$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer File: 5D158BE61CA911BC34A887005B96056F4C474B1E.cer (raw, json) Hash identifier: uSwbk1tVvmiNlszen8llGd2V/5mHylG2O0aSguFa938= Subject key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 18127F71DD77B9A8B61C9E4C3EB3F95B52CED7FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:49:51 +0000 Certificate not after: Tue 04 Mar 2025 17:54:51 +0000 Subordinate resources: AS: 10476 AS: 14709 AS: 18809 AS: 21599 AS: 26105 AS: 27716 AS: 27755 AS: 28063 AS: 52264 IP: 138.186.88.0/22 IP: 181.197.0.0 -- 181.197.191.255 IP: 186.179.112.0/20 IP: 186.188.128.0/17 IP: 190.2.224.0/20 IP: 190.5.224.0/19 IP: 190.57.32.0/20 IP: 190.122.160.0/20 IP: 190.140.0.0/15 IP: 190.218.0.0/15 IP: 200.3.200.0/21 IP: 200.46.0.0/16 IP: 200.75.192.0/18 IP: 200.90.128.0/20 IP: 200.108.32.0/19 IP: 200.115.128.0/19 IP: 200.124.0.0/19 IP: 201.218.64.0/18 IP: 201.218.192.0/18 IP: 2800:ce0::/32 IP: 2803:600::/32 IP: 2803:e600::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:12:7f:71:dd:77:b9:a8:b6:1c:9e:4c:3e:b3:f9:5b:52:ce:d7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:49:51 2024 GMT Not After : Mar 4 17:54:51 2025 GMT Subject: CN=5D158BE61CA911BC34A887005B96056F4C474B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:14:d5:ec:76:f5:59:90:23:57:8b:e0:fa:81: 16:4e:f4:c7:42:5e:2f:84:67:d6:94:8b:79:e6:d6: fb:d2:1b:05:31:5c:40:bf:e3:a2:37:8e:28:de:50: 8d:69:11:71:45:d9:99:f3:1c:da:31:66:73:bf:37: 46:9d:f8:f3:c0:a4:7f:68:49:27:f2:2d:0b:fa:62: ad:70:82:98:ef:9f:2e:dc:5d:20:c3:28:4e:93:25: 8d:f0:80:d6:4e:ce:38:97:5c:09:9a:8b:98:23:46: 75:0d:8f:7b:d6:65:42:52:31:f4:e0:54:27:83:33: 84:6f:90:88:bf:6f:77:d3:6f:f2:1d:fe:b5:5f:0d: 8a:3b:40:65:a4:b9:fd:50:53:ff:c2:a0:f4:ec:70: e5:d6:77:73:87:cf:40:2b:fc:93:6e:b6:e2:d2:79: d5:53:c5:22:06:6c:6d:0a:1e:7a:83:c0:3c:94:3d: 35:87:fe:48:fd:f2:a1:61:5c:df:ce:96:71:9c:ee: da:a0:52:c8:42:2a:a9:ca:4e:24:df:0e:35:ad:59: 7a:54:e5:2b:4c:ba:72:8a:1e:dd:3d:16:b4:f9:c3: 45:21:9c:73:3d:53:88:7a:ae:53:e6:a1:2d:80:e8: af:f3:92:0e:ce:30:77:a1:04:68:cf:47:29:3b:c4: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.88.0/22 181.197.0.0-181.197.191.255 186.179.112.0/20 186.188.128.0/17 190.2.224.0/20 190.5.224.0/19 190.57.32.0/20 190.122.160.0/20 190.140.0.0/15 190.218.0.0/15 200.3.200.0/21 200.46.0.0/16 200.75.192.0/18 200.90.128.0/20 200.108.32.0/19 200.115.128.0/19 200.124.0.0/19 201.218.64.0/18 201.218.192.0/18 IPv6: 2800:ce0::/32 2803:600::/32 2803:e600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10476 14709 18809 21599 26105 27716 27755 28063 52264 Signature Algorithm: