:90:35:6b:ee:a1:e5:fc:f8:82: 74:a9:91:d9:58:eb:a6:22:26:a5:e3:4c:5a:f6:a2:52:34:5d: ed:52:f6:06:e3:f8:0a:ca:73:33:d5:80:8a:63:22:ae:97:22: 34:ac:92:d4 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgITf2dRKa561aBNteKndMJN2Bs1XzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI0MDMwNTE3Mzc1M1oXDTI1MDMwNDE3NDI1M1owMzExMC8GA1UE AxMoNTNENEYwQkM4NzVEQzM1ODZBMDkxQjUxQkQ0RkU5MkIyOTA2NkU5QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDvLNMXCz3tIPNA68wO92E+keMj 90zmMPb6XBnKATe1CLyDR+cHVvWeIJMONGlFZzh8KwdVwHWHqaVk5cXPWD3fhBUa xah4KwtmI+jYzqRDlzFL/OziN04xN/19iAOe3lcpvu3GsiiUP5Nb4WkEuDUSIJlg GrxXEGnQgBPdguUx1PGNGgIChMfiWQ7mvbS9q5H8AU+9MyU0ElGEbQmDnTv8qiGA 0OwSl3eObcW6Bt/wzujuk/hGQ7jEUd7S5+veti8EZ/Jky2RC+Zg1VTkgjz9R7TLT AkT4RsbTzX10DTn4WBgqMaPsZTuqEnWKECjqEX/mjyTOYXWPqZdDidIlsusCAwEA AaOCA7EwggOtMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFPU8LyHXcNYagkb Ub1P6SspBm6bMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy8yOEI0NzFGNTNDNTg0OUFCN0MwOEJERjc5 QjVCQTNBOEM1MTE3QTEwRTFCMjVDMDdFOTE3MzU2QkUzMTFGMkNCLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzI4QjQ3MUY1M0M1ODQ5QUI3QzA4QkRGNzlCNUJBM0E4QzUxMTdBMTBFMUIy NUMwN0U5MTczNTZCRTMxMUYyQ0IvMC81M0Q0RjBCQzg3NURDMzU4NkEwOTFCNTFC RDRGRTkyQjI5MDY2RTlCLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADIc7UwDwQCAAIw CQMHACgBAAADQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAFIwDQYJKoZIhvcN AQELBQADggEBAGY8EuojJFw38otqQHiQ0qfQS9J3cvevs2ot+amPOXOBL/OT0enN axJAAZo8GXA2wpwhu1baK4CVsipaVo0E3AL9NBPmOmjdIlSg2HdyZx/7paLPiyAa fN8vr4yx3KrMCNO264cXe1q80qwcnx4nC+6bH+e+phSKuigTRol25GNbaHN7YP+u uXHR4vwVAAbsAL44wKNKUmFXUvmVaCzPcmeJCmYpxgGHYkB2gb54f6JC5FdBSleB P94/js5GCng5Rl3iqCVrkREi/Lx1NYQI8pA1a+6h5fz4gnSpkdlY66YiJqXjTFr2 olI0Xe1S9gbj+ArKczPVgIpjIq6XIjSsktQ= -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:05 2024 by rpki-client on console-ams.rpki-client.org