sha256WithRSAEncryption 9f:6b:1c:2b:4d:3b:56:e9:ad:e2:35:5d:66:cd:38:0f:00:c7: 69:84:f1:25:ec:9c:50:c1:a1:8c:64:67:48:72:94:0a:4d:66: 6a:85:1d:14:9a:ab:f7:af:ed:8f:e0:ce:55:29:fe:f6:87:6b: 00:ca:81:da:01:e2:14:d1:fe:b5:83:85:f6:f3:b2:29:93:27: 0b:f7:1e:d5:49:38:c0:f1:08:6b:33:6b:a0:4a:e9:cf:24:c2: 47:c8:e1:e5:e5:50:a8:a4:db:86:1b:55:13:b9:e2:6f:5f:e9: bb:44:a1:fa:b6:06:66:e8:32:c8:de:34:98:11:50:e3:fa:72: 88:90:30:5d:ab:e5:32:76:a6:5e:10:46:77:2d:dd:6d:c6:c5: 77:06:27:00:72:b3:07:7e:23:9d:ee:3d:c6:07:71:1d:37:9e: 90:15:3c:be:d4:71:ab:76:71:05:e7:41:69:20:28:da:a7:ef: 7f:6b:b9:46:6f:75:d4:1a:d9:65:b0:4c:9b:1c:8d:4e:a2:81: 93:ad:34:b6:6d:2f:e8:78:ac:5e:0a:70:1a:b4:c1:a7:b1:07: 7d:c6:3c:4c:8f:0a:60:3f:44:5e:92:17:63:57:21:d8:52:f3: b5:b7:3c:c2:af:10:ac:86:f9:e6:ba:e4:78:9f:fa:d8:8f:16: 36:9e:ba:a4 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUGBJ/cd13uai2HJ5MPrP5W1LO1/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ5NTFaFw0yNTAzMDQxNzU0NTFaMDMxMTAvBgNV BAMTKDVEMTU4QkU2MUNBOTExQkMzNEE4ODcwMDVCOTYwNTZGNEM0NzRCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFNXsdvVZkCNXi+D6gRZO9MdC Xi+EZ9aUi3nm1vvSGwUxXEC/46I3jijeUI1pEXFF2ZnzHNoxZnO/N0ad+PPApH9o SSfyLQv6Yq1wgpjvny7cXSDDKE6TJY3wgNZOzjiXXAmai5gjRnUNj3vWZUJSMfTg VCeDM4RvkIi/b3fTb/Id/rVfDYo7QGWkuf1QU//CoPTscOXWd3OHz0Ar/JNutuLS edVTxSIGbG0KHnqDwDyUPTWH/kj98qFhXN/OlnGc7tqgUshCKqnKTiTfDjWtWXpU 5StMunKKHt09FrT5w0UhnHM9U4h6rlPmoS2A6K/zkg7OMHehBGjPRyk7xAgXAgMB AAGjggRQMIIETDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdFYvmHKkRvDSo hwBblgVvTEdLHjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDU3MkVBMjY1OTcxNUIzQjAwMkI5MjI1 QTE1Mjk2MDhGQzI5MzI4QjBCRkVENzk1ODM3OUE4RUY5RDAwNkVGNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAw NUI5NjA1NkY0QzQ3NEIxRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzB8BAIAATB2AwQCirpYMAsD AwC1xQMEBrXFgAMEBLqzcAMEB7q8gAMEBL4C4AMEBb4F4AMEBL45IAMEBL56oAMD Ab6MAwMBvtoDBAPIA8gDAwDILgMEBshLwAMEBMhagAMEBchsIAMEBchzgAMEBch8 AAMEBsnaQAMEBsnawDAbBAIAAjAVAwUAKAAM4AMFACgDBgADBQAoA+YAMDoGCCsG AQUFBwEIAQH/BCswKaAnMCUCAijsAgI5dQICSXkCAlRfAgJl+QICbEQCAmxrAgJt nwIDAMwoMA0GCSqGSIb3DQEBCwUAA4IBAQCfaxwrTTtW6a3iNV1mzTgPAMdphPEl 7JxQwaGMZGdIcpQKTWZqhR0Umqv3r+2P4M5VKf72h2sAyoHaAeIU0f61g4X287Ip kycL9x7VSTjA8QhrM2ugSunPJMJHyOHl5VCopNuGG1UTueJvX+m7RKH6tgZm6DLI 3jSYEVDj+nKIkDBdq+UydqZeEEZ3Ld1txsV3BicAcrMHfiOd7j3GB3EdN56QFTy+ 1HGrdnEF50FpICjap+9/a7lGb3XUGtllsEybHI1OooGTrTS2bS/oeKxeCnAatMGn sQd9xjxMjwpgP0RekhdjVyHYUvO1tzzCrxCshvnmuuR4n/rYjxY2nrqk -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:48 2024 by rpki-client on console-fra.rpki-client.